Data protection

Privacy notice

Version 2026-08-27-v1 · Last updated 27 August 2026

This notice explains how personal information is handled when you contact Oclas, use the website, request access to an Oclas prototype or provide prototype feedback.

Data controller
Sheyi N. Lisk-Carew, trading as Oclas
Spitfire HQ, Swaislands Drive, Dartford DA1 4HS, United Kingdom
Email: [email protected]

Information collected

Purposes and lawful bases

PurposeLawful basis
Responding to enquiries and assessing prototype-access requestsLegitimate interests in operating and developing the Oclas practice and, where relevant, taking steps at your request before an engagement.
Administering approved access and recording confidentiality/evaluation termsPerformance of the evaluation agreement and legitimate interests in protecting the prototype and intellectual property.
Securing the website, detecting misuse and revoking accessLegitimate interests and compliance with applicable data-protection security obligations.
Reviewing prototype feedback and contacting testers who request follow-upLegitimate interests in improving the prototype. Where you ask for follow-up, Oclas uses the information to respond to that request.
Capturing evaluation problem records, assigning them to a demonstration job-role queue and sending confirmations to the raiser and Oclas administratorPerformance of the evaluation agreement and legitimate interests in testing the workflow, maintaining an audit trail and assessing the prototype.

Providing information is voluntary, but required fields are necessary to assess access or operate the requested prototype workflow. Oclas does not use prototype data for solely automated decisions that produce legal or similarly significant effects.

How the information is protected

The Oclas prototype uses HTTPS to encrypt information in transit. Tester contact details, professional details, intended-use information and written feedback are encrypted in the portal database. Access codes and first-visit tokens are stored as one-way hashes. Administrative access is restricted and approved-user status is checked on each visit so access can be withdrawn immediately.

Submitted problem records are encrypted in the portal database. Confirmation emails to the raiser and Oclas administrator may contain the submitted evaluation fields. Assignment to a job role is illustrative and is recorded in the demonstration workflow; it does not email, instruct or legally assign work to another person. Email delivery is handled by Oclas’s email provider, so no confidential, client-identifying or commercially sensitive information should be submitted.

Before submission, the “New problem” screen creates a preview in your browser. If you submit the record, the problem, evidence, working hypothesis, proposed next action and demonstration role are stored in the encrypted prototype database so that Oclas can administer the evaluation and review how the workflow is used.

You must use only synthetic or fully anonymised information. Do not enter confidential, personal, client-identifying, safety-critical or commercially sensitive information. The prototype is an evaluation environment and is not a production record system.

Sharing and international processing

Oclas uses service providers for website hosting, email and meeting scheduling. They process information only where needed to provide those services. Some providers may process information outside the United Kingdom. Where required, Oclas will use an appropriate transfer mechanism or other safeguard.

Personal information is not sold. It may be disclosed where required by law or where reasonably necessary to establish, exercise or defend legal rights.

Retention

Cookies

The prototype uses strictly necessary, secure cookies to keep approved testers and administrators signed in. These cookies are not used for advertising. If you choose an external meeting-booking link, the external provider’s own privacy and cookie information applies.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict use of your information, object to processing, or receive information in a portable format. To exercise a right, contact [email protected]. Oclas may need to verify your identity before acting on a request.

If you are outside the United Kingdom, local data-protection law may provide additional rights. Oclas will consider any applicable requirement when responding to a request.

You may complain to the UK Information Commissioner’s Office at ico.org.uk. Please contact Oclas first where possible so the concern can be addressed promptly.

Changes to this notice

This notice may be updated as the prototype and Oclas systems develop. The current version and date will always appear at the top of this page. A material change affecting approved testers may require a renewed acknowledgement.