Privacy Notice

For the processing described in this Privacy Notice, the controller is: ONE MARKET LTD Trading as OPERIUM Company number: 11161336 Registered office: 128 City Road, London, England, EC1V 2NX Email: commercial@operium.store Telephone: +44 7925 367011

This Privacy Notice applies to: (a) visits to operium.store; (b) corporate contact and enquiry forms; (c) newsletter subscriptions; (d) OPERIUM corporate accounts and sign-in functions; (e) requests for demonstrations, partnerships or product information; (f) technical, security and access logs generated by the corporate website; and (g) communications with ONE MARKET LTD about the OPERIUM website. It does not replace the privacy notice of a separate product operator. VillaTax is operated in Indonesia by PT Asiah Legal Jaya. Personal data processed through the VillaTax application is governed by the VillaTax privacy notice published on the VillaTax website.

Depending on how you use the website, we may process: Contact data: name, business name, job title, email address, telephone number and message content. Account data: name, email address, account identifier, authentication status, account role and security-related records. Newsletter data: email address, subscription date, consent or subscription record, language preference and unsubscribe status. Business-enquiry data: company information, product interest, project requirements, communications and information that you choose to provide. Technical data: IP address, browser type, device type, operating system, requested pages, timestamps, referring page, security events and diagnostic information. Preference data: language, theme and cookie choices. Billing metadata: where ONE MARKET LTD directly supplies a paid product, transaction reference, plan, amount, currency, invoice status and payment provider status. ONE MARKET LTD does not receive complete card numbers or card security codes from payment providers.

We collect personal data: (a) directly from you; (b) automatically when your browser or device communicates with the website; (c) from authentication, hosting, email, security or payment providers acting for the relevant service; and (d) from a business or organisation that authorises you to use an account on its behalf.

We process data for the following purposes: Responding to enquiries and requested communications: necessary to take steps at your request and for our legitimate interest in managing business communications. Creating and administering accounts: necessary to perform the requested service or take steps before entering into a contract. Operating and securing the website: necessary for our legitimate interests in maintaining reliable, secure and fraud-resistant systems. Providing contracted products or services: necessary for performance of the relevant contract. Managing invoices, accounting and payment records: necessary for contract performance and compliance with legal obligations. Sending a requested newsletter: based on consent or another lawful basis permitted for the relevant recipient. You may unsubscribe at any time. Improving the website: based on our legitimate interest in understanding and improving website performance, using proportionate data and subject to cookie and storage-consent requirements. Preventing misuse and enforcing legal rights: based on our legitimate interests and, where applicable, legal obligations. Complying with law and competent authorities: necessary to comply with a legal obligation.

We do not sell personal data. We may share the minimum necessary personal data with: (a) hosting and infrastructure providers; (b) authentication and account-service providers; (c) transactional email and newsletter providers; (d) security, monitoring and error-detection providers; (e) payment processors and banks where ONE MARKET LTD is the relevant supplier; (f) professional advisers, including accountants, auditors and lawyers; (g) authorities where disclosure is required by law; and (h) a buyer, investor or successor where a corporate transaction requires proportionate due diligence and lawful safeguards. A separate product operator does not receive OPERIUM corporate website data merely because its product is listed on operium.store.

Products linked from operium.store may collect information under their own privacy notices. Before using a product, users should review the privacy notice displayed on that product’s website. For VillaTax, PT Asiah Legal Jaya is responsible for the Indonesian product relationship and publishes the applicable VillaTax privacy notice. ONE MARKET LTD does not independently use VillaTax customer data for its own advertising or unrelated commercial purposes.

Some service providers may process data outside the United Kingdom. Where data is transferred to a country that is not covered by an applicable UK adequacy regulation, we use an appropriate transfer mechanism where required, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. We also consider whether additional technical or organisational measures are appropriate for the transfer.

We retain personal data only for as long as reasonably necessary for the relevant purpose. Unless a longer period is required by law, litigation or a genuine security investigation, the following standard periods apply: Corporate contact enquiries: up to 24 months after the last substantive communication. Newsletter subscription data: until unsubscribe or withdrawal, with a limited suppression record retained where necessary to respect the unsubscribe request. Corporate account data: for the life of the account and up to 12 months after closure, except where longer retention is required for legal, billing or security records. Invoices, accounting and transaction records: for the period required by applicable tax and company-record laws. Security and access logs: normally up to 12 months, unless required for an active security investigation. Cookie and preference records: for the duration stated in the Cookie Policy or until the user changes the preference. Unsuccessful general applications or recruitment enquiries: normally up to 6 months after the process ends, unless the person consents to a longer period.

We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Access is limited according to operational need. No internet transmission or storage system can be guaranteed to be completely secure. We investigate suspected incidents and take appropriate action in accordance with applicable law.

Subject to the conditions and exceptions in applicable law, you may have the right to: (a) request access to your personal data; (b) request correction of inaccurate or incomplete data; (c) request deletion; (d) request restriction of processing; (e) object to processing based on legitimate interests; (f) receive certain data in a portable format; (g) withdraw consent at any time where processing is based on consent; and (h) complain to a supervisory authority. Requests may be sent to commercial@operium.store. We may need to verify your identity before acting on a request.

You may complain directly to ONE MARKET LTD using: commercial@operium.store You also have the right to complain to the United Kingdom Information Commissioner. Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF United Kingdom

You may unsubscribe from marketing email at any time through the unsubscribe link in the message or by contacting us. Service, security, billing and account communications are not marketing communications and may continue where necessary to provide or secure a requested service.

Information about cookies, local storage and similar technologies is provided in the Cookie Policy. Non-essential technologies will be controlled in accordance with the consent requirements described there.

The OPERIUM corporate website does not make decisions producing legal or similarly significant effects solely through automated processing. A specific software product may use automation for its documented features. The applicable product privacy notice provides any additional information required for that processing.

The OPERIUM corporate website and the products presented through it are intended for business and professional contexts and are not directed to children. Do not submit a child’s personal data unless this is lawful and strictly necessary for an applicable product function.

We may update this Privacy Notice to reflect changes in processing, law, technology or service providers. The current version is identified by the “Last updated” date. Where a material change directly affects an existing account or service, we will use an appropriate method to notify affected users.

ONE MARKET LTD 128 City Road London, England, EC1V 2NX Email: commercial@operium.store Telephone: +44 7925 367011