Privacy & Cookie Policy

OSISIS · LEGAL

Privacy & Cookie Policy

Last updated: 11-JUL-2026

This policy explains what information Osisis collects across osisis.com and structure.osisis.com, why we collect it, who we share it with, and the choices and rights available to you — including how we use cookies and similar technologies.

1. Who we are

Osisis (“we,” “us,” “our”) provides fractional and as-a-service support operations and technical operations consulting, and sells self-service process templates and tools through the Structure Shelf (structure.osisis.com). This policy covers both osisis.com and structure.osisis.com.

If you have questions about this policy or how we handle your information, see Section 13 for how to reach us.

2. Information we collect

Information you provide directly

Contact form submissions — name, email address, and message content when you reach out through our contact form.
Interactive tools — if you use a free tool such as The Access Audit and choose to leave your email for a follow-up, we collect that email address and, where relevant, a summary of your results.
Structure Shelf purchases — when you buy a digital product, checkout is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects your payment details directly; we receive your name, email, and order details from them in order to fulfill your purchase and provide support.

Information collected automatically

Usage data — pages visited, time on page, referring URL, browser and device type, and approximate location (derived from IP address), collected via Google Analytics.
Server and hosting logs — standard technical logs (IP address, timestamps, requested pages) generated by our hosting provider as part of normal web server operation.

We do not knowingly collect sensitive categories of personal information (such as health, financial account, or government ID data) through this site.

3. How we use your information

To respond to inquiries submitted through our contact form
To deliver purchased Structure Shelf products and provide related customer support
To follow up with visitors who voluntarily request it through a tool like The Access Audit
To understand how the site is used and improve its content and structure, using aggregated analytics data
To detect and prevent spam, abuse, or fraudulent activity
To meet legal, tax, and accounting obligations related to purchases

We do not sell your personal information, and we do not use it for third-party advertising.

4. Legal basis for processing (EU/UK visitors)

If you’re located in the European Economic Area or United Kingdom, we rely on the following legal bases under GDPR / UK GDPR:

Consent — for non-essential cookies and analytics, and for voluntary email sign-ups (e.g. through The Access Audit’s follow-up option)
Contract necessity — to process and fulfill a Structure Shelf purchase you’ve made
Legitimate interests — to respond to inquiries you initiate, maintain site security, and understand aggregate site usage, balanced against your rights and interests
Legal obligation — where we need to retain records for tax or accounting purposes

5. How we share information

We don’t sell personal information. We share it only with the service providers that help us run the site and business, each acting under their own privacy terms:

PROVIDER	PURPOSE	WHAT’S SHARED
Lemon Squeezy	Merchant of record for Structure Shelf purchases — payment processing, tax handling, order fulfillment	Name, email, payment details, order details
Formspree	Processes contact form and tool lead-capture submissions	Name, email, message content
Google Analytics	Site usage analytics	Usage data, approximate location, device/browser info
Google Fonts	Delivers the typefaces used on this site	IP address (via standard font-loading request)
Hosting provider	Hosts and serves the site (Netlify/Vercel)	Standard server request logs

We may also disclose information if required by law, or to protect the rights, property, or safety of Osisis, our users, or others.

6. Cookies & similar technologies

Cookies are small text files stored on your device that help a site function and help us understand how it’s used. We use the following categories:

CATEGORY	EXAMPLES	PURPOSE	CAN YOU DECLINE?
Strictly necessary	Session / security cookies	Core site functionality — these don’t require consent	No, required for the site to work
Analytics	Google Analytics (_ga, _gid, _gat)	Understand aggregate site usage and improve content	Yes
Third-party (checkout)	Lemon Squeezy cookies	Set only if you visit structure.osisis.com to complete a purchase — governed by Lemon Squeezy’s own privacy policy	Depends on Lemon Squeezy’s settings
YOUR CHOICES You can decline or delete analytics cookies at any time through your browser settings, or by using the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). Blocking strictly necessary cookies may affect how parts of the site function.

Where required by law, we will request your consent before setting non-essential cookies such as analytics cookies.

7. Data retention

Contact form and lead-capture submissions — retained for as long as needed to respond to your inquiry and for a reasonable period afterward, then deleted or anonymized.
Purchase records — retained as required for tax, accounting, and customer support purposes, generally for the period required by applicable law.
Analytics data — retained according to Google Analytics’ standard retention settings.

8. Your privacy rights

If you’re in the EU, UK, or EEA

Under GDPR / UK GDPR, you have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your information (“right to be forgotten”)
Restrict or object to certain processing
Receive your data in a portable format
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with your local data protection supervisory authority

If you’re in California

Under the CCPA/CPRA, you have the right to know what personal information we collect, request deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law.

Everywhere else

Regardless of location, you can contact us at any time to ask what information we hold about you, request a correction, or request deletion — we’ll honor reasonable requests as a matter of practice, not only where legally required.

To exercise any of these rights, see Section 13.

9. International data transfers

Some of the service providers listed in Section 5 (including Google and Lemon Squeezy) may process data outside your home country, including in the United States. Where this involves a transfer from the EU/UK, those providers maintain appropriate safeguards such as Standard Contractual Clauses.

10. Children’s privacy

Our site and services are directed at businesses and professionals, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we’ll delete it.

11. Data security

We rely on reputable third-party providers (Lemon Squeezy, Formspree, our hosting provider) who maintain their own security standards for the data they process on our behalf. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. We encourage you to review this page periodically.

13. Contact us

For any questions about this policy or to exercise your privacy rights, contact us at info@osisis.com.