Privacy Policy
We collect as little personal information as we can get away with, we never sell it, and we tell you exactly what happens to it. This policy explains the detail.
On this page
1. Who we are and how to reach us
Operational Process Solutions of America (“OPSA”) is an operations consulting firm owned by Michael Smith and based at 270 Magazine Street, Richmond, Virginia 23219, United States. OPSA is the controller of the personal information described in this policy.
You can contact us about privacy at any time:
- Email: Michael@opsa.mtechmpl.com
- Telephone: +1 925 807 3982
- Post: Privacy Enquiries, OPSA, 270 Magazine Street, Richmond, Virginia 23219, USA
2. Scope of this policy
This policy applies to the website at opsa.mtechmpl.com and to personal information we receive in the course of enquiries, proposals and consulting engagements. It does not apply to third-party websites that we may link to; those sites publish their own policies and we do not control them.
3. Information we collect
Information you give us
When you submit an enquiry, email us or telephone us, we receive the details you choose to provide. Typically that is your name, company name, email address, telephone number, the service you are interested in and the description of your situation.
Information we collect automatically
Our hosting provider records standard server log data for every request: IP address, date and time, requested page, referring page, browser type and operating system. These logs exist for security and reliability purposes and are retained for a limited period.
If you accept optional analytics cookies, we also receive aggregated statistics about which pages are visited and for how long. See our Cookie Policy.
Information we receive during an engagement
Consulting work may expose us to business records that contain personal information about your staff, such as names, job titles, schedules and performance data. We process that information solely to perform the engagement, under the confidentiality terms of our contract with you.
What we do not collect
This website does not take payments and does not ask for financial account details, government identification numbers or health information. Please do not send such information through the website form.
4. Why we use it, and our lawful basis
| Purpose | Information used | Basis |
|---|---|---|
| Responding to your enquiry | Name, contact details, message | Steps taken at your request prior to a contract |
| Preparing and delivering a proposal | Contact and company details | Performance of a contract / legitimate interests |
| Delivering a consulting engagement | Business records provided by the client | Performance of a contract |
| Keeping the website secure and available | Server log data | Legitimate interests in security |
| Understanding which pages are useful | Aggregated analytics | Your consent |
| Meeting tax and record-keeping duties | Contract and invoice records | Legal obligation |
We do not use your information for automated decision-making, profiling or advertising, and we do not build marketing profiles of website visitors.
5. Marketing communications
We do not operate a marketing mailing list and we do not send unsolicited bulk email. If we ever introduce a newsletter it will be strictly opt-in, with a working unsubscribe link in every message, and existing contacts will not be added without asking first.
6. Sharing your information
We do not sell, rent or trade personal information. We share it only in these situations:
- Service providers. Our website host, email provider and accounting software provider process data on our behalf under written terms that restrict them to that purpose.
- Professional advisers. Our accountant and, where necessary, our attorney or insurer, in connection with a specific matter.
- Legal requirements. Where we are required to disclose information by law, court order or a lawful request from a public authority.
Client engagement material is never shared with another client, used as a case study, or published in any form without prior written permission. The case studies on this website were published with that permission.
7. Where information is stored
Our website and business systems are hosted in the United States. Our consultants work from the United States. We do not routinely transfer personal information outside the United States; if that ever became necessary for a specific engagement, we would agree it with the client in writing beforehand.
8. How long we keep it
| Record type | Retention |
|---|---|
| Enquiries that do not become clients | 12 months from last contact |
| Proposals not accepted | 24 months |
| Client engagement files | 7 years after engagement close |
| Invoices and accounting records | 7 years, as required for tax purposes |
| Website server logs | Up to 90 days |
| Analytics data (if consented) | Up to 14 months, aggregated |
Client working files are returned or securely destroyed at engagement close on request, subject to the record-keeping obligations above.
9. How we protect it
Security measures are proportionate to a six-person consultancy handling commercially sensitive but not regulated data. They include TLS encryption on this website, encrypted business email and file storage, multi-factor authentication on all business accounts, access limited to the consultants assigned to an engagement, encrypted laptops, and an annual review of accounts and permissions.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and any required authority without undue delay, and tell you what happened and what we are doing about it.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights. We honour them for anyone who asks, regardless of jurisdiction, where it is practical to do so:
- Ask what personal information we hold about you and receive a copy
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete information we no longer need to keep
- Object to, or ask us to restrict, a particular use
- Withdraw consent for analytics cookies at any time
- Ask us not to sell or share your information — we do not do either
Virginia residents have rights under the Virginia Consumer Data Protection Act, and residents of other states may have comparable rights under their own laws. To exercise any right, email Michael@opsa.mtechmpl.com with the words “privacy request” in the subject line. We respond within 30 days and will never charge you for a reasonable request. If we decline a request we will explain why and tell you how to appeal, and an appeal is reviewed by the owner personally.
11. Children
This website is aimed at business decision-makers. It is not directed at children and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has sent us information, contact us and we will delete it.
12. Changes to this policy
We review this policy at least annually and whenever our practices change. The effective date at the top of the page always reflects the current version. Material changes affecting existing clients are communicated by email as well as being posted here.
If anything in this document is unclear, please contact us before relying on it. We will explain it in plain language and, where a change is warranted, we will make it and note the revision date above.