Skip to main content

Privacy & Cookies Notice

  1. About OWB and How to Contact Us
  2. What Information We Collect and Why
  3. Marketing Communications (UK GDPR + PECR)
  4. Website Usage and Analytics
  5. Email Tracking
  6. Social Media Monitoring
  7. Who We Share Your Data With
  8. International Data Transfers
  9. Your Rights
  10. How We Keep Your Information Secure
  11. How Long We Keep Your Data
  12. Cookies
  13. Changes to This Notice

1. About OWB and How to Contact Us

Oakley Wilkinson Bryan Ltd (“OWB”) operates as part of the DRPG Group. For the purposes of data protection law (UK GDPR and the Data Protection Act 2018), OWB and DRPG jointly determine how personal data is processed, particularly because all systems, data hosting, infrastructure, and processing activities are centrally managed by DRPG.

OWB Registered Address:

Unit 212, Ikon Estate, Droitwich Road, Bury, DY10 4EU.

DRPG Group Data Protection Officer (Voluntary Appointment)

DRPG has voluntarily appointed a Group Data Protection Officer to oversee data protection compliance across all DRPG Group companies, including OWB. This is not a statutory DPO appointment under UK GDPR Article 37, but a voluntary governance measure.

Data Protection Officer (DRPG Group)

Email: dpo@drpgroup.com

Address: DRPG, Unit 212, Ikon Estate, Droitwich Road, Bury, DY10 4EU.

OWB Privacy Contact

For day‑to‑day questions relating specifically to OWB’s services:

Email: info@owb.uk.com

Address: Unit 212, Ikon Estate, Droitwich Road, Bury, DY10 4EU.

Regulator Contact

If you require independent advice or wish to raise a concern, you can contact:Information Commissioner’s Office (ICO)

Website: http://www.ico.org.uk

What Information We Collect and Why

OWB is registered with the ICO under registration number Z2447334.

2. What Information we Collect and Why

We collect personal data directly from you during interactions with OWB and DRPG.

Typically, this includes:

• Name
• Business email
• Business telephone number
• Business address
• Communications and engagement records
• Website usage data (with consent)
• Marketing preferences

We do not collect special category data (such as health, ethnicity, sexual orientation, or biometrics) unless you explicitly provide it for a specific purpose and we have a lawful basis to process it.

Why we use your data (Lawful Bases under Art. 6 UK GDPR)

We process your data for:

• Providing and managing services (Legitimate Interests / Contract)
• Managing enquiries (Legitimate Interests)
• Sending relevant B2B marketing (Legitimate Interests + PECR compliance)
• Responding to requests or complaints (Legitimate Interests)
• Improving websites, platforms and services (Consent for analytics)
• Running social media campaigns (Consent / Legitimate Interests)

3. Marketing Communications (UK GDPR + PECR)

Where permitted under PECR, we may send you marketing communications regarding OWB or DRPG services that may be relevant to your business.

You can opt out at any time using the unsubscribe link or by contacting us.

We only send electronic marketing where PECR allows us to do so.

Any marketing that uses tracking pixels or cookies is only activated with your consent.

4. Website Usage and Analytics

We use website analytics to understand usage patterns and improve performance. These may include:

• Google Analytics
• Lead Forensics
• Social media tracking scripts (e.g., LinkedIn Insights, Meta Pixel)

Important (PECR Compliance)

All non‑essential cookies, including analytics, social media and advertising cookies, are only activated with your explicit consent via our cookie banner or settings tool.You can change or withdraw your consent at any time.

5. Email Tracking

Some marketing emails may contain tracking pixels that monitor open rates, link clicks, and device types.

Because tracking pixels are treated as non‑essential technologies under PECR, they are only used if you have given consent.

6. Social Media Monitoring

We monitor public social media commentary about OWB and DRPG to understand sentiment and improve engagement.

We:

• Only use publicly available information
• Do not combine this with other data to profile individuals
• Provide a separate privacy notice when running campaigns that collect data directly from users

7. Who we Share your Data With

To provide our services, we may share data with DRPG‑approved processors including:

• Email and CRM platforms (e.g., Campaign Monitor, HubSpot)
• Online advertising platforms (e.g., Google Ads, Meta Ads)
• Analytics platforms (e.g., Google Analytics, Lead Forensics)
• Creative, design and print suppliers
• IT systems and hosting providers managed by DRPG

These organisations operate under Data Processing Agreements that ensure compliance with UK GDPR.

8. International Data Transfers

Some service providers process data outside the UK.

Where this occurs, we ensure the use of:

• The UK International Data Transfer Agreement (IDTA), or
• The UK Addendum to the EU Standard Contractual Clauses, or
• Other recognised UK GDPR safeguards

Copies of transfer safeguards can be requested.

9. Your Rights

Under UK GDPR, you have the following rights:

• Right to be informed
• Right of access (Subject Access Request)
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to object, including an absolute right to object to direct marketing
• Right to data portability
• Right to withdraw consent
• Right to complain to the ICO

All requests can be made via dpo@drpgroup.com or info@owb.uk.com.

10. How we Keep your Information Secure

DRPG operates an ISO 27001:2022‑certified Information Security Management System (ISMS), which covers all systems, infrastructure and services used to process personal data on behalf of OWB. This certification demonstrates that DRPG’s security controls are independently audited and meet internationally recognised standards, supporting our obligations under UK GDPR Article 32.

This certification does not replace our legal responsibilities under UK GDPR or the Data Protection Act 2018, but it acts as an additional assurance that robust, risk‑based security measures are in place across the DRPG Group.

DRPG manages all technical and organisational security controls on behalf of OWB, including:

• Encryption in transit (HTTPS)
• Access controls
• Physical, organisational, and technical safeguards
• Supplier due diligence and contractual controls
• Mandatory training for employees

11. How Long We Keep Your Data

We only keep your personal information for as long as we need to

Clients: We retain full records while you are an active client.

Former clients: Key records are retained for business, financial, and audit purposes.

Prospective clients: 3 years from last meaningful interaction.

Website enquiries: 90 days if no contact is established.

You may opt out of marketing at any time.

12. Cookies

Cookies help us deliver a functional and personalised website.

Essential cookies

• Enable core site functionality and do not require consent.

Non‑essential cookies (Consent Required)

• Analytics cookies
• Advertising cookies
• Social media scripts
• Tracking pixels in marketing emails

You can manage your cookie preferences via our website’s cookie banner or settings panel.

More information: www.allaboutcookies.org

13. Changes to this Notice

We may update this notice from time to time.

We will continuously refine this Privacy Notice to make sure we are complying with our obligations to be transparent about how we use your personal information and that it is as concise, transparent, intelligible and as easily accessible as it can be.

If changes significantly affect how we process your data, or introduce new purposes or technologies, we will notify you directly.

Effective Date: 12/02/2026

Close Menu