This notice explains what personal data Ocora collects through ocora.ai, why, and your rights. We keep it short and only collect what we need.
Who we are
Ocora Limited, a company registered in Ireland with company number IE797978 ("Ocora", "we"), is the controller of the personal data described here. Contact us about privacy at hello@ocora.ai.
Ocora delivers its services with its partner Kumulus. If you ask us to put you in touch with Kumulus, or your enquiry needs their delivery team, we share the details you gave us with them for that purpose.
What we collect and why
When you contact us or send a funding enquiry
We collect the name, email address, company and message you enter. We use them to reply and to discuss the work you asked about. Our lawful basis is our legitimate interest in responding to enquiries, or taking steps at your request before entering into a contract. The forms are processed by Formspree, which emails the submission to us.
When you use the AI Benchmark
We collect your name, email address, company and your answers, and calculate your score. We use them to show your result and to follow up about your organisation's AI readiness. Our lawful basis is legitimate interest. The results are sent to us by email through Formspree and are also stored in a Google spreadsheet in our Google Workspace account. Your browser also keeps a copy of your results on your device so you can see them again; clearing your browser data removes it.
When a Microsoft seller refers an opportunity
We collect the seller's name, work email, role, area and phone number, and the customer and opportunity details they enter, which may include a named customer contact if the customer has agreed to an introduction. We use this to assess the opportunity, contact the seller and, where agreed, the customer, and to shape and deliver the work with Kumulus. Our lawful basis is legitimate interest in responding to business referrals. Submissions are processed by Formspree, which emails them to us.
When you subscribe to the Briefing or The Boardroom Brief, or download a gated resource
We collect your email address (and, if you give it, your name and company) and a record of your consent. We ask you to confirm your address by clicking a link in an email before we send anything else. We use it to send the emails or the resource you asked for and, if you agreed, occasional related updates. Our lawful basis is your consent, which you can withdraw at any time with the unsubscribe link in every email. Subscriptions and emails are managed by Brevo (Sendinblue SAS, France), which records whether emails are opened or links clicked so we can see what is useful.
When you play the Boardroom game
If you play our Boardroom game at an event or online, we store the name you enter (optional; a nickname is fine), your group code, your score, the edition you played and the decisions you made, against a random identifier kept in your browser. We use them to show your group's leaderboard, which everyone using the same group code can see, and to show players how others in the group decided. Our lawful basis is legitimate interest in running the game. Scores are stored on our web host and are deleted after 30 days, or sooner when the event organiser resets the group's leaderboard.
When you browse the site
We use Umami, a privacy-focused analytics service that does not use cookies or collect personal data. It counts page views, downloads and clicks in aggregate so we can see which content is useful.
Cookies
We only set non-essential cookies if you click "Accept" in our cookie banner. If you accept, we load the LinkedIn Insight Tag, which uses cookies to tell us, in aggregate, which kinds of organisations and job roles visit our site, to measure the results of our LinkedIn activity, and to let us show our LinkedIn posts and ads to people who have visited. LinkedIn (LinkedIn Ireland Unlimited Company) receives your IP address, browser details and the pages you visit, and may link this to your LinkedIn account; see LinkedIn's cookie policy. Our lawful basis is your consent.
If you click "Reject", the LinkedIn tag never loads. We remember your choice in your browser's local storage (not a cookie). You can change your mind at any time with "Cookie settings" at the bottom of every page.
Like most websites, our pages load fonts, styles and scripts from third-party services (Google Fonts, Tailwind CSS and unpkg), and resource videos play through YouTube's privacy-enhanced mode. These services receive your IP address when your browser requests their files. Our web host keeps standard server logs for security and troubleshooting.
Who we share it with
We do not sell your data. We share it only with the service providers named above, who process it on our behalf under contract, and with Kumulus where your enquiry needs their involvement. Some providers may process data outside the UK and European Economic Area; where they do, they rely on recognised safeguards such as adequacy decisions or standard contractual clauses.
How long we keep it
- Enquiries and AI Benchmark results: up to 2 years after our last contact.
- Briefing and resource subscribers: until you unsubscribe, then removed within 30 days, except a minimal record that you opted out.
- Boardroom game scores: 30 days, or until the group's leaderboard is reset.
Your rights
You can ask to access, correct or delete your personal data, object to or restrict how we use it, ask for a copy in a portable format, and withdraw consent at any time. Email hello@ocora.ai and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the data protection authority where you live: in the UK, the Information Commissioner's Office (ico.org.uk); in Ireland, the Data Protection Commission (dataprotection.ie).
Changes
We will update this notice if what we collect or how we use it changes, and show the date of the latest version at the top.