Privacy Policy
Last updated: 5 September 2026
1. General
OTU Studio LLC, part of On the User SLU ("OTU", "we", "us"), is the controller responsible for the personal data described in this Policy.
This Policy explains how we collect, use, share and protect personal data when you visit ontheuser.com, contact us, book a call, subscribe to our emails, or purchase our services and courses. It also sets out your rights and how to exercise them.
Our registered address is Cami dels Plans 62, 8, AD400 La Massana, Andorra.
US clients are invoiced through our US entity, whose registered name and address appear on your contract and on every invoice.
2. Collection of personal data
We collect personal data in three ways.
Directly from you, when you complete a form, book a call, subscribe to our email list, purchase a service or course, or correspond with us.
Automatically, when you use the website. This is technical and usage data, collected through cookies and similar technologies as described in section 10.
From third parties and public sources, as described in section 4.
You are not obliged to provide any personal data to us. Where data is necessary for us to perform a contract or to respond to your enquiry, and you choose not to provide it, we may be unable to provide the service you have asked for.
3. What information do we collect?
We may collect and process the following categories of personal data:
| Category | Examples |
|---|---|
| Identity and contact data | Name, email address, company name, job role, website |
| Enquiry data | The content of forms, messages and correspondence you send us |
| Booking data | The date, time and timezone of a call you schedule with us |
| Transaction data | Details of services and courses purchased, billing address, and records of payments made to and from you |
| Marketing data | Your subscription preferences, and whether our emails were opened and their links followed |
| Technical and usage data | IP address, browser type and version, device type, operating system, approximate location, pages viewed, referring source, and time spent on the site |
We do not receive or store your full payment card details. Card data is collected and processed directly by our payment processor.
We do not seek to collect special category data, meaning data revealing health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or sexual orientation. We ask that you do not submit such data to us. Our services are not directed at children under 16 and we do not knowingly collect their data.
4. What information do we receive from third parties?
We receive personal data about you from the following sources:
- Analytics and advertising providers, who supply aggregated technical and usage data about visitors to the website.
- Public sources, including your company website, LinkedIn, and public company and funding databases. We use these to research an organisation before or after a call so that the conversation is productive.
- Commercial business-to-business databases, which supply business contact details used for outbound business communications. Where we contact you on this basis, every message identifies us and tells you how to stop receiving them.
- Our service providers, including our payment processor and scheduling provider, who supply data relating to your transactions and bookings.
5. How do we use this information, and what is the legal basis for this use?
We process your personal data on the following bases:
Performance of a contract, or steps taken at your request before entering into one. To respond to your enquiry, conduct your call, deliver the services or course you have purchased, take payment, and provide support.
Compliance with a legal obligation. To maintain accounting and tax records, and to respond to lawful requests from competent authorities.
Our legitimate interests, where these are not overridden by your rights and freedoms. Specifically:
| Purpose | Our legitimate interest |
|---|---|
| Measuring how the website is used | Understanding which content is read so that we improve it |
| Advertising measurement | Assessing whether our marketing reaches a relevant audience |
| Business-to-business outbound communications | Offering our services to organisations likely to benefit from them |
| Maintaining records of agreements and correspondence | Establishing, exercising or defending legal claims |
| Securing our website and systems | Preventing fraud and misuse |
Your consent, where you have subscribed to our marketing emails. You may withdraw that consent at any time, as described in section 6.
6. Withdrawing consent or otherwise objecting to direct marketing
Where we rely on your consent, you may withdraw it at any time. Every marketing email we send contains an unsubscribe link, and using it takes effect immediately. You may also email us at hello@ontheuser.com and we will action your request.
Where we send business-to-business communications on the basis of our legitimate interests, you have the right to object at any time. A single reply asking us to stop is sufficient, and we will add you to our suppression list so that you are not contacted again.
Withdrawing consent does not affect the lawfulness of any processing carried out before its withdrawal.
7. Your rights
Subject to the law applicable to you, you have the following rights in relation to your personal data:
- Access. To be told whether we process your data and to receive a copy of it.
- Rectification. To have inaccurate data corrected and incomplete data completed.
- Erasure. To have your data deleted where there is no continuing lawful basis for us to hold it.
- Restriction. To require that we limit our processing in certain circumstances.
- Objection. To object to processing carried out on the basis of our legitimate interests, and to object to direct marketing at any time.
- Portability. To receive data you have provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller.
- Withdrawal of consent. As described in section 6.
To exercise any of these rights, contact us at hello@ontheuser.com. We will respond within one month. There is no charge for making a request.
If you are not satisfied with our response, you have the right to lodge a complaint with your supervisory authority. In Andorra this is the Agència Andorrana de Protecció de Dades; in the United Kingdom, the Information Commissioner's Office.
8. Transfers of your personal data
We share personal data with the service providers who support our operations. Each processes data on our instructions and under a written agreement.
| Provider | Purpose | Location |
|---|---|---|
| Framer | Website hosting | US / EU |
| Google Analytics | Website analytics | US |
| Meta | Advertising measurement | US |
| Cal.com | Call scheduling | US |
| Loops | Email delivery | US |
| Stripe | Payment processing | US |
| Google Workspace | Business email and documents | US |
We may also disclose personal data to our professional advisers, including accountants and lawyers, and to competent authorities where we are legally required to do so. If our business is sold or reorganised, personal data may be transferred as part of that transaction.
We do not sell your personal data.
Several of the providers listed above are located in the United States, and OTU operates from Andorra. Where personal data is transferred outside your jurisdiction, we rely on the safeguards implemented by the recipient, which in practice are the European Commission's Standard Contractual Clauses and, for certain US providers, certification under the EU-US Data Privacy Framework. Andorra is the subject of an adequacy decision of the European Commission. Details of the safeguards applying to a specific transfer are available on request.
9. Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected.
- Enquiries that do not result in an engagement: two years from your last contact with us.
- Client and transaction records: for the duration of the engagement and thereafter for the period required by applicable accounting and tax law, which may be up to ten years.
- Marketing data: until you unsubscribe, after which we retain a minimal suppression record so that you are not contacted again in error.
- Analytics data: up to fourteen months.
10. Cookies
Cookies are small files placed on your device when you visit a website. We use them for two purposes.
Necessary cookies are required for the website to function. They do not identify you.
Analytics and advertising cookies are set by the following providers:
| Provider | Purpose | Cookies |
|---|---|---|
| Google Analytics 4 | Measuring visits and which pages are read | _ga, _ga_TB3K8WF474 |
| Meta Pixel | Advertising measurement | _fbp |
The information these produce is used in aggregate to understand how the website performs. We do not use it to build a profile of you as an individual, we do not combine it with data purchased from third parties, and we do not sell it.
You may control or disable these at any time:
- Your browser. All major browsers allow cookies to be blocked or deleted, either for this site or generally. Doing so will not prevent the website from working.
- Google Analytics. Google provides a browser add-on that opts you out of Google Analytics on every website: tools.google.com/dlpage/gaoptout.
- Meta. You can manage how Meta uses data for advertising in your account settings: facebook.com/adpreferences.
- Contact us. Email hello@ontheuser.com and we will tell you what we hold and delete it.
11. Changes
We reserve the right to update and change this Policy from time to time in order to reflect any changes to the way in which we process your personal data or changing legal requirements. Any changes we may make to our Policy in the future will be posted on this website and, where appropriate, notified to you by email.
12. Contact
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, you can get in touch at hello@ontheuser.com.