GDPR Compliance

Last updated: July 20, 2026

Omni is committed to protecting the rights of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland under the General Data Protection Regulation (GDPR) and equivalent laws.

1. Controller and Processor Roles

When you use Omni to manage your own customers' data, you generally act as the data controller and we act as your processor. For data about your own account and our website visitors, we act as the controller. Our processor obligations are set out in our Data Processing Agreement.

2. Lawful Bases for Processing

We process personal data on one or more of the following bases: performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

3. Your Rights Under the GDPR

• Access — obtain confirmation of, and a copy of, your personal data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion (the "right to be forgotten");
• Restriction — limit how we process your data;
• Portability — receive your data in a structured, machine-readable format;
• Objection — object to processing based on legitimate interests or direct marketing; and
• Withdraw consent — where processing is based on consent.

4. Data Processing Agreement

For customers acting as controllers, we offer a Data Processing Agreement (DPA) describing our role as a processor, the security measures we apply, and our use of sub-processors. You can review and request it from our DPA page.

5. International Data Transfers

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with supplementary measures where needed.

6. Sub-Processors

We engage carefully vetted sub-processors — such as cloud hosting, messaging, and payment providers — to help deliver the Services, and we remain responsible for their compliance.

7. Data Breach Notification

We maintain procedures to detect, investigate, and report personal-data breaches, and will notify affected customers and supervisory authorities where required by law.

8. Exercising Your Rights

To exercise any of your rights, contact us using the details below. We will respond within the timeframes required by law and may need to verify your identity first.

9. Contact Us

If you have questions about GDPR or your data-protection rights, we're here to help. Reach our team through our contact page and we will respond as soon as we can.