Privacy Policy

This Privacy Policy (“Privacy Policy”) explains how Omnidex Technologies LTD (“Omnidex”, “We”, “Us”, or “Our”) collects, uses, discloses, and safeguards personal data in connection with the Services of the Agreement.

Omnidex commercially operates its Services using proprietary and third-party technologies. This Privacy Policy is intended to provide transparency about how personal data is processed across the Services, including data collected from visitors, publishers, advertisers, and end users interacting with media and advertisements served through the platform.

This Privacy Policy is incorporated by reference in our Terms & Conditions and the Agreement. It governs our processing practices when you are an End User visiting our owned & operated websites, or, when you, either a Publisher, use our Services.

It applies globally to all users of the Services, unless otherwise specified by local laws or additional jurisdiction-specific notices (e.g., for California, Virginia, or EU/UK residents). We are committed to protecting individual privacy and handling personal data in accordance with applicable data protection laws, including the GDPR, UK Data Protection Laws, Swiss FADP, and relevant U.S. state privacy laws.

Please read this Policy carefully to understand our practices regarding your personal data. If you do not agree with any part of this Policy, you should discontinue your use of the Services.

Omnidex participates in the IAB Transparency & Consent Framework and complies with its Specifications and policies. Omnidex’s vendor number within the framework is 744.

1. Policy Amendments

We may update or amend this Privacy Policy from time to time, at our discretion, to reflect changes in our practices, technologies, legal requirements, or other relevant developments. The most current version of the Policy will always be available on our website, with the “Last Modified” date clearly indicated at the top of the page.

If any material changes are made, we will notify you by reasonable means, which may include posting a notice on our website or contacting you directly where required by applicable law. Where necessary, we will also obtain your consent to such changes.

Unless otherwise specified, updated versions of the Policy will become effective 30 days after publication. We encourage you to review this Policy regularly to stay informed of how we collect, use, and protect your personal data.

2. Contact Information and Data Controller Details

Omnidex is the controller of your personal data and is responsible for how your data is collected, used, and protected. We are incorporated under the laws of England & Wales.

We have appointed a Data Protection Officer (“DPO”) who is responsible for overseeing questions or concerns relating to this Privacy Policy and our data protection practices. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO through email: [email protected]

If you are a UK resident, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues: www.ico.org.uk. However, we would appreciate the opportunity to resolve your concerns before you contact the ICO, so please reach out to us in the first instance.

3. Data We Collect and Purpose of Use

3.1. Non-Personal Data
We may collect aggregated, non-identifiable information during your use of our websites, platforms, and services. This includes: Device type and settings, Browser type and language, Operating system, Referring/exit pages and URLs, Date/time stamps, Country-level geolocation and Clickstream data.

Purpose: To analyze trends, optimize website functionality, detect potential issues, and enhance user experience.

Legal Basis: Legitimate interest in operating and improving our services.

3.2. Personal Data

We may collect the following categories of personal data:

Data Type

Purpose

Legal Basis

Online Identifiers and Usage Data

When you visit our website or interact with a Publisher Property that integrates our technology or Services, we may collect certain online identifiers associated with your device, such as IP address, cookie ID, agent ID, and other unique identifiers (“Online Identifiers”).

In connection with our Services, we also deploy tools, pixels, and cookies—often provided by third-party analytics and marketing vendors—that gather behavioral data about how end users engage with Publisher Properties. This includes information such as visited websites, pages viewed, engagement events, and navigation patterns (“Usage Data”). Usage Data is typically linked to Online Identifiers and is used to generate insights, improve service delivery, personalize experiences, and identify potential business opportunities.

Service Functionality, Marketing, and Analytics
Online Identifiers and Usage Data are used to ensure the core functionality, performance, and security of our website and the Publisher Properties where our Services are integrated. First-party cookies are necessary to operate site features, while third-party cookies and similar technologies enable the collection of data for analytics and marketing purposes.

This information allows us and our authorized vendors to analyze how users engage with content across our own site and Publisher Properties, optimize user experience, identify service issues, and generate business intelligence. Additionally, we use such data to support our marketing efforts, including audience segmentation and the identification of potential partners or commercial prospects.

Legitimate interests

Contact Information:

If you choose to contact us directly or engage with the Services (whether via our website or through Publisher Properties), you may be asked to provide certain details such as your name, job title, company name, and email address (“Contact Information”), along with any additional information you voluntarily submit. Additionally, when subscribing to a newsletter or marketing update, you will be asked to provide your email address.

Newsletter Distribution and Communication Handling:
We use Contact Information to send newsletters, product updates, or marketing communications to individuals who have subscribed.We may also use this information to respond to your inquiries, messages, or support requests submitted via contact forms or direct communication.

Legitimate interests

Account Information:
When a Publisher registers for or is assigned access to the Omnidex Platform, an account will be created. This account may include Contact Information, billing and payment details, access logs, and Service usage data (such as timestamps of access, session duration, and usage patterns) (“Account Information”).

Provision of Services and Account Management:
We use Account Information to set up, manage, and maintain user access to the Platform and related Services. This includes enabling Publishers to view reports, manage configurations, receive billing-related communications, and access other platform functionalities.

Contractual Obligations

Email Address and Billing Communications:
As part of the onboarding process, we collect the Publisher’s email address, which is used to send invoices, service-related communications, platform updates, and marketing content.

Direct Marketing and Operational Correspondence:
We use this information to provide Publishers with essential materials such as billing invoices and account documentation, as well as to share updates about new features, improvements, and relevant promotional content relating to the Services.

Legitimate interests

Support Inquiries and Contact Details:
If you reach out to us for technical or customer support, we may collect and process your Contact Information (such as your name, email address, or company name) as well as any additional details you voluntarily provide in the course of the support request.

Support Services:
This information is used solely for the purpose of addressing and resolving your support inquiries, troubleshooting issues, and delivering assistance related to your use of the Services.

Contractual Obligations

End User Data refers to information collected about individuals (“End Users”) who browse Publisher Properties and view advertisements displayed through our Services. This data may include various types of identifiers such as cookie IDs, device IDs, and IP addresses; Privacy or Consent Preference Strings (e.g., TCF strings); the URL being visited; and interaction data such as views, clicks, or other engagements with ads or publisher content. Additional technical data collected may encompass country-level geolocation derived from the IP address, browser type and language, device type, and other relevant system-level attributes.

We process End User Data to deliver and display contextual content, facilitate advertising delivery, and generate performance reports and analytics. This includes serving non-personalized, contextually relevant content on Publisher Properties. Additionally, we may share End User Data with advertisers to enable the delivery of advertisements that are better aligned with the surrounding content or user context. Aggregated End User Data is also utilized to provide publishers with campaign performance insights, such as engagement metrics, impressions, clicks, and other reporting outputs that help evaluate ad effectiveness.

Legitimate interests

When an End User visits a website and is presented with the option to consent to the use of their data for personalized advertising, their selected preference is recorded and communicated to relevant advertising partners. This process helps ensure that the ads displayed are consistent with the user’s indicated choices and privacy settings.

Collecting and processing End User consent and privacy preferences allows us to: (i) confirm details related to transparency requirements, consents granted, or objections raised regarding specific advertisers or processing activities; (ii) retrieve and transmit consent strings as needed; and (iii) honor signals issued by a Consent Management Platform (CMP) or relayed through a third party that initially received them from a CMP.

Legitimate interests

At Omnidex, we deploy first-party session cookies on publisher websites and apps where our video player is integrated. These cookies collect limited End User information, strictly for the purpose of understanding how users engage with ads and the content on the page. They do not track user preferences or generate behavioral profiles. In certain cases, we may utilize alternative tracking technologies that offer similar functionality without relying on cookies.

Each End User who interacts with our Platform is assigned a unique identifier (“Unified ID”), which enables us to deliver and optimize the Services, personalize content delivery, and improve user experience. To support the generation of this Unified ID, Omnidex may work with identity resolution partners such as Vidazoo Ltd, Hadron ID, LiveRamp, Lotame, SharedID, 33Across, The Trade Desk, Criteo, ID5 Technology Limited, Intent IQ LLC, and LiveIntent, Inc.

Please be aware that the specific processing activities carried out for each purpose and legal basis outlined above may vary. These activities typically involve a range of automated operations, including but not limited to the collection, storage, use, transmission, deletion, or other handling of Personal Data. Where applicable, the transfer of Personal Data to third countries or external service providers—described in more detail in the International Data Transfers section—is conducted in alignment with the corresponding lawful basis referenced for each data category above.

Additionally, we may process certain categories of Personal Data to detect, prevent, or respond to potentially unlawful behavior, fraudulent activities, misuse of our Services, violations of our Terms, intellectual property infringements, identity theft, and other forms of abuse. This also includes safeguarding the integrity and security of our systems, networks, and databases, and taking steps to mitigate potential legal exposure. Such processing is carried out based on our legitimate interests in ensuring the safe and lawful operation of our Services.

Depending on how you interact with our website, platform, or Services, we may collect varying types of both Personal Data and Non-Personal Data, as outlined above. Where Personal Data is combined with Non-Personal Data in a way that could directly or indirectly identify an individual, we treat the combined dataset as Personal Data and process it accordingly, in line with applicable data protection laws.

4. Our legitimate interest claim

In addition to the disclosures provided above, we wish to clarify the specific legitimate interests that underpin certain types of data processing conducted by Omnidex in connection with End User Data. While we, or our publisher partners, rely primarily on user consent when delivering interest-based or cross-contextual advertising that reflects a user’s preferences, there are instances where we process data on the basis of legitimate interest.

Specifically, when processing limited categories of Personal Data—such as Online Identifiers—for purposes like capturing and managing user consent and privacy preferences, ensuring the proper technical delivery of advertising, maintaining platform functionality, or enhancing our Services, we rely on our legitimate interest. These activities are fundamental to the effective and responsible operation of the Omnidex Platform and to fulfilling our obligations to publishers, advertisers, and regulatory standards. Moreover, they enable us to demonstrate our compliance with GDPR accountability requirements under Articles 5(2) and 24.

We believe this processing aligns with user expectations and is balanced against the fundamental rights and freedoms of data subjects. To ensure this, we conduct Legitimate Interests Assessments (LIAs) for relevant activities. We are committed to transparency, data minimization, and user control. Users may exercise their rights at any time, including opting out or adjusting preferences, using the mechanisms available within our Services.

5. How we collect the data

The way we collect your information depends on how you engage with the Omnidex Platform and Services. We may collect Personal and Non-Personal Data through the following methods:

  • Automatically: When you browse our website, use our Platform, or interact with ads or publisher content, certain information is collected automatically through technologies such as cookies, pixels, SDKs, and similar tracking tools. These technologies gather data about your device, browsing behaviour, and interaction with content, as outlined in this Policy.
  • Directly from you: We collect information you voluntarily submit to us, such as when you contact us via forms, email, or other communication channels, subscribe to our updates or newsletters, or sign up to access certain features or Services.
  • From third parties: We may also receive data about you from our publisher partners, consent management platforms (CMPs), third-party service providers, and advertising technology partners who enable or support your interaction with the Omnidex Platform and its integrations.

Each of these collection methods is used to support and deliver our Services, ensure compliance, and enhance user experience in accordance with applicable privacy laws and this Policy.

6. Cookies and similar technologies

When you access the Omnidex website or interact with our Platform, we use cookies and similar tracking technologies to enhance your experience. Cookies are small text files that are placed on your device by websites you visit. This is a common industry practice that helps websites function effectively and provide relevant content and services.

These technologies serve multiple purposes, including enabling core site functionality, facilitating smooth navigation, remembering your preferences, conducting statistical and analytical research, measuring audience engagement, and supporting marketing and advertising efforts—both on our site and through our partners.

For a detailed explanation of the types of cookies we use, their purpose, and how you can manage your preferences or withdraw consent, please refer to our Cookie Policy at https://www.omni-dex.io/publisherterms/cookies-policy.

7. Data Sharing

As part of delivering and improving the Omnidex Platform and Services, we share Personal Data with selected third parties. These recipients fall into various categories and each plays a specific role in supporting the functionality, security, analytics, and commercial aspects of our business. Data shared is always limited to what is necessary and subject to appropriate safeguards and contractual obligations.

Category of Recipient

Data That Will Be Shared

Purpose of Sharing

Advertisers

End User Data, End User Consent and Privacy Preferences

Enabling advertisers to deliver contextually relevant ads and content aligned with user preferences on publisher properties.

Publishers

As part of our Services, we furnish our publishers with reporting that includes ad performance metrics, such as impressions, clicks, revenue attribution, and geographic distribution, providing insights into the effectiveness of their campaigns.

Helping publishers analyze the performance of their monetized content and optimize their inventory and monetization strategies.

Third Party Fraud detection providers

These service providers help verify that End Users are genuine individuals and not part of fraudulent or automated traffic activity.

Detecting and preventing fraudulent activity to protect the integrity of the ad ecosystem and ensure compliance with industry standards.

Service Providers

All data

We may share Personal Data with our service providers, contractors, and third-party partners—including, but not limited to, cloud hosting providers, analytics and marketing vendors, payment processors, recruitment platforms, and CRM systems such as Salesforce. These service providers are bound by contractual obligations that restrict them from using the data for any purpose other than delivering the services we have requested. They are also required to implement appropriate security measures to protect the data they process on our behalf.

Any acquirer of our business

All data

In the context of a corporate transaction—such as a merger, acquisition, consolidation, or sale of a significant portion of our business—we may transfer Personal Data as part of the transaction. In such cases, the acquiring entity or our affiliated companies will assume the rights and obligations outlined in this Policy.

Governmental agencies, or authorized third parties.

Subject to law enforcement authority request.

We may disclose certain Personal Data to law enforcement authorities, government agencies, or authorized third parties in response to a verified legal request involving terrorism, criminal investigations, suspected unlawful activity, or any conduct that may expose us, our users, or others to legal risk—strictly to the extent required to fulfill such legal obligations.

When we share information with service providers, publishers, and advertisers, we ensure that they are granted access only to the data strictly necessary for the performance of their designated functions within the scope of our Services. These third parties are contractually obligated to implement appropriate security measures and to use the data solely for the purposes we have agreed upon. While they may use anonymized or aggregated non-personal data independently, any use of personal data must remain compliant with applicable data protection laws and our privacy standards.

8. Data Retention

We retain Personal Data for as long as it is necessary to fulfill the purposes outlined in this Policy, in accordance with applicable legal and regulatory requirements, or until you choose to opt out—where such an option applies.

In certain cases, we may retain your Personal Data for longer periods, including: (i) to comply with legal, tax, regulatory, or accounting obligations; (ii) to maintain accurate records in the event of inquiries, complaints, or disputes; or (iii) where we have a reasonable basis to believe that legal claims or litigation may arise in connection with your data. Unless otherwise required by applicable law, we are not obligated to retain your data for any minimum period and may remove it at our discretion, without prior notice.

9. Security Measures

We take the protection of your Personal Data seriously and implement a range of technical, physical, and organizational safeguards designed to prevent unauthorized access, alteration, disclosure, or destruction of the data we process. These measures include, but are not limited to, SSL encryption, data minimization practices, access controls, and restricted data access granted only to authorised Omnidex employees, contractors, and service providers as necessary.

While we strive to maintain a secure environment and follow industry best practices and legal obligations, no system can be guaranteed 100% secure. Therefore, we cannot accept liability for any unauthorized access that occurs beyond our reasonable control, nor do we warrant that our systems are completely immune to security breaches.

If you believe that your privacy has been compromised or if you suspect unauthorised access to your Personal Data, please contact our Data Protection Officer at [email protected]. In the event of a confirmed security incident involving your Personal Data, and where required by applicable law, we will make reasonable efforts to notify you and relevant authorities promptly.

10. International Data Transfers

The Personal Data we collect may be stored and processed on servers located in various jurisdictions, including the United States and Ireland (hosted via AWS infrastructure). While Omnidex Technologies Ltd is headquartered in the United Kingdom, we may access this data from other operational hubs or platforms—such as CRM systems, ERPs, and cloud-based tools—including locations outside your country of residence.

Where Personal Data originating in the European Economic Area (“EEA”) or the United Kingdom is transferred to countries that are not deemed by the relevant authorities to provide an adequate level of data protection, we implement appropriate safeguards to ensure continued protection of your information. These may include executing Standard Contractual Clauses (SCCs) approved by the European Commission and/or UK Information Commissioner’s Office (ICO), along with supplementary technical and organizational measures as necessary.

In all cases, such transfers are conducted in compliance with applicable data protection laws, and we ensure that the level of protection provided is consistent with the requirements of the GDPR, UK GDPR, or other relevant privacy regulations. Where applicable, we may also rely on adequacy decisions or other recognized mechanisms such as certification frameworks to ensure lawful data transfers.

11. Your Rights

We recognize that individuals have different privacy concerns, and we are committed to providing transparency and choice when it comes to how your Personal Data is used. Depending on your jurisdiction, your relationship with Omnidex, and the data protection laws that apply to you—such as the UK GDPR, EU GDPR, or other local privacy regulations—you may have the right to access, rectify, erase, or restrict your Personal Data, object to certain types of processing, withdraw consent (where applicable), and exercise data portability rights.

You may also have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.

To exercise any of these rights, or if you have any questions about your privacy or this Policy, please contact our Data Protection Officer (DPO) by emailing: [email protected]. We will respond to your request in accordance with applicable data protection laws.

12. Interest-Based Advertising (IBA) – Opt-Out Options

Omnidex does not sell your Personal Data. However, we may “share” certain data with third parties to support interest-based or cross-contextual advertising. If you prefer not to have your Personal Data shared for personalized advertising purposes, you can opt out in several ways. Please note that opting out does not necessarily mean you will no longer see ads—it simply means the ads may no longer be tailored to your interests based on data shared with us. Other companies may still serve personalized ads unless you opt out directly with them as well.

To manage or opt out of interest-based advertising, you can use the following resources:

Additionally, many websites and mobile applications include a “cookie settings” option through which you can manage your privacy and advertising preferences. If you wish to exercise your IBA opt-out rights or have questions about how your data is used for advertising, you may contact our Data Protection Officer directly at [email protected].

13. Eligibility and Children’s Privacy

Our Services are not intended for individuals under the age of 18 or for anyone who is legally unable to enter into a binding agreement without parental or guardian consent. We do not knowingly collect or process personal data from children, where a “child” is defined as an individual under the age of 16.

If you believe that a child may have provided us with personal information in connection with our Services, please contact our Data Protection Officer immediately at [email protected]. We will take appropriate steps to investigate and, if necessary, delete such information in accordance with applicable data protection laws.

14. Additional Notice to California Residents

This section applies exclusively to individuals residing in California, in accordance with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), effective January 1, 2023.

Omnidex Technologies LTD is committed to providing transparency regarding our data collection and use practices. California residents have specific rights under the CCPA/CPRA, including the right to know what personal information we collect, the purposes for which it is used, the sources from which it is collected, the categories of third parties with whom it is shared, whether it is “sold” or “shared” for cross-context behavioral advertising, and the applicable retention periods.

To learn more about how we handle personal data in compliance with the CCPA/CPRA and to understand your rights as a California resident, please contact our Data Protection Officer at [email protected]. We will provide you with our most recent CCPA Privacy Notice, which contains a detailed breakdown of these disclosures and outlines how to exercise your rights.

15. Additional Privacy Information for Certain United States Residents

Residents of certain U.S. states — including Colorado, Connecticut, Florida, Montana, Nevada, Oregon, Texas, Virginia, and Utah — may have additional rights under their respective state privacy laws and are entitled to certain disclosures.

Sale and Sharing of Personal Data:
Omnidex Technologies LTD does not sell your Personal Data. However, we may “share” your Personal Information with third parties for purposes such as interest-based advertising or cross-context behavioral advertising, as defined under applicable state privacy laws. Further information regarding such practices is provided in our [CCPA Privacy Notice] or upon request by contacting our Data Protection Officer at [email protected].

16. Consumer Rights

Residents of certain U.S. states — including Colorado, Connecticut, Florida, Montana, Nevada, Oregon, Texas, Virginia, and Utah — may have specific rights under their applicable state privacy laws. These rights, subject to certain limitations, may include:

  • Access: The right to confirm whether we are processing your Personal Information and to receive a copy of that information in a portable and, where technically feasible, readily usable format.
  • Deletion: The right to request the deletion of Personal Information you have provided to us or that we have collected about you.
  • Correction: The right to request the correction of inaccurate Personal Information we hold, considering the nature of the data and the purposes for its processing.
  • Opt-Out: The right to opt out of certain types of processing, including: (i) the “sale” of your Personal Information; (ii) the use of your Personal Information for targeted advertising, and (iii) any processing that produces legal or similarly significant effects based on automated decision-making.

To exercise any of the above rights, you may contact our Data Protection Officer directly via email at [email protected]. We will take appropriate steps to verify your identity before fulfilling your request, including by matching the information provided in your email with what we already hold. In some cases, we may request additional information if needed to complete the verification process.

If you are an authorized agent submitting a request on someone else’s behalf, please also email [email protected] and include proof of authorization. We may still require the individual concerned to verify their identity and confirm the agent’s authority before proceeding.

Bottom Arrow Icon