OpsHarbour is the controller for personal information used to provide and administer Short Links. Contact us at support@opsharbour.co.uk.
Information we collect
- Installation and account data: account identifiers, account or location name, installation status, plan and authorised connection details supplied through the Marketplace.
- Service content: link names, destination URLs, slugs, domains, campaigns, UTM settings and configuration choices.
- Click and analytics data: timestamps, a protected hash derived from the visitor IP address, user agent, referrer, device type, browser, operating system and approximate country.
- Support and security data: messages sent to us, diagnostic information, audit events and technical logs needed to operate and protect the service.
How and why we use information
We process information to provide the contracted service, redirect links, produce analytics, manage plans and installations, verify domains, provide support, prevent abuse, maintain security and meet legal obligations.
Our lawful bases include performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations and consent where consent is specifically requested.
Click tracking
When someone opens a short link, we process the visitor's IP address and other technical request data to perform the redirect and produce aggregate reporting. We store a one-way IP-derived hash rather than the visitor's raw IP address in the click record. Country information is approximate and may be affected by VPNs, proxies, mobile networks and network routing. It is obtained from trusted hosting metadata where available, or otherwise through a local lookup using IPinfo data. Visitor IP addresses are not sent to IPinfo for this lookup. We attempt to exclude identifiable preview, prefetch and non-visit requests, but automated traffic detection is not perfect.
Sharing and processors
We share information only where needed to run the service, including with infrastructure and database providers, the installation Marketplace, email or support providers and security services. We may also disclose information where required by law, to protect legal rights, or as part of a properly managed business transfer. We do not sell personal information.
International transfers
Some service providers may process information outside the UK. Where required, we use an adequacy regulation or appropriate contractual and organisational safeguards for those transfers.
Retention
Detailed click analytics are retained according to the active plan. Installation and event records are normally retained for up to 60 days after uninstall so we can support reinstatement, security and lifecycle management. Some records may be kept for longer where required by law, to resolve a dispute, prevent abuse or protect active service data. We delete or anonymise information when it is no longer needed.
Cookies and local storage
The management app uses essential cookies or equivalent browser storage for secure installation, embedded access and account context. These are needed for the service to function. Public short-link redirects do not use advertising cookies from OpsHarbour.
Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to processing, receive portable data and withdraw consent. To exercise a right, email support@opsharbour.co.uk. We may need to verify your identity.
You may complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first.
Security, children and changes
We use technical and organisational safeguards designed to protect information, but no internet service can guarantee absolute security. Short Links is a business service and is not directed to children. We may update this notice when the service or law changes; the latest version and update date will remain on this page.