Privacy Policy
Privacy Policy
Last updated: November 2025
This Privacy Policy explains how Nook Ideas Limited (trading as “Olmo”) collects, uses, shares, stores and protects personal data. We are committed to protecting privacy and complying with all applicable UK data protection laws including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy applies to visitors to our website, users of the Olmo platform, prospective customers, customers, suppliers, and anyone who interacts with Olmo.
Who We Are
Nook Ideas Limited (trading as Olmo)
Registered in Scotland (Company No. SC741429)
Registered Office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP
References to “Olmo”, “we”, “us” or “our” mean Nook Ideas Limited.
Data Controller and Data Processor Roles
Olmo acts differently depending on the type of personal data:
| Data Type | Our Role | Example |
|---|---|---|
| Billing, account management, support and marketing data relating to our Customers | Controller | Contact name, business email, billing info |
| Mortgage client data processed on behalf of broker Customers inside the Olmo platform | Processor | Identity documents, case data, financial evidence, fact-find information |
Customers are responsible for determining lawful basis, transparency and regulatory obligations for their end-client data.
How We Collect Personal Data
We may collect personal data when you:
- Create an account or use the Olmo platform
- Submit information in forms within the platform
- Provide identity verification via Yoti or similar partners
- Upload documents or case notes
- Contact us (email, web forms, demos)
- Visit our website (cookies, analytics)
Types of Data We Process
We may process:
- Contact details (name, email, phone, business address)
- Account login information
- Mortgage and protection case information
- Affordability / suitability / fact-find data
- Bank statements and financial evidence
- Identity verification information (via Yoti)
- Case notes (including free text fields entered by users)
Where unnecessary special category data is entered by Customers, the Customer is responsible for lawful basis and minimisation.
Purpose and Lawful Basis for Processing
We process personal data to:
- Provide, secure and maintain the Olmo platform
- Deliver platform features including sourcing integrations and KYC/AML checks
- Manage billing, subscription and account administration
- Improve the platform and develop new features
- Provide support and respond to enquiries
- Meet regulatory and legal obligations
Our lawful bases include performance of contract, legitimate interests (security and product improvement), consent (where required e.g. marketing), and legal obligations (fraud/AML).
Sharing and Disclosure
We may share personal data with:
- AWS UK region (hosting / infrastructure)
- Verification partner Yoti
- API partners (such as Twenty7Tec, iPipeline — when authorised by Customer)
- Legal and professional advisers
- Regulators or law enforcement where required by law
We do not sell personal data.
International Transfers
If data is transferred outside the UK, we will ensure appropriate safeguards are in place (such as UK IDTA or adequacy).
Data Retention
We retain data only as long as necessary for the purposes described or as legally required.
Platform data is normally deleted within 90 days of subscription termination (unless required to retain longer by regulation or law).
Security
We implement technical and organisational safeguards including encryption, access controls, MFA (where available) and monitoring.
Customers must secure their own user access, devices, and ensure data entered into the platform is lawful and proportionate.
Your Rights
Individuals may have the following rights under UK GDPR:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent (where consent applies)
To exercise these rights contact: legal@olmo.ai
Identity verification may be required before responding.
Cookies and Analytics
We may use cookies and analytics tools on our website and within the platform to improve user experience, monitor usage, and support product development. These can typically be managed through browser settings.
Marketing
We may send product update / platform feature communications to Customer business contacts under legitimate interest. You can opt-out at any time using unsubscribe links or by contacting us directly.
We do not market to Customer end-clients.
Children
Olmo is not intended for use by individuals under 18.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on our website with the new “Last Updated” date.
Contact Details
For privacy enquiries, data protection questions or rights requests please contact:
Data Protection Team – Olmo
Email: fraser@nookideas.com
Registered Office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP