Legal
Privacy and cookies policy
This site takes no bookings and holds no accounts for visitors. It collects what you type into the enquiry form, and analytics — and the analytics only once you have said yes.
Foundry Courtyard, 214 Kennedy Street, Glasgow G4 0DB
Version 1.0 — effective 9 October 2026
1. Introduction and scope
1.1 This policy explains how Omnis Glasgow Limited ("we", "us", "our") collects and uses information about visitors to foundrycourtyard.com (the "Site"). The Site is published by Omnis Glasgow Limited, the owner of Foundry Courtyard, a student accommodation building at 214 Kennedy Street, Glasgow G4 0DB.
1.2 The Site is an informational website about the Foundry Courtyard student accommodation building. It carries one enquiry form, described at clause 3.1, through which you may ask us a question and leave contact details for a reply. It does not accept bookings, applications, deposits or payments, and it does not operate accounts for visitors: a room at Foundry Courtyard is booked with the operator, not here. A single password-protected area exists for our own staff to update the content of the Site; it is described at clause 13.3 and holds no information about visitors.
1.3 This policy does not apply to any other website, and it does not apply to your tenancy. Foundry Courtyard is operated by Homes for Students Limited, trading as Prestige Student Living, who take all bookings and manage the building. If you apply for or hold a room at Foundry Courtyard, the handling of your information is governed by their privacy policy, not this one. Where the Site links to a third party — including the Prestige Student Living booking pages — that organisation's own privacy policy applies. See clause 12.
1.4 We comply with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 ("PECR").
2. Data controller
2.1 The data controller for the Site is:
Omnis Glasgow Limited Company number 16823846 ICO registration reference ZC268414 201 Bishopsgate, London EC2M 3BN hello@orka.investments
2.2 Enquiries about this policy, and requests to exercise the rights set out in clause 10, should be sent to hello@orka.investments.
3. Information we collect
3.1 The Site carries a single form: the enquiry form at /enquire. It is the only means by which the Site asks you for information about yourself, and completing it is voluntary. Where you submit it, we collect:
(a) your name;
(b) your email address;
(c) your telephone number;
(d) the university you are joining, chosen from a fixed list;
(e) when you need a room, chosen from a fixed list;
(f) optionally, the kind of room you want, how long you want it for, how many rooms you need, and whether you would like a viewing — each chosen from a fixed list, and each of which you may leave blank;
(f) anything you choose to write in the optional free-text box; and
(g) the date and time of your submission, and the fact that you ticked the consent box.
The Site contains no registration form, no newsletter sign-up and no facility to make a booking or a payment. We do not ask for your postal address, your date of birth, your nationality, your passport or identity documents, or any financial information, and we have no facility to receive them through the Site.
3.2 Where you submit the enquiry form, the following is recorded alongside it, so that we can tell which advertisement or link brought you to us:
(a) any campaign parameters carried in the address of the page you arrived on, being the
standard utm_source, utm_medium, utm_campaign, utm_content and utm_term values and
the Google click identifier gclid;
(b) the address of the first page of the Site you opened; and
(c) the address of the page you followed a link from, where your browser supplied one.
This describes the route you took to reach us rather than you, and none of it is recorded unless you submit the form. Where it has to be remembered while you move between pages, that is done with the session storage entry listed at clause 4.3, which is set only if you have selected Accept all and only for as long as the browser tab stays open. If you have not, only the parameters present on the address of the form page itself are recorded.
3.3 The only information collected through ordinary browsing is website analytics data, gathered through Google Analytics 4. Subject to the consent choice described in clause 4, this may include:
(a) the pages viewed, the order in which they were viewed and the time spent on each;
(b) an approximate geographic location, derived at city level from your IP address;
(c) device type, operating system, browser and screen dimensions;
(d) the source of your visit, being a search engine, referring website, social platform or direct entry;
(e) interactions with the Site, including outbound clicks to the booking pages operated by Prestige Student Living and the position on the page from which each click originated.
3.4 IP addresses are used by Google Analytics to derive approximate location and are not retained by Google or disclosed to us.
3.5 We do not sell, rent, licence or otherwise make available any information collected through the Site to advertisers, data brokers or list vendors.
4. Cookies and similar technologies
4.1 On your first visit, the Site presents a consent banner offering two options: Accept all and Essential only. No analytics or advertising cookies are set before a selection is made.
4.2 This is enforced technically. The Site implements Google Consent Mode v2 with
analytics_storage, ad_storage, ad_user_data and ad_personalization all set to
denied by default.
4.3 The cookies used are as follows.
| Name | Type | Provider | Category | Purpose | Duration |
|---|---|---|---|---|---|
_ga | Cookie | Analytics | Distinguishes returning visitors so that visits are counted as people rather than page loads | 2 years | |
_ga_<property> | Cookie | Analytics | Maintains session state for this property. The suffix is the Google Analytics property identifier | 2 years | |
gw-consent-v1 | Local storage | Omnis Glasgow Limited | Strictly necessary | Records the selection made at clause 4.1 so the banner is not repeated | Until you clear your browser storage |
gw-attribution-v1 | Session storage | Omnis Glasgow Limited | Analytics | Remembers the advertisement or link you arrived from, so that an enquiry made a few pages later can be credited to it. Set only where Accept all has been selected | Until the browser tab is closed |
gw_admin | Cookie | Omnis Glasgow Limited | Strictly necessary | Keeps our own staff signed in to the content-editing area described at clause 13.3. Set only when a member of staff signs in, and never for ordinary visitors | 8 hours |
4.4 Where Essential only is selected, no Google Analytics cookies are set. A cookieless signal is transmitted recording that a page was viewed, containing no identifier and permitting no tracking between pages or visits.
4.5 The Site also uses Vercel Web Analytics and Vercel Speed Insights, which measure page views and page-loading performance. Both are cookieless: they set no cookie and store nothing on your device, and they do not track visitors between sessions or across websites.
4.6 The Location page contains an embedded Google Map showing where the building is. When that map loads, your IP address and browser information are sent to Google in order to serve it, and Google may set its own cookies on its own domain. This is Google's processing under Google's privacy policy, not ours. If you would rather not load it, do not scroll to the map, or use the street address given on the page instead.
4.7 Consent may be withdrawn at any time by clearing cookies and site data for this domain in your browser settings, after which the banner will be presented again on your next visit.
4.8 The Site does not currently use advertising, retargeting or social media pixels. Should this change, such technologies will be deployed only for visitors who have selected Accept all, and this policy will be updated before deployment.
5. Google advertising features
5.1 The Site has Google signals enabled within Google Analytics.
5.2 Where a visitor holds a Google account, is signed in to it, and has enabled Ads Personalisation within their own Google settings, Google may supplement our analytics reports with aggregated demographic and interest information.
5.3 This information is available to us only in aggregate. It is not attributed to individual visitors and is not disclosed to us in any form capable of identifying a person.
5.4 This setting is controlled by you at source rather than through us. Ads Personalisation may be disabled across all Google services at myadcenter.google.com, and data held by Google may be reviewed and deleted at myactivity.google.com.
6. Purposes and lawful bases
| Purpose | Categories of data | Lawful basis |
|---|---|---|
| Operating the Site and maintaining its security and availability | Server logs, IP address | Legitimate interests (Article 6(1)(f)) — operating and securing our own website |
| Recording your cookie preference | Consent preference cookie | Legitimate interests (Article 6(1)(f)); the cookie itself is strictly necessary under PECR regulation 6(4) |
| Measuring how the Site is used, and which content and calls to action are effective | The data at clause 3.3 | Consent (Article 6(1)(a)) and PECR regulation 6 |
| Aggregated demographic and interest reporting | The data at clause 5.2 | Consent (Article 6(1)(a)) |
| Replying to an enquiry you have made, including by telephone and email | The data at clause 3.1 | Consent (Article 6(1)(a)), given by ticking the box on the form |
| Recording which advertisement or link produced an enquiry | The data at clause 3.2 | Consent (Article 6(1)(a)) |
7. Recipients
7.1 Information collected through the Site is processed by the following organisations.
| Recipient | Role | Information processed |
|---|---|---|
| Google LLC / Google Ireland Ltd | Processor — analytics | The data described at clauses 3.3 and 5.2 |
| Google LLC / Google Ireland Ltd | Processor — enquiry records and alerting | The data at clauses 3.1 and 3.2, stored in a Google Sheet in an account we control and sent to us by email |
| Vercel Inc. | Processor — hosting, content delivery, cookieless web analytics and performance measurement | Server logs, page views, page-loading timings |
| Google LLC / Google Ireland Ltd | Independent controller — embedded map | IP address and browser information, when the map on the Location page loads |
| Prestige Student Living (Homes for Students) | Independent controller | Receives no data from us; will observe that a visitor arrived from the Site |
7.2 We may disclose information where required to do so by law, by a court order, or by a regulator acting within its powers.
8. International transfers
8.1 Google and Vercel process certain data outside the United Kingdom, including in the United States.
8.2 Those transfers are made under the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, and, where applicable, in reliance on the EU–US Data Privacy Framework and its UK Extension.
8.3 Enquiries submitted through the form at clause 3.1 are held in Google Workspace and are covered by the same mechanisms.
9. Retention
9.1 Event-level analytics data is retained by Google for 14 months from collection and is then deleted automatically.
9.2 Aggregated reporting, which contains totals and trends and no individual records, is retained for as long as it remains useful for period-on-period comparison.
9.3 Server logs are retained by our hosting provider in accordance with its standard retention schedule.
9.4 An enquiry submitted through the form at clause 3.1, and the campaign data recorded with it under clause 3.2, are retained for two years from the date of submission and are then deleted. Where you ask us to delete them sooner, we will do so.
10. Your rights
10.1 Under the UK GDPR you have the right to:
(a) be informed about how your personal data is used;
(b) obtain access to your personal data;
(c) have inaccurate personal data rectified;
(d) have personal data erased;
(e) restrict processing of your personal data;
(f) object to processing carried out on the basis of legitimate interests;
(g) obtain your personal data in a portable format; and
(h) withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
10.2 Requests are free of charge and will be answered within one month of receipt. Where a request is complex, that period may be extended by up to two further months, and we will tell you within the first month if that applies.
10.3 Requests should be sent to hello@orka.investments.
10.4 Where you have submitted the enquiry form, we hold your name and contact details and can find your record from them, so these rights apply to it in full.
10.5 Analytics data is different. It carries no name and no contact details, so we are ordinarily unable to connect it to an identified individual. Where that is the case, we will confirm it in writing in response to your request.
11. Children
11.1 The Site is directed at prospective students aged 17 and over. We do not knowingly collect personal data relating to children under 13.
11.2 If you believe a child under 13 has provided personal data through the Site, contact hello@orka.investments and we will investigate.
12. Third-party websites
12.1 The Site links to websites operated by third parties, including Prestige Student Living, Instagram, TikTok, transport operators, Glasgow City Council, NHS services and businesses referred to in our guides.
12.2 We do not control those websites and accept no responsibility for their content or their privacy practices. You should review the privacy policy of any third-party website before providing information to it.
13. Security
13.1 The Site is served exclusively over HTTPS with a valid TLS certificate.
13.2 The Site itself holds no database of personal data: it operates no visitor login, takes no payments, and stores nothing you submit. An enquiry is passed straight through to a Google Workspace account we control, where it is protected by that account's own access controls and is shared only with named colleagues who need to answer it.
13.3 A single password-protected area of the Site allows authorised staff of Foundry Courtyard
Glasgow Limited to update its published content, such as photographs and the information
about the building. It contains no personal data and no information about visitors, and nothing
you do on the Site is visible within it. Signing in sets the gw_admin cookie listed at clause
4.3, which contains a signed expiry time and no personal data; it is strictly necessary for
that sign-in, is not used for analytics or tracking, and is set only for staff who sign in.
14. Complaints
14.1 If you are dissatisfied with how we have handled your personal data, please contact hello@orka.investments in the first instance.
14.2 You also have the right to lodge a complaint with the supervisory authority for the United Kingdom:
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF 0303 123 1113 — ico.org.uk/make-a-complaint
14.3 Contacting us first does not affect your right to complain to the Information Commissioner's Office at any time.
15. Changes to this policy
15.1 This policy is kept under review. Where we change how the Site collects or uses information, this page and the version number and effective date above will be updated before the change takes effect.