Privacy Policy

Last Updated: 20/07/2026

This Privacy Policy explains how NOOK IDEAS LIMITED ("we", "us", "our"), trading as Olmo, collects and processes personal data through our marketing site and, where you connect a Google account, through the Olmo application.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The processing of data within the Olmo application is generally governed by individual customer agreements and Data Processing Agreements (DPAs), and this policy does not otherwise cover application data processing. The exception is Section 9 (Google Account Access), which discloses how the Olmo application accesses, uses, stores, and shares Google user data when you choose to connect a Google account.

1. Who we are

Data Controller:
NOOK IDEAS LIMITED (Company No. SC741429)
Registered office: Clyde Offices 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP
Email: support@nookideas.com

2. What data we collect

When you visit our marketing site, we may collect and process the following data:

Contact form submissions

  • Name
  • Business name
  • Email address
  • Telephone number
  • Message content

Analytics data (with consent)

  • IP address
  • Device and browser information
  • Pages visited and time spent
  • General geographic region

Where you connect a Google account to the Olmo application, we also process Google user data as described in Section 9.

3. Legal basis for processing

We process data under:

  • Consent – for analytics cookies, and for connecting a Google account to the Olmo application (you can disconnect at any time)
  • Legitimate interests – to follow up on contact form submissions and improve our marketing site

4. Data sharing

We do not sell personal data.

We may share data with the following third-party providers, who are contractually bound by data protection obligations:

  • Google Analytics 4 – website usage analytics

We do not share Google user data obtained through the Olmo application with any third party except as described in Section 9.

5. Data retention

Contact form submissions are retained indefinitely unless you request deletion. Analytics data is retained in accordance with the default retention periods set by Google Analytics. Retention of Google user data accessed through the Olmo application is described in Section 9.

6. Data security

We implement appropriate technical and organisational security measures, including encrypted data transmission (HTTPS/TLS) and secure hosting infrastructure. Authorisation tokens for connected accounts are encrypted at rest using authenticated encryption.

7. Your rights

Under UK GDPR, you have the right to:

  • Access your data
  • Rectify inaccuracies
  • Request erasure
  • Restrict processing
  • Data portability
  • Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, contact us at support@nookideas.com.

8. Cookies

We use essential, functional, and analytics cookies. Full details are available in our Cookie Policy.

9. Google Account Access (Gmail)

When you choose to connect your Google (Gmail) account to the Olmo application, you grant Olmo permission to access certain data in your Google Account so that Olmo can show and manage your client email conversations inside the relevant client record. Connecting Gmail is entirely optional, and you can disconnect it at any time.

What we access, and why

  • Reading your email (messages and threads). Olmo reads the content of email conversations in your connected mailbox so it can display them alongside the relevant client's record in Olmo. Olmo detects new mail using Google's push notifications and reads only what is needed to show the conversation to you.
  • Sending email on your behalf (gmail.send). When you write and send a reply to a client from within Olmo, Olmo sends that email through your Gmail account.
  • Marking email as read (gmail.modify). When you read a client email inside Olmo, Olmo removes the "unread" marker from that conversation in your Gmail so your inbox reflects what you have already seen. Olmo does not use this permission to delete, archive, or permanently remove any email — only to update the read/unread status.
  • Attachments on client emails. Where an email in your connected mailbox carries an attachment, Olmo downloads it and saves a copy into the relevant client's document area in Olmo, so the paperwork sits alongside the case. Saved attachments remain part of that client record.
  • Basic account information (openid, email, profile). Used only to identify the Google account you are connecting and to confirm the email address it belongs to.

How we store and protect it

  • Access is authorised using OAuth tokens issued by Google. These tokens are encrypted at rest using authenticated encryption before being stored, and all data is transmitted over encrypted connections (HTTPS/TLS).
  • Email content accessed via Gmail is shown only to you and to colleagues at your brokerage who are working on the relevant client record.

AI features

Olmo includes AI assistance that works over the contents of a client record — for example, answering a question you ask about the case. Attachments saved from your mailbox appear in that record's document library, and details of them such as file name, folder and date are available to these features so they can tell you what is on file. If you use Olmo's document analysis on a saved attachment, its contents may be processed in the same way as any other document in the record. This happens only to answer a request made by you or a colleague working on that record, and we do not use this data to train or improve any AI model.

What we do not do

  • We do not sell your Google user data.
  • We do not use your Google user data for advertising.
  • We do not use your Google user data to develop, improve, or train generalised or non-personalised AI or machine-learning models.
  • We do not transfer your Google user data to others except as needed to provide the Olmo service to you, to comply with applicable law, or as part of a merger or acquisition (with continued protection of the data), consistent with Google's requirements.

How long we keep it

Authorisation tokens are kept only while your Google account is connected, and are deleted when you disconnect it. Email conversations and attachments that Olmo has already saved into a client record are kept as part of that record for as long as your brokerage uses Olmo, and are not deleted automatically. You can ask us to delete them at any time using the contact details below.

Disconnecting and deleting your data

You can disconnect your Gmail account from Olmo at any time in Olmo's settings. When you disconnect, Olmo revokes its access with Google and deletes the stored authorisation tokens, so Olmo can no longer access your mailbox. Disconnecting stops any further access to your mailbox, but does not by itself remove conversations or attachments already saved into a client record. You may also revoke Olmo's access directly at https://myaccount.google.com/permissions. To request deletion of email conversations or attachments held in Olmo, contact support@nookideas.com.

Limited Use disclosure

Olmo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.

11. Contact

For privacy enquiries: support@nookideas.com