Privacy Notice — OTR Coaching on Telegram
Effective: 2026-05-07
This notice supplements OTR Models’ main privacy policy at otrmodels.co.uk/privacy-policy/, which covers OTR’s general processing of your data (application, age verification, identification, financial information). This notice covers the specific processing carried out via the Telegram coaching platform.
Who’s involved
| Role | Details |
|---|---|
| Data controller | NRM STUDIO SL (trading as OTR Models), Calle del Pedrer S/N, Santa Eulalia des Riu, Ibiza, Spain (NIF: B23830102) |
| Build & maintenance partner | N-Zyte Limited (England & Wales 12128436), ICO ZA898463 — built the platform and supports it on OTR’s infrastructure |
| Contact | info@otrmodels.co.uk |
Data collected
- Messages: text, transcribed voice notes, images, files, reactions
- Telegram identifiers: phone number, username, user ID, display name
- Group membership records
- Derived data: coaching cues, response status, AI summaries
Purposes and lawful basis
| Purpose | UK GDPR basis |
|---|---|
| Coaching delivery, tracking, and multi-coach operational visibility | Art. 6(1)(b) — performance of contract |
| Aggregated coaching analytics | Art. 6(1)(f) — legitimate interest |
| Health/availability information shared in the group (e.g. “unable to work today”) | Art. 9(2)(a) — explicit consent given through OTR’s onboarding |
The group is for work-related communication. Other special-category data (detailed medical conditions, religion, politics, immigration status, sex life, racial or ethnic background) should not be shared in the channel.
Service providers
OTR uses these providers to run the platform. They process your data on OTR’s behalf.
| Provider | Purpose | Country | Data-protection arrangement |
|---|---|---|---|
| Telegram FZ-LLC | Messaging infrastructure | UAE / global | No customer DPA available from provider |
| Anthropic | AI cue extraction | US | DPA in place (SCCs / UK IDTA) |
| Deepgram | Voice transcription | US | DPA in place (SCCs / UK IDTA) |
| Hostinger | Platform hosting | European Union | DPA in place |
| Doppler | Secrets management | US | DPA in place (SCCs / UK IDTA) |
International transfers
Transfers to the United States rely on Standard Contractual Clauses (Module 2) and the UK International Data Transfer Addendum.
Retention
| Data | Period |
|---|---|
| Raw messages | 12 months |
| Voice files | Deleted after successful transcription |
| Derived coaching data | Engagement duration + 6 months |
| Telegram identifiers | Engagement duration + 6 months |
Rights
Access, rectification, erasure, restriction, portability, and objection — email info@otrmodels.co.uk (30-day response). Complaints: UK Information Commissioner’s Office, ico.org.uk.
Changes
Material changes to service providers, retention, or purposes will be re-pinned in the group.
Last updated: 2026-05-06