OrraData Privacy Policy
Last updated: September 2026
OrraData (“OrraData”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you visit our website, contact us, or use our services.
We follow applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies.
1. Information We Collect
We may collect:
Contact information: name, email address, phone number, organization, and job title.
Website information: IP address, browser, device, pages visited, and website usage.
Business information: information you provide when requesting a consultation, project, or service.
Communication data: information you provide through forms, email, meetings, or other communications.
Account and service information: information needed to provide our products and services.
We only collect information that is reasonably necessary for our business purposes.
2. How We Use Your Information
We may use your information to:
Respond to inquiries and requests.
Provide our services and support.
Manage client relationships and projects.
Provide and improve our products and technology solutions.
Send service updates and, where permitted, relevant business information.
Understand how our website and services are used.
Protect our systems and prevent fraud or misuse.
Meet legal and regulatory requirements.
We do not sell your personal information.
3. Legal Basis for Processing
Where GDPR applies, we process personal data based on one or more of the following:
Your consent.
The need to provide a service or perform a contract.
Our legitimate business interests, where they do not override your rights.
Legal obligations.
4. Client and Project Data
When we provide consulting, analytics, AI, data protection, or technology services, we may process information provided by our clients.
Our clients remain responsible for ensuring that they have the appropriate legal basis and permissions to provide personal data to us.
Where required, OrraData may act as a data processor on behalf of a client and will process personal data according to the client's instructions and applicable law.
For certain services, we may enter into a separate Data Processing Agreement (DPA).
5. Sharing Information
We may share information with trusted service providers that help us operate our business, such as:
Cloud and hosting providers
Technology and software providers
Analytics and security providers
Professional advisers
Payment providers
These providers may only process information as necessary to provide their services.
We may also disclose information when required by law or when necessary to protect our rights, users, or systems.
6. International Data Transfers
OrraData works with clients and service providers in different countries.
Your information may therefore be processed outside your country or the European Economic Area (EEA).
Where GDPR applies, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses (SCCs) or another legally recognized mechanism.
7. How Long We Keep Your Information
We keep personal information only for as long as necessary for the purpose for which it was collected, to provide our services, meet legal requirements, resolve disputes, and protect our legitimate business interests.
When information is no longer needed, we will delete or securely anonymize it.
8. Cookies
Our website may use cookies and similar technologies to:
Make the website work properly.
Remember preferences.
Understand website usage.
Improve our services.
Where required by law, we will ask for your consent before using non-essential cookies.
You can also control cookies through your browser settings.
9. Your Rights
Where GDPR applies, you may have the right to:
Access your personal information.
Correct inaccurate information.
Delete your information.
Restrict certain processing.
Object to certain processing.
Receive your information in a portable format.
Withdraw consent where processing is based on consent.
You also have the right to complain to your local data protection authority.
To exercise your rights, contact us using the details below.
10. Data Security
We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet-based system can be guaranteed to be completely secure.
11. Children's Privacy
Our services are intended primarily for organizations and professionals. We do not knowingly collect personal information directly from children without an appropriate legal basis and safeguards.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
When we make important changes, we will provide appropriate notice. The latest version will always be available on our website.
13. Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Email: hello@orradata.com
Website: www.orradata.com
For privacy requests, please use the subject line “Privacy Request.”