Legal

Privacy Policy

How Orrya collects, uses, and protects information.

Last updated: August 24, 2025

Summary

We respect your privacy. This policy explains what personal data we collect, why we collect it, how we use it, how long we keep it, and the choices available to you.

Information We Collect

We collect information that helps us provide, secure and improve our services, and to communicate with you. This includes:

  • Contact & account data: name, email, phone number, and any message or files you provide when you contact us or sign up for services.
  • Transactional data: records of communications and service requests.
  • Usage and analytics: pages visited, features used, session duration, and aggregated usage patterns (we store these in anonymised/aggregated form where possible).
  • Technical data: IP address, browser type and version, device identifiers, operating system, and other diagnostics used for security, debugging and analytics.
  • Cookies and similar technologies: see the Cookies section below for details.

How We Use Your Data

We use personal data for the following purposes:

  • To respond to your inquiries and provide the services you request.
  • To operate, secure and improve our website and services.
  • To detect, prevent and respond to fraud, abuse or security incidents.
  • To send administrative communications, such as updates to our terms or policy changes.

Legal bases for processing

Where applicable, we rely on one or more of the following legal bases to process personal data:

  • Performance of a contract: processing necessary to provide a service you requested.
  • Consent: where you have given clear consent, such as subscribing to a newsletter.
  • Legitimate interests: for example to secure our services, prevent fraud, and improve user experience — balanced against user rights.
  • Legal obligation: when required by law to retain or disclose information.

Cookies & Tracking

We use cookies and similar technologies for several purposes:

  • Strictly necessary: required for security, load balancing and to provide basic site functionality.
  • Performance & analytics: to understand how the site is used (e.g., page views, session length) and to improve performance.
  • Functional: to remember preferences such as theme or language choices.

You can control cookies in your browser settings. To opt out of analytics, consult your browser privacy controls or use opt-out links provided by the analytics provider. Disabling certain cookies may affect site functionality.

Third-party services

We may share information with third-party service providers who perform services on our behalf, for example hosting, analytics, email delivery and security. These providers are contractually required to protect your data and may be located outside your country.

Where data is transferred outside the European Economic Area (EEA), we use appropriate safeguards such as standard contractual clauses, or transfers to countries with an adequacy decision where applicable.

Data retention

We retain personal data only as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law.

  • Contact messages: typically retained for 1 year unless needed for ongoing support or legal reasons.
  • Analytics: aggregated or anonymised analytics retained for up to 24 months.
  • Backups: logs and backups may be retained for up to 90 days for recovery and security investigations.

Your rights

Depending on your location, you may have rights regarding your personal data. Common rights include:

  • Access: request a copy of personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Erasure: request deletion of your personal data (subject to legal limits).
  • Restriction: request limitation of processing in certain circumstances.
  • Portability: request a machine-readable copy of your data in certain situations.
  • Object: object to processing based on legitimate interests or direct marketing.

To exercise your rights, contact us at support@orrya.co. We may need to verify your identity before fulfilling requests.

Security measures

We use industry-standard technical and organisational measures to protect personal data, including TLS for data in transit, access controls, and regular security reviews. While we work to protect your data, no system is completely secure — we cannot guarantee absolute security.

Children's privacy

Our website and services are not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, contact us and we will take steps to delete it.

Automated decision-making

We do not use automated decision-making or profiling in a way that produces legal effects concerning individuals. If this changes, we will disclose the details here.

Changes to this policy

We may update this policy from time to time. We will post the updated policy here with a revised "Last updated" date. Significant changes will be communicated through the website or by other means where required.

Contact

If you have questions, concerns, or requests regarding your personal data, contact us at support@orrya.co.