Privacy Policy
1. Introduction
ORRJO Limited ("ORRJO", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orrjo.com and use our services.
ORRJO Limited is a B2B growth agency registered in England and Wales (Companies House 13925853), with registered office at 86-90 Paul Street, London EC2A 4NE, and VAT number GB 406 990 969. ORRJO is registered with the UK Information Commissioner's Office under data protection registration CSN3566949. We operate as a data controller for the personal data we process in respect of our own business and website. Where ORRJO and a client share personal data under a signed Services Agreement and Statement of Work, the controller and processor arrangements are set out in that Statement of Work, in line with UK GDPR. If you have any questions about this policy, please contact us at hello@orrjo.com.
2. Information We Collect
Information you provide directly
- Name, email address, phone number, and company name when you fill out contact forms or book a strategy call
- Job title and business information when you engage with our services
- Any information you include in messages or communications with us
- Payment and billing information when you purchase our services
Information collected automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, and navigation paths
- Referring website addresses and search terms
- Date and time of your visits
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services
- Respond to your enquiries and fulfil your requests
- Send you marketing communications (with your consent)
- Improve our website and services
- Analyse usage patterns and trends
- Comply with legal obligations
- Protect against fraudulent or unauthorised activity
Our legal bases for processing your personal data under GDPR include: your consent, performance of a contract, our legitimate business interests, and compliance with legal obligations.
4. Data Storage & Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure server infrastructure, and restricted access controls.
Your data may be stored on servers located within the United Kingdom and the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
5. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic. These include:
- Essential cookies: Required for the website to function properly
- Analytics cookies: Help us understand how visitors interact with our website
- Marketing cookies: Used to deliver relevant advertising and track campaign performance
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect your experience on our website.
6. Third-Party Services
We may share your information with trusted third-party service providers who assist us in operating our website and delivering our services. These include:
- Website hosting and infrastructure providers
- Analytics services (e.g., Google Analytics)
- Email marketing platforms
- Customer relationship management (CRM) tools
- Payment processors
These third parties are contractually obligated to protect your data and may only use it for the specific purposes we have engaged them for. We do not sell your personal data to third parties.
7. Your Rights (GDPR)
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you
- Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data
- Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions
- Right to restrict processing: You have the right to request that we limit how we use your data
- Right to data portability: You have the right to request your data in a structured, commonly used, and machine-readable format
- Right to object: You have the right to object to our processing of your personal data, including for direct marketing purposes
- Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at hello@orrjo.com. We will respond to your request within one month, as required by law.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe your data has been handled unlawfully.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
For prospective clients, we typically retain contact information for up to 24 months after our last interaction. For active clients, we retain data for the duration of the engagement and for a reasonable period thereafter for legal and contractual purposes.
When personal data is no longer required, we will securely delete or anonymise it.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.
We encourage you to review this page periodically to stay informed about how we protect your information.
10. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
ORRJO Limited
86-90 Paul Street, London EC2A 4NE
Companies House: 13925853
VAT: GB 406 990 969
ICO Data Protection Registration: CSN3566949
Email: hello@orrjo.com