Privacy Policy

Last updated: 22 February 2026

ORRJO Ltd ("ORRJO", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at orrjo.com (the "Site") and use our services.

ORRJO Ltd is registered in Scotland, United Kingdom, with our office at 125 West Regent Street, Glasgow. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ORRJO Ltd is the data controller.

1. Information We Collect

Information you provide directly:

• Name, email address, company name, and job title when you fill in our contact forms
• Information provided when booking a call via our scheduling tools (Calendly)
• Responses to our business audit and growth blueprint tools
• Any other information you choose to send us via email or our Site

Information collected automatically:

• Browser type and version, operating system, device type
• IP address and approximate geographical location
• Pages visited, time spent on pages, referring website
• Cookies and similar tracking technologies (see Section 5 below)

Information from third parties:

• Website visitor identification via Warmly (business contact enrichment for B2B visitors)
• Analytics data from our hosting provider (Netlify)

2. How We Use Your Information

We use the information we collect to:

• Respond to your enquiries and provide the services you request
• Send you relevant communications about our services (with your consent)
• Improve our website, services, and user experience
• Analyse website traffic and usage patterns
• Identify and engage with potential business clients (B2B prospecting)
• Comply with legal obligations and protect our rights

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Consent: When you submit a contact form or opt in to communications
• Legitimate interest: For B2B marketing, website analytics, and improving our services. We ensure our interests do not override your fundamental rights
• Contractual necessity: When processing is required to fulfil a service agreement with you
• Legal obligation: When we are required to process data by law

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service providers: Hosting (Netlify), analytics, scheduling (Calendly), CRM systems, and email platforms that help us operate our business
• Visitor intelligence: Warmly, for identifying business visitors to our website
• Legal requirements: If required by law, regulation, or legal process
• Business transfers: In connection with any merger, acquisition, or sale of assets

All third party providers are contractually obligated to protect your data and process it only as instructed.

5. Cookies and Tracking

Our Site uses cookies and similar technologies to enhance your experience. These include:

• Essential cookies: Required for the Site to function properly (e.g., navigation, security)
• Analytics cookies: Help us understand how visitors use our Site so we can improve it
• Third party cookies: Set by our partners (Warmly, Calendly) for functionality and visitor insights

You can manage your cookie preferences using the cookie banner displayed when you first visit our Site. You can also control cookies through your browser settings. Please note that disabling certain cookies may affect your experience.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Specifically:

• Contact form submissions: retained for up to 24 months after your last interaction
• Analytics data: retained in anonymised form indefinitely
• Client data: retained for the duration of our business relationship plus 6 years for legal and accounting purposes

7. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we restrict processing of your data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or direct marketing
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@orrjo.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS, and we regularly review our security practices.

9. International Transfers

Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO, or reliance on the provider's participation in an approved transfer mechanism.

10. Children's Privacy

Our services are designed for businesses and are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

• Email: hello@orrjo.com
• Address: ORRJO Ltd, 125 West Regent Street, Glasgow, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.