Privacy Policy

1. Introduction

ORRJO Limited ("ORRJO", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orrjo.com and use our services.

ORRJO Limited is a B2B growth agency registered in England and Wales (Companies House 13925853), with registered office at 86-90 Paul Street, London EC2A 4NE, and VAT number GB 406 990 969. ORRJO is registered with the UK Information Commissioner's Office under data protection registration CSN3566949. We operate as a data controller for the personal data we process in respect of our own business and website. Where ORRJO and a client share personal data under a signed Services Agreement and Statement of Work, the controller and processor arrangements are set out in that Statement of Work, in line with UK GDPR. If you have any questions about this policy, please contact us at hello@orrjo.com.

2. Information We Collect

Information you provide directly

• Name, email address, phone number, and company name when you fill out contact forms or book a strategy call
• Job title and business information when you engage with our services
• Any information you include in messages or communications with us
• Payment and billing information when you purchase our services

Information collected automatically

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation paths
• Referring website addresses and search terms
• Date and time of your visits

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Respond to your enquiries and fulfil your requests
• Send you marketing communications (with your consent)
• Improve our website and services
• Analyse usage patterns and trends
• Comply with legal obligations
• Protect against fraudulent or unauthorised activity

Our legal bases for processing your personal data under GDPR include: your consent, performance of a contract, our legitimate business interests, and compliance with legal obligations.

4. Data Storage & Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure server infrastructure, and restricted access controls.

Your data may be stored on servers located within the United Kingdom and the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic. These include:

• Essential cookies: Required for the website to function properly
• Visitor identification cookies and scripts: We use RB2B, Leadinfo and Warmly to understand how visitors interact with the site and, where the technology can resolve it, which company a visitor is browsing from. RB2B processes data in the United States. These load only if you accept non-essential cookies.
• Marketing cookies: Used to deliver relevant advertising and track campaign performance

When you first visit orrjo.com, our cookie banner lets you accept all cookies or reject non-essential ones. Essential cookies are always active; analytics and marketing cookies only load if you accept them. You can change your choice at any time through the Cookie Preferences link in the footer, and we treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of non-essential cookies. You can also manage cookies through your browser settings. Disabling certain cookies may affect your experience on our website.

6. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our website and delivering our services. These include:

• Website hosting and infrastructure providers
• Visitor identification and website analytics providers: RB2B (United States), Leadinfo (Netherlands) and Warmly (United States)
• Email marketing platforms
• Customer relationship management (CRM) tools
• Payment processors

These third parties are contractually obligated to protect your data and may only use it for the specific purposes we have engaged them for. We do not sell your personal data to third parties.

7. Your Rights (GDPR & CCPA)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions
• Right to restrict processing: You have the right to request that we limit how we use your data
• Right to data portability: You have the right to request your data in a structured, commonly used, and machine-readable format
• Right to object: You have the right to object to our processing of your personal data, including for direct marketing purposes
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at hello@orrjo.com. We will respond to your request within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe your data has been handled unlawfully.

California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect and how we use it, to access, delete, or correct that information, to opt out of the sale or sharing of your personal information, and not to be discriminated against for exercising these rights.

To opt out of the sale or sharing of your personal information, including data collected by analytics and visitor-identification cookies, use the Do Not Sell or Share My Personal Information link in the footer of any page. We also recognise and honour Global Privacy Control (GPC) signals from your browser as a valid opt-out request. To make any other request, contact us at hello@orrjo.com.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

For prospective clients, we typically retain contact information for up to 24 months after our last interaction. For active clients, we retain data for the duration of the engagement and for a reasonable period thereafter for legal and contractual purposes.

When personal data is no longer required, we will securely delete or anonymise it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.

We encourage you to review this page periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

ORRJO Limited
86-90 Paul Street, London EC2A 4NE
Companies House: 13925853
VAT: GB 406 990 969
ICO Data Protection Registration: CSN3566949
Email: hello@orrjo.com