Privacy Policy

1. Introduction

ORRJO ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orrjo.com and use our services.

ORRJO is a B2B growth agency based in Glasgow, Scotland. We operate as a data controller for the personal data we process. If you have any questions about this policy, please contact us at hello@orrjo.com.

2. Information We Collect

Information you provide directly

• Name, email address, phone number, and company name when you fill out contact forms or book a strategy call
• Job title and business information when you engage with our services
• Any information you include in messages or communications with us
• Payment and billing information when you purchase our services

Information collected automatically

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation paths
• Referring website addresses and search terms
• Date and time of your visits

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Respond to your enquiries and fulfil your requests
• Send you marketing communications (with your consent)
• Improve our website and services
• Analyse usage patterns and trends
• Comply with legal obligations
• Protect against fraudulent or unauthorised activity

Our legal bases for processing your personal data under GDPR include: your consent, performance of a contract, our legitimate business interests, and compliance with legal obligations.

4. Data Storage & Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure server infrastructure, and restricted access controls.

Your data may be stored on servers located within the United Kingdom and the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse site traffic. These include:

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors interact with our website
• Marketing cookies: Used to deliver relevant advertising and track campaign performance

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect your experience on our website.

6. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our website and delivering our services. These include:

• Website hosting and infrastructure providers
• Analytics services (e.g., Google Analytics)
• Email marketing platforms
• Customer relationship management (CRM) tools
• Payment processors

These third parties are contractually obligated to protect your data and may only use it for the specific purposes we have engaged them for. We do not sell your personal data to third parties.

7. Your Rights (GDPR)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions
• Right to restrict processing: You have the right to request that we limit how we use your data
• Right to data portability: You have the right to request your data in a structured, commonly used, and machine-readable format
• Right to object: You have the right to object to our processing of your personal data, including for direct marketing purposes
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at hello@orrjo.com. We will respond to your request within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe your data has been handled unlawfully.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

For prospective clients, we typically retain contact information for up to 24 months after our last interaction. For active clients, we retain data for the duration of the engagement and for a reasonable period thereafter for legal and contractual purposes.

When personal data is no longer required, we will securely delete or anonymise it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.

We encourage you to review this page periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

ORRJO
Glasgow, Scotland
Email: hello@orrjo.com