Privacy Policy

Privacy Policy

2. Information We Collect

2.1 Information You Provide Directly

• Contact details (name, email address, phone number, postal address)

• Business information (company name, job title, industry)

• Project requirements and specifications

• Content, images, and materials for your projects

• Payment and billing information

• Communications with us (emails, messages, meeting notes)

2.2 Information Collected Automatically

• Website usage data (pages visited, time spent, browser type)

• IP addresses and device information

• Cookies and similar tracking technologies

• Server logs and technical diagnostics

2.3 Information from Third Parties

• Social media profiles (when you interact with our social pages)

• Business directories and professional networks

• Referral information from existing clients or partners
   

3. How We Use Your Information

3.1 Service Delivery

• Providing website design, development, SEO, and consulting services

• Managing projects and communicating about progress

• Delivering finished products and ongoing support

• Processing payments and maintaining accounts

3.2 Business Operations

• Responding to inquiries and providing customer support

• Improving our services and website functionality

• Marketing our services (with your consent where required)

• Maintaining business records and legal compliance

3.3 Legal Requirements

• Complying with legal obligations and regulations

• Protecting our rights and preventing fraud

• Responding to legal requests and court orders
   

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfill our service agreements with you

• Legitimate Interest: To operate our business and improve our services

• Consent: For marketing communications and non-essential cookies

• Legal Obligation: To comply with applicable laws and regulations
   

5. Data Sharing and Disclosure

5.1 Service Providers We may share information with trusted third parties who assist us in:

• Web hosting and technical infrastructure

• Payment processing and billing

• Email marketing and communications

• Analytics and website optimization

• Professional services (legal, accounting)

5.2 Business Transfers Information may be transferred in connection with business acquisitions, mergers, or asset sales.
5.3 Legal Requirements We may disclose information when required by law, legal process, or to protect rights and safety.
5.4 No Sale of Data We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

6.1 Security Measures

• Encryption of data in transit and at rest

• Secure hosting environments and regular backups

• Access controls and authentication systems

• Regular security assessments and updates

• Staff training on data protection practices

6.2 Data Breach Response In the event of a data breach, we will notify affected individuals and relevant authorities as required by law, typically within 72 hours of discovery.

7. Data Retention

7.1 Client Data

• Active client information: Retained for the duration of our relationship plus 7 years for legal/tax purposes

• Project files and communications: Retained for 3 years after project completion

• Financial records: Retained for 7 years as required by UK law

7.2 Marketing Data

• Newsletter subscribers: Until you unsubscribe

• Website analytics: Aggregated data retained indefinitely, personal data for 26 months
   

8. Your Rights

Under UK data protection law, you have the right to:
8.1 Access: Request copies of your personal data 8.2 Rectification: Correct inaccurate or incomplete information 8.3 Erasure: Request deletion of your data (subject to legal requirements) 8.4 Restriction: Limit how we process your data 8.5 Portability: Receive your data in a portable format 8.6 Objection: Object to processing based on legitimate interests 8.7 Withdraw Consent: Remove consent for marketing or non-essential processing
To exercise these rights, contact us using the details in Section 12.

9. Cookies and Tracking

9.1 Essential Cookies We use necessary cookies for website functionality, security, and service delivery.
9.2 Analytics Cookies With your consent, we use Google Analytics and similar tools to understand website usage and improve our services.
9.3 Marketing Cookies We may use cookies for remarketing and advertising purposes with your explicit consent.
9.4 Cookie Management You can control cookie preferences through your browser settings or our cookie consent banner.

10. International Transfers

10.1 Data Location Your data is primarily processed within the UK and EU. Any transfers outside these regions will be protected by appropriate safeguards such as:

• Adequacy decisions by the UK government

• Standard Contractual Clauses

• Certification schemes or codes of conduct
   

11. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

12. Contact Information

Data Controller: Morgan Lewis-Pritchard trading as Orvu
Contact Details:
 

• Email: info@orvu.co.uk
  
   

Data Protection Queries: For privacy-related questions or to exercise your rights, contact us using the above details with "Data Protection Query" in the subject line.
Supervisory Authority: If you're not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or website notice. The "Last Updated" date indicates when changes were last made.

14. Specific Service Privacy Notices
14.1 Website Development Projects Client content and materials are handled with strict confidentiality. We may retain copies for quality assurance and legal protection but will not use client content for other purposes without permission.
14.2 SEO and Marketing Services Analytics and performance data may be collected from client websites to measure campaign effectiveness. This data is used solely for service delivery and reporting.
14.3 Business Consulting All business information shared during consultations is treated as confidential and used only to provide the requested services.
This Privacy Policy is effective as of the date last updated above and applies to all information collected by Orvu.