Introduction
This Privacy Policy explains how ORIENTIAL LTD (“Oriential”, “we”, “us” or “our”) collects, uses, stores and protects personal information when you visit oriential.com, contact us, request a review, book a call, become a client or otherwise interact with us.
Who We Are
The data controller responsible for your personal information is:
ORIENTIAL LTD
Company number: 16609791
Registered in England and Wales
Registered office: 128 City Road, London, United Kingdom, EC1V 2NX
Email: info@oriential.com
We process personal information in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018, as amended from time to time.
Where other data protection laws apply to our activities, including the EU GDPR, we will comply with those requirements where applicable.
Information We Collect
Depending on how you interact with us, we may collect:
Contact information
- Name
- Business or organisation name
- Job title or role
- Email address
- Telephone number
Enquiry and project information
- Website URL
- Business information
- Project requirements
- Messages and correspondence
- Files, images or documents you send us
- Information you provide when requesting a review, proposal or call
Client and transaction information
- Billing details
- Invoice and payment records
- Contract and project information
- Payment status
We do not normally receive or store your full payment card details. Card payments are handled by the relevant payment provider.
Technical and website information
When you use our website, we may receive information such as:
- IP address
- Browser and device information
- Operating system
- Pages visited
- Referring website
- Approximate location derived from technical information
- Website interactions and usage information
Some of this information may be collected through cookies or similar technologies.
Business contact information
As part of legitimate business development, we may also collect professional contact information from publicly available business sources, such as:
- Company websites
- Business directories
- Professional profiles
- Public company information
- Other legitimate public business sources
This may include a person’s name, professional role, company, work contact details and publicly available business information.
We do not intentionally collect sensitive personal information unless it is genuinely necessary and lawful to do so.
How We Use Your Information
We may use personal information to:
- Respond to enquiries
- Provide free reviews or consultations
- Prepare proposals and quotations
- Communicate about potential or active projects
- Deliver our services
- Manage projects and client relationships
- Process payments and maintain financial records
- Provide ongoing support or website management
- Schedule meetings and calls
- Improve our website and services
- Maintain website security
- Prevent misuse or fraud
- Comply with legal, tax and accounting obligations
- Carry out appropriate business-to-business marketing and business development
- Keep records of people who have asked us not to contact them
We will not use your information for purposes that are incompatible with the reason it was collected unless permitted by law.
Our Lawful Bases
Depending on the situation, we rely on one or more of the following lawful bases:
Contract
When processing is necessary to provide services you have requested, take steps before entering into a contract, manage a project or fulfil an agreement with you.
Legal obligation
When we need to process or retain information to meet legal, accounting, tax or regulatory requirements.
Legitimate interests
We may rely on legitimate interests where reasonably necessary to:
- Operate and grow our business
- Respond to business enquiries
- Manage client relationships
- Protect our systems and website
- Improve our services
- Keep appropriate business records
- Carry out proportionate business-to-business development and marketing
We consider the impact on your privacy before relying on legitimate interests.
Consent
Where consent is required, including for certain marketing activities or non-essential cookies and similar technologies, we will request it before processing.
You may withdraw consent at any time.
Marketing and Business Development
We may contact existing clients, prospective clients and business contacts about services that may reasonably be relevant to their business where permitted by law.
Where consent is legally required, we will obtain it first.
You can object to direct marketing at any time.
If you ask us not to contact you for marketing purposes, we may retain limited information on a suppression list so that we can respect your request.
Payments
Payments may be processed by third-party payment providers, including Stripe where Stripe is offered as a payment method.
Payment providers process payment information under their own privacy terms and security procedures.
Oriential does not normally store full payment card numbers or security codes.
Who We Share Information With
We do not sell personal information.
We may share information where reasonably necessary with:
- Website and hosting providers
- Email and cloud service providers
- Customer relationship and project management systems
- Scheduling and communication platforms
- Analytics providers
- Payment processors
- Accounting and financial service providers
- Professional advisers
- Contractors or team members involved in delivering an agreed service
- IT and security providers
- Government authorities, regulators or law enforcement where legally required
We only provide information that is reasonably necessary for the relevant purpose.
Where service providers process information on our behalf, we expect appropriate confidentiality and data-protection arrangements.
International Data Transfers
Oriential works internationally and some members of our team or service providers may operate outside the United Kingdom.
As a result, personal information may sometimes be processed outside the UK.
Where data protection law requires safeguards for an international transfer, we use an appropriate lawful mechanism, which may include:
- A recognised adequacy decision
- Approved contractual safeguards
- The UK International Data Transfer Agreement or applicable addendum
- Other legally recognised transfer mechanisms
You may contact us if you would like more information about safeguards relevant to your information.
How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal or contractual requirements.
Our normal approach is:
Enquiries and prospective clients
Information relating to enquiries, proposals and free reviews may normally be retained for up to 24 months after our last meaningful interaction, unless there is a reason to retain it longer or you ask us to remove it earlier where applicable.
Client and project information
Project and client records may normally be retained for the duration of our relationship and for up to 6 years afterwards where required for legal, contractual, tax, accounting or dispute purposes.
Financial records
Invoices, payments and relevant accounting records are retained for the periods required by applicable law.
Marketing suppression information
If you opt out of marketing, we may retain the minimum information necessary to make sure we do not contact you again for that purpose.
We periodically review the information we hold and delete or anonymise information when it is no longer needed.
Cookies and Similar Technologies
Our website may use cookies and similar technologies for purposes such as:
- Essential website operation
- Security
- Remembering preferences
- Measuring website performance
- Analytics
- Understanding how visitors use the website
Strictly necessary technologies may operate without consent where permitted by law.
Where consent is required for analytics, advertising or other non-essential technologies, they should not be activated until you have made your choice.
You can change or withdraw your cookie preferences through our cookie controls where available.
You may also control cookies through your browser, although disabling certain essential technologies may affect website functionality.
Your Rights
Depending on the law that applies to you, you may have rights including:
- Access to your personal information
- Correction of inaccurate information
- Erasure of information
- Restriction of processing
- Data portability
- Objection to certain processing
- Withdrawal of consent
Your right to object to direct marketing
You have the right to object at any time to the use of your personal information for direct marketing.
If you do so, we will stop using your information for that purpose.
To exercise your rights, contact:
We may need to verify your identity before completing certain requests.
Complaints
If you have concerns about how we handle personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
ico.org.uk
If another data protection authority has jurisdiction over your information, you may also have the right to complain to that authority.
Security
We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
No internet-based system can be guaranteed to be completely secure.
Third-Party Websites
Our website may contain links to websites or services operated by third parties.
We are not responsible for their privacy practices. You should review their own privacy information before providing personal information to them.
Children
Our services are intended primarily for businesses and professionals and are not directed at children.
We do not knowingly collect personal information from children where it is not appropriate or lawful to do so.
Changes to This Policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The current version will always be published on this page with its latest update date.
Where a significant change affects how we use existing personal information, we will provide additional notice where required.
Contact
For questions about this Privacy Policy or your personal information:
ORIENTIAL LTD
128 City Road
London
United Kingdom
EC1V 2NX
Email: info@oriential.com