Handled with care.
This Privacy Policy explains how ORSA CONSULTING LTD collects, uses, stores and protects personal information when you contact us or use this website.
Who we are
The organisation responsible for personal information covered by this Privacy Policy is:
Company No. 10831566
8 Shepherd Market, London, England, W1J 7JY
Email: support@orsatechnical.co.uk
Telephone: +44 7828592147
What information we may collect
The information we collect depends on how you interact with us. It may include:
- Your name and contact details.
- Your business or organisation name.
- Your email address and telephone number.
- Information contained in an enquiry or consultation request.
- Information about your business requirement or project context.
- Documents or files that you voluntarily provide for a consultation.
- Correspondence between you and ORSA CONSULTING LTD.
- Website usage and technical information where cookies or similar technologies are used.
Please only provide information that is relevant to your enquiry or the service being discussed.
How information is collected
Information may be collected when you:
- Complete a contact or enquiry form on this website.
- Email or telephone us.
- Provide information during a consultation.
- Send supporting documents or other relevant information.
- Communicate with us after an enquiry has been submitted.
- Browse or interact with our website through technologies described in our Cookie Policy.
Where personal information is obtained from another source rather than directly from you, we will provide applicable privacy information in accordance with the requirements that apply to that processing.
Why we use personal information
We use personal information only where there is a relevant and lawful reason to do so. This may include:
- Responding to business enquiries.
- Understanding the requirement described in an enquiry.
- Arranging and conducting consultations.
- Preparing agreed written summaries, recommendations or action plans.
- Communicating about an existing or proposed service.
- Managing business records and administrative requirements.
- Maintaining appropriate records of correspondence and agreed work.
- Responding to requests concerning personal information.
- Maintaining, securing and improving the operation of our website.
- Meeting applicable legal, regulatory or accounting requirements.
Our lawful bases for processing
Depending on the circumstances, we may rely on one or more of the following lawful bases under applicable UK data protection law:
| Lawful basis | How it may apply |
|---|---|
| Contract | Where processing is necessary to take steps at your request before entering into an agreement, or to manage an agreed service. |
| Legitimate interests | Where processing is reasonably necessary for business administration, communication, service management, website security or maintaining appropriate business records, while considering the relevant rights and interests of individuals. |
| Legal obligation | Where processing is necessary for us to comply with a legal or regulatory requirement. |
| Consent | Where consent is specifically required and you have provided it for the relevant purpose. Where consent is the lawful basis, it may be withdrawn at any time. |
When information may be shared
We do not sell personal information.
Personal information may be shared where reasonably necessary for the purposes described in this policy, including with:
- Website hosting, website maintenance and technical service providers.
- Email, communications and document management providers.
- Professional advisers where appropriate and necessary.
- Service providers acting on our documented instructions.
- Authorities or organisations where disclosure is required by law.
Where another organisation processes information on our behalf, we take reasonable steps to ensure that appropriate contractual, confidentiality and security arrangements are in place.
We do not disclose personal information to unrelated third parties simply for their own marketing purposes.
International data transfers
Some service providers used for website hosting, email, communications, security, storage or technical administration may process information outside the United Kingdom.
Where personal information is transferred internationally, we will use an applicable lawful transfer mechanism and appropriate safeguards where required by applicable data protection law.
The safeguards used will depend on the destination and the service involved.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any applicable legal, accounting, contractual or record-keeping requirements.
| Information type | Typical retention approach |
|---|---|
| General enquiries | Normally retained for up to 12 months after the enquiry has been closed, unless a longer period is reasonably required. |
| Consultation and service records | Normally retained for the period reasonably required for administration, continuity and record-keeping, taking account of applicable obligations. |
| Business correspondence | Retained for as long as reasonably necessary to maintain an accurate record of the relevant business relationship or enquiry. |
| Technical and security records | Retained for a period appropriate to security, maintenance, troubleshooting and operational requirements. |
Retention periods may be extended where information needs to be preserved to establish, exercise or defend legal rights, comply with a legal obligation, or resolve an ongoing matter.
How we protect information
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, inappropriate use, accidental loss, alteration or disclosure.
- Access to information is limited to those who reasonably need it.
- Business systems are managed with appropriate access controls.
- Information is handled according to its purpose and level of sensitivity.
- Reasonable steps are taken to maintain the security of website and communication systems.
No method of transmitting or storing information can be guaranteed to be completely secure. We therefore encourage you to avoid sending unnecessary confidential information through ordinary website enquiry forms.
Your data protection rights
Depending on the circumstances and the applicable legal requirements, you may have rights concerning your personal information.
Some rights are subject to specific conditions and exemptions. This means that a request does not automatically result in deletion, restriction or cessation of all processing.
Request handling: We normally respond to a valid data protection request without undue delay and, where applicable, within one calendar month. Where the applicable rules allow additional time because of the complexity or number of requests, we will explain this within the required period.
Withdrawing consent
Where we rely on consent to process personal information, you may withdraw that consent at any time by contacting us.
Withdrawal of consent does not affect processing that took place before the withdrawal. It also does not affect processing that is based on another lawful basis where one applies.
Automated decision-making
ORSA CONSULTING LTD does not use solely automated decision-making, including profiling, to make decisions about individuals that produce legal or similarly significant effects.
Where automated tools are used for ordinary website, security or administrative functions, they are not intended to replace appropriate human consideration of individual enquiries.
Website, cookies and external services
Our website may use cookies and similar technologies for essential operation, preferences, security, analytics or other functions where applicable.
The use of cookies and similar technologies is explained separately in our Cookie Policy.
Our website may also contain links to external websites or services. Once you leave our website, the privacy practices of the external organisation will apply. We recommend reviewing the relevant organisation’s privacy information before providing personal data.
Questions or concerns
If you have a question about how your personal information has been handled, please contact us first so that we can review the matter.
Email: support@orsatechnical.co.uk
Telephone: +44 7828592147
8 Shepherd Market, London, England, W1J 7JY
You also have the right to raise a concern with the Information Commissioner’s Office (ICO) where you consider that your personal information has not been handled in accordance with applicable data protection requirements.
Changes to this Privacy Policy
We may update this Privacy Policy when our website, services, information-handling arrangements or applicable requirements change.
The latest version will be made available on this website. Where a change introduces a new use of personal information that requires additional privacy information, we will provide the relevant information before the new processing begins where required.
This Privacy Policy is effective immediately upon publication on this website.
Need to contact us?
If you have a privacy question, data protection request or general business enquiry, our team can be contacted directly.