Privacy & Information
Clear information about how ORSA PROJECTS LIMITED collects, uses, stores and protects personal information when you contact us, enquire about our services or work with us on a project.
We only use personal information where there is a clear business or legal reason to do so. The information we hold is relevant to the purpose for which it was collected and is reviewed in line with our retention requirements.
About this Privacy Policy
This Privacy Policy explains how ORSA PROJECTS LIMITED handles personal information in connection with this website, project enquiries, consultancy services and related communications.
For questions about this Privacy Policy or the handling of personal information, you can contact us using the details above.
Information we may collect
The information we collect depends on how you interact with us and the service you request.
Contact information
Name, email address, telephone number and other contact details you choose to provide.
Project information
Information you provide about a project, its requirements, schedule, activities or coordination needs.
Enquiry information
Details submitted through our contact or enquiry forms and information included in your correspondence.
Website information
Technical information such as browser, device, general usage information and information collected through cookies where applicable.
How information reaches us
Personal information may be collected when you:
- ✓ submit an enquiry through our website;
- ✓ contact us by email or telephone;
- ✓ provide information required for an agreed consultancy service;
- ✓ provide project documents or information for review;
- ✓ communicate with us during the delivery of an agreed service; or
- ✓ use our website where relevant technical or cookie information is collected.
Why we use personal information
We use personal information only where necessary for relevant and identifiable purposes connected with our business activities.
Our lawful bases
Depending on the circumstances, we may rely on one or more of the following lawful bases under applicable UK data protection law.
Contract
Where processing is necessary to take steps at your request before entering into an arrangement or to provide an agreed service.
Legal obligation
Where processing is necessary to comply with an applicable legal or regulatory requirement.
Legitimate interests
Where processing is necessary for legitimate business purposes and those interests are not overridden by applicable individual rights.
Consent
Where consent is the appropriate lawful basis, it will be requested for the relevant purpose and can be withdrawn where applicable.
Information provided for consultancy stays connected to the agreed purpose.
Where you provide project schedules, documents, supplier information, requirements or other project details, we use that information to carry out the agreed consultancy or coordination work.
Please provide only information that is relevant to the service and necessary for the agreed project requirement.
When information may be shared
We do not make personal information available generally. Where sharing is necessary, it will be limited to the relevant purpose and appropriate recipient.
Service providers
Appropriate providers supporting website hosting, communications, form processing, technical services, document handling or other business functions may process relevant information on our behalf.
Project participants
Where coordination forms part of an agreed service, relevant project information may be communicated to identified suppliers, contractors or other project participants where necessary for that agreed purpose.
Legal requirements
Information may be disclosed where required by law, regulation, court order or another lawful authority.
Information processed outside the UK
Some technology or service providers used in the operation of a modern website may process information outside the UK.
Where a restricted transfer of personal information takes place, we will use the applicable legal mechanism and appropriate safeguards required by UK data protection law.
Further information about a specific transfer or safeguard can be requested using the contact details in this policy.
How long information is kept
Personal information is not kept for longer than reasonably necessary for the purpose for which it is held, unless a longer period is required or permitted by law.
Retention periods are reviewed according to the purpose, legal requirements and operational need. Information may be deleted or anonymised earlier where it is no longer required.
Protecting information
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.
Access to information is limited according to the requirements of the relevant business activity.
No method of transmission or storage can be treated as completely free from risk. Where an incident involving personal information requires notification under applicable law, we will follow the relevant reporting requirements.
You have rights over your personal information.
Some rights are subject to specific conditions and exceptions under applicable data protection law.
Where a valid request is made, we will normally respond without undue delay and within one month. This period may be extended by up to a further two months where permitted by law because of the complexity or number of requests. Where an extension is required, we will explain the reason within the initial one-month period.
Cookies and similar technologies
Our website may use cookies or similar technologies to support essential website functions, remember relevant preferences, understand website usage or support other functions described in our Cookie Policy.
Where consent is required for a particular category of cookie or similar technology, the relevant choice will be requested before that technology is used where required.
Please see our Cookie Policy for further information.
Business communications
We may use contact information to communicate with you about an enquiry, agreed consultancy service, project requirement, appointment, document or related business matter.
Where marketing communications are sent, they will only be sent where there is an appropriate lawful basis and, where required, consent.
You can object to direct marketing at any time. An objection to direct marketing will be acted on without undue delay.
Automated decision-making
We do not use personal information for automated decision- making or profiling that produces legal or similarly significant effects on individuals as part of the ordinary operation of our project consultancy services.
Information relating to children
Our services are intended for adults and business or project-related users. We do not knowingly request personal information from children for the purpose of providing project consultancy services.
We are happy to review an information request.
If you have a question about how your information is used, please contact ORSA PROJECTS LIMITED first so that we can review the matter.
Information Commissioner
You have the right to raise a concern with the Information Commissioner’s Office (ICO) if you believe your personal information has been handled in a way that does not comply with applicable data protection law.
Further information about making a complaint is available from the ICO website.
Visit the Information Commissioner’s Office ↗Changes to this Privacy Policy
We may review this Privacy Policy from time to time to reflect changes to our services, website, information processing activities or applicable legal requirements.
Where a material change affects how personal information is used, the relevant privacy information will be updated before the new processing begins where required.
Need clarification?
Contact ORSA PROJECTS LIMITED if you have a question about this Privacy Policy or the personal information we hold about you.