How we handle commercial enquiry information.

Who is responsible and how to contact us

ORSENATAS LTD is the controller for this commercial website enquiry flow. ORSENATAS LTD, company number 16435964, registered in England and Wales. Registered office: Piccadilly Business Centre, Unit C, Aldow Enterprise Park, Blackett Street, Manchester, M12 6AE, United Kingdom.

For a privacy request or complaint, write to Piccadilly Business Centre, Unit C, Aldow Enterprise Park, Blackett Street, Manchester, M12 6AE, United Kingdom and mark the correspondence “Privacy request”. If we are already corresponding with you, you may reply through that existing channel. The contact page is available for general commercial questions.

Contact ORSENATAS Systems

Information we collect

Please do not include passwords, access keys, payment-card data, special-category information or other sensitive material in a project brief.

• Your name, email address and business name.
• Your website or social profile if you choose to provide it.
• Your business type, desired solution, preferred plan and project description.
• Your business-enquiry acknowledgement and your separate choice about occasional product-update emails.
• The privacy-notice version shown to you and, where you make a marketing choice, its status and timestamp.
• An opaque session identifier and a submission identifier used by the enquiry flow.
• Limited first-party enquiry context: landing and last page, referrer, permitted campaign parameters, event type and timestamps.

Why we use information and our lawful bases

We do not rely on marketing consent to receive, assess or respond to your enquiry.

• To assess and respond to the commercial discussion you request: steps at your request before a contract where applicable, and our legitimate interests in responding to and managing B2B enquiries.
• To operate the form, maintain submission integrity, prevent accidental duplicates and protect the service from misuse: our legitimate interests in providing a secure and reliable service.
• To understand the source and performance of submitted enquiries using limited first-party attribution and event records: our legitimate interests in measuring and improving the commercial service with proportionate data.
• To keep records needed for business administration, legal compliance and the establishment, exercise or defence of legal claims: legal obligation where one applies and otherwise our legitimate interests in responsible record keeping.
• To send occasional product-update emails only if that activity is introduced and you have opted in: consent.

Optional product updates

The product-update checkbox is optional and off by default. We record whether you granted or declined the choice, together with the applicable notice version; declining does not affect the enquiry response.

The current service records this preference but does not itself enable outbound marketing. If consent-based product emails are activated later, you may withdraw consent at any time by replying to a message or writing to the registered office. Withdrawal does not affect processing that was lawful before withdrawal.

Service providers and security

Authorised ORSENATAS LTD personnel may handle an enquiry. Service providers may process information on our instructions where needed for hosting, infrastructure, security, backups or business administration. We may also disclose information where required by law or where necessary for legal claims. We do not sell enquiry information.

We use technical and organisational safeguards appropriate to the service, including access controls, tenant separation, protected network transport and encrypted backup controls. No internet service can promise absolute security.

International transfers

Some infrastructure or support processing may take place outside the United Kingdom. Where this is a restricted transfer, we use a route permitted by UK data-protection law, such as UK adequacy regulations or appropriate contractual safeguards. You may ask for information about the safeguard applicable to your information through the privacy contact route above.

How long we keep information

Under the current repository configuration, analytics event records receive a 90-day expiry date. The retention process deletes them after that date when it runs. An unlinked server-side session becomes eligible for deletion after 90 days once it has no linked enquiry or retained analytics event. A session linked to an enquiry follows the enquiry record.

We do not apply a single fixed deletion period to enquiry and lead records. We determine retention by whether the enquiry or business relationship remains active, whether follow-up is reasonably expected, applicable legal or accounting obligations, the need to establish or defend claims, and the need to retain a suppression or consent record. We delete or anonymise information when it is no longer needed for those purposes.

Your data-protection rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction of use, or portability of information you provided. These rights are not absolute and the lawful basis and context can affect which rights apply. We may need to verify your identity before acting on a request.

Your right to object or withdraw consent

You may object to processing based on legitimate interests. You have an absolute right to object to direct marketing. Where we rely on consent, you may withdraw it at any time. Use the privacy contact route above, or reply to an existing message where available.

Complaints

Please contact us first if you have a privacy concern so that we can investigate it. You also have the right to make a data-protection complaint to the UK Information Commissioner’s Office (ICO).

How to make a data-protection complaint to the ICO

Automated decisions and notice changes

We do not use the commercial enquiry information for solely automated decisions that produce legal or similarly significant effects, and we do not build cross-site behavioural profiles.

We may update this notice if the commercial website or its processing changes. The effective date and version below identify the notice presented for new submissions.