Privacy Policy

1. Information we collect

We collect the following categories of data:

• Information you provide. When you submit our contact or consultation forms, we collect your name, email address, company name (if provided), and the details of your message — including company stage, spend range, and urgency where you choose to share them.
• Engagement information. During a paid engagement we may receive materials you share with us (for example architecture diagrams, code access, or incident reports). This is governed by our engagement agreement and any NDA in place.
• Technical data. Our hosting and infrastructure providers may automatically process limited technical data such as IP address and basic request logs for security and reliability.

2. How we use your information

• To respond to your enquiry and assess whether we are a fit.
• To deliver, manage, and improve our consulting services.
• To communicate with you about an engagement or your request.
• To meet legal, accounting, and security obligations.

We do not sell your personal data, and we do not use it for advertising.

3. Legal basis (GDPR)

Where the EU General Data Protection Regulation applies, we process personal data on the basis of: your consent (when you contact us), the performance of a contract (to deliver an engagement), and our legitimate interests (to run and secure our business). You may withdraw consent at any time.

4. Sharing and processors

We share personal data only with service providers who help us operate, under appropriate data-protection terms. These include our email delivery provider (Resend) and our hosting/infrastructure provider. We may also disclose data where required by law.

5. Data retention

We keep enquiry data only as long as needed to respond and for our legitimate business records. Engagement materials are retained for the duration of the engagement plus any agreed retention period, after which they are deleted in line with our agreement and confidentiality commitments.

6. International transfers

We are based in Estonia (EU). Some processors may handle data outside the EEA; where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, email ceo@orsuntech.com. You may also lodge a complaint with your local data-protection authority.

8. Security

We apply reasonable technical and organizational measures to protect personal data, including access controls and confidentiality agreements. No method of transmission or storage is perfectly secure, but we work to protect your information appropriately.

9. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above when we do, and material changes will be reflected on this page.

10. Contact

For any privacy question or request, contact us at ceo@orsuntech.com.