Who we are
ORCAURA LIMITED, registration number ΗΕ 498217, is the controller of personal information handled for this corporate website and our own business enquiries. Our registered address is Makariou III, 1-7, MITSIS 3, 3rd floor, 1065 Nicosia, Cyprus.
This policy covers visits to orcaura.com and communications with us about our SaaS platform and marketing agency services. It does not replace service-specific privacy information or data-processing terms for a client engagement.
Information we handle
- Website technical data: our web server receives information such as IP address, request date and time, requested page, response status, browser user-agent and, where supplied by your browser, referring page. Technical logs help us operate and protect the website.
- Information you send us: if you email us, we receive your email address, name, business contact details and any information or attachments you choose to include. This may include your company, role and service requirements.
- Business relationship information: where you discuss or enter an engagement with us, we may handle contact, correspondence, contract and billing information needed to administer that relationship. A colleague or business contact may provide your professional contact details when introducing you or arranging an engagement.
This website does not provide account registration, online checkout or an enquiry form. Its contact links open your email application. Please do not send passwords, API secrets, payment-card details or sensitive personal information in an initial enquiry.
Purposes & legal bases
Under the General Data Protection Regulation (GDPR), our purposes and applicable legal bases are:
- Running and securing the website: our legitimate interests in providing a reliable website, preventing misuse and investigating technical problems.
- Responding to enquiries and discussing services: steps at your request before entering a contract, where you would be a contracting party; otherwise, our legitimate interests in communicating with business representatives and responding to relevant requests.
- Administering an engagement: performance of a contract with you, or our legitimate interests in managing a relationship with the business you represent.
- Legal and accounting requirements: compliance with applicable legal obligations. Information needed to establish, exercise or defend legal claims may also be retained for our legitimate interests.
- Consent-based activities: where we ask for and rely on your consent for a particular purpose, you may withdraw it at any time without affecting the lawfulness of earlier processing.
You do not have to send us an enquiry. If you do not provide the contact information or service details needed for your request, we may be unable to respond or arrange the requested service.
Retention & security
We retain personal information for as long as needed for the purpose for which it was collected, taking into account the nature of an enquiry, the duration of an engagement, applicable record-keeping obligations and any relevant claims. Enquiry correspondence is kept while we address your request and any relevant follow-up; records needed for an ongoing client relationship are assessed separately.
Website access logs are configured for daily rotation with 14 rotated logs retained. Relevant records may be preserved longer when necessary to investigate a security incident or comply with a legal requirement.
The website uses HTTPS, and access to its server logs is restricted. No internet transmission or storage system can be guaranteed completely secure. Please contact us if you believe information has been disclosed improperly.
Your rights
Subject to the conditions and exceptions in applicable law, you can request access to your information, correction of inaccurate data, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests, including profiling on that basis, and object to direct marketing at any time. Where processing relies on consent, you can withdraw it.
Send a request to info@orcaura.com. We may ask for information reasonably necessary to verify your identity. We normally respond within one month; where the law permits an extension because of the complexity or number of requests, we will explain it within that initial period.
You may complain to the Cyprus Commissioner for Personal Data Protection or another competent supervisory authority, including in the EU/EEA country where you live or work. You do not have to contact us first.
We do not use data from this corporate website to make solely automated decisions that produce legal or similarly significant effects on you. The website is intended for business audiences, not children.
Client services & advertising data
Our SaaS and agency services can involve advertising-account information, campaign performance and conversion-event data. That processing is separate from simply visiting this website. The applicable roles, purposes, data fields, recipients and retention arrangements depend on the service and the client's instructions.
Where we act as a processor on a client's behalf, processing is governed by the relevant service and data-processing terms, and the client is responsible for its own privacy information and lawful collection of data. If your request concerns an advertiser's website or campaign, contact that advertiser first; we can help identify or route a request where appropriate.
Updates & contact
We may update this policy when our website or information-handling practices change. The date at the top identifies the latest version; material changes will be communicated as required by law.
Privacy enquiries · ORCAURA LIMITED
info@orcaura.com
1065 Nicosia, Cyprus