Effective Date: 01-04-2025
Company Name: Orderly Limited
Contact: hello@orderly.io

1. Introduction

This Privacy Policy explains how Orderly Limited (“Orderly”, “we”, “us”, or “our”) collects, processes, uses, stores, shares, and protects personal data through its website located at https://www.orderly.io and its associated products and services where not governed by specific customer contracts that override these terms for named services.

We are committed to protecting your privacy and complying with our obligations under applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where relevant, the EU GDPR.

By using our website or services, you agree to the practices described in this policy unless a separate agreement explicitly governs data use.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and Contact Data: Name, email address, job title, company name, phone number, and workplace location (e.g. store, site, or office).
• Technical Data: IP address, browser type, operating system, device identifiers.
• Location Data: Geographical location inferred from your IP address.
• Payment Data: Tokenised payment information used for billing purposes.
• Usage Data: Information about how you interact with our website and services.
• Account Data: Information used to create or manage accounts on orderly.io or connected platforms.
• CCTV Data: Video footage of individuals visiting our office premises, collected for safety and security purposes.

We do not knowingly collect data from or market to individuals under the age of 18.

3. How We Collect Data

We collect personal data using the following methods:

• When you visit our website or interact with our content.
• When you complete forms, sign up for services, or contact us.
• When accounts are created on orderly.io or integrated third-party platforms.
• Through cookies and similar tracking technologies.
• Through CCTV systems in our physical office locations.

4. Use of Personal Data

We process personal data for the following purposes:

• To provide, maintain, and improve our services and website.
• To communicate with users, respond to enquiries, and provide support.
• To manage user accounts and access permissions.
• For billing, invoicing, and payment processing.
• To carry out marketing and promotional activities (subject to applicable laws).
• To perform analytics, business reporting, and product development.
• To enforce our terms of service and comply with legal obligations.
• To ensure physical security through office CCTV footage.

All processing is carried out under a lawful basis, such as consent, contractual necessity, or legitimate interests, in accordance with applicable legislation.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to collect data on user behaviour and to deliver targeted advertising and site analytics. We use:

• Cookiebot (for consent management)
• Google Analytics and Google services
• LinkedIn
• Webflow
• Microsoft (Azure)
• Bing Ads
• LinkedIn
• Pipedrive
• Brevo (formerly Sendinblue)
• Mailchimp
• Microsoft services

You may manage your cookie preferences via the Cookiebot banner or your browser settings. For more information, please see our separate Cookie Policy.

6. Data Sharing and Disclosure

We may share personal data with third parties, including:

• Service Providers and Vendors: e.g. cloud hosting providers, email delivery services, CRM tools, analytics providers, and infrastructure platforms.
• Legal or Regulatory Authorities: when required to comply with legal obligations or regulatory requests.
• Contracted Clients and Partners: where such sharing is necessary to provide our services (e.g. access control for enterprise tools).

Data may be transferred outside the UK or European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office or European Commission.

We do not sell personal data under any circumstances.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, contractual, or reporting obligations.

Retention periods vary depending on the type of data and the context in which it was collected. CCTV footage is retained in accordance with internal security protocols and relevant laws.

8. Data Security

Orderly Limited takes information security seriously and has implemented a range of technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction.

We are certified to the ISO/IEC 27001 international standard for information security management systems (ISMS). Security protocols are continuously reviewed and updated in line with emerging threats and industry best practices.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• The right to access your data
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data
• The right to restrict or object to certain types of processing
• The right to data portability
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or another relevant supervisory authority

To exercise your rights, email us at hello@orderly.io. We aim to respond within one month.

10. Third-Party Links and Embedded Services

Our website may include links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

11. Customer Contracts

In some cases, customer contracts may contain specific provisions that override the terms of this Privacy Policy, particularly where Orderly acts as a data processor on behalf of a customer organisation.

In those circumstances, the customer’s privacy notice and terms will apply.

12. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Updates will be posted on this page, and where material changes occur, we may notify you directly. Your continued use of our services after such updates will signify your acceptance of the changes.

13. Contact

If you have any questions or concerns about this policy or how your data is handled, please contact:

Address to: Attention - Data Protection Officer
Email: hello@orderly.io
Company: Orderly Limited
Registered in the United Kingdom

‍