Privacy, handled with care.
This Privacy Policy explains how ORSA GROUP LTD collects, uses, stores and manages personal information when visitors use this website, submit an enquiry or engage with our procurement and supplier management consultancy services.
Who we are
ORSA GROUP LTD is responsible for the personal information collected through this website and in connection with the consultancy services described on the website.
Information we collect
We collect only information that is reasonably relevant to website enquiries, service arrangements, consultancy delivery and routine business administration.
Information provided directly
- Name and contact details.
- Business name and business contact information.
- Telephone number where provided.
- Email address.
- Service selected or requested.
- Information included in an enquiry.
- Information supplied for a quotation, supplier or procurement review.
- Correspondence relating to an existing service.
Website information
When the website is accessed, limited technical information may be processed, such as browser type, device information, general website activity and technical identifiers used to maintain website functionality and security.
Information is collected only where it has a relevant purpose connected with the operation of the website or provision of the services.
How information is used
Personal information may be used for the following defined purposes:
- Responding to website enquiries.
- Discussing requested consultancy requirements.
- Arranging consultations and service appointments.
- Providing the selected consultancy service.
- Reviewing information supplied for procurement-related work.
- Preparing service summaries, comparison notes or action plans where included.
- Maintaining business and service records.
- Communicating with customers about an existing service.
- Managing website functionality and performance.
- Meeting applicable legal and administrative requirements.
Personal information is not used for a purpose that is incompatible with the purpose for which it was originally collected unless a further lawful basis applies.
Why we may use your information
The applicable lawful basis depends on the nature of the information and the reason for processing it.
| Purpose | Lawful Basis | Reason |
|---|---|---|
| Responding to an enquiry | Legitimate interests | To respond to a business or service enquiry and maintain appropriate communication. |
| Arranging requested consultancy services | Contractual necessity | To take relevant steps and provide an agreed service. |
| Providing consultancy deliverables | Contractual necessity | To carry out the service requested and provide the agreed consultation or documentation. |
| Maintaining service records | Legitimate interests / legal obligation | To maintain appropriate business records and meet applicable record-keeping requirements. |
| Website operation | Legitimate interests | To maintain website functionality, reliability and appropriate technical administration. |
| Optional communications where consent is required | Consent | Where consent is specifically requested, information is used only for the stated purpose. |
Where consent is the applicable lawful basis, it may be withdrawn at any time. Withdrawal does not affect processing carried out before consent was withdrawn.
Where information comes from
Information will normally be obtained directly from the individual who submits an enquiry, requests a service or communicates with ORSA GROUP LTD.
Where information is received from another business or professional contact in connection with a legitimate business enquiry, it will be used only for the relevant business purpose.
Where privacy information is required for information obtained from a source other than the individual, the relevant privacy information will normally be provided within one month of obtaining the information, or earlier where required by the applicable rules.
Who may receive information
Personal information may be shared only where reasonably necessary for the purposes described in this policy.
Depending on the services and website functions in use, relevant information may be processed by:
- Website hosting and technical service providers.
- Website form and communication service providers.
- Business software and document-management providers.
- Professional advisers where their involvement is required.
- Relevant authorities where disclosure is required by law.
Service providers are expected to process personal information only for agreed purposes and in accordance with applicable data protection requirements.
Information outside the UK
Some technology or business service providers may process information outside the United Kingdom.
Where personal information is transferred to a country outside the applicable UK data protection framework, appropriate safeguards will be considered and used where required by law.
Information about relevant safeguards can be requested using the contact details provided below where applicable.
How long information is kept
Personal information is retained only for as long as it is reasonably required for the purpose for which it was collected, together with any applicable record-keeping requirements.
Where information is no longer required, it will be securely deleted or anonymised where reasonably appropriate.
Your information rights
Depending on the circumstances and the applicable lawful basis, individuals may have rights concerning their personal information.
Requests will normally be responded to without undue delay and within one month of receipt. Where a request is particularly complex or multiple requests are made, the applicable period may be extended by up to a further two months where permitted by law. Where such an extension applies, the individual will be informed within the original one-month period.
Additional information may be requested where reasonably necessary to confirm the identity of the person making a request.
When consent is used
Where consent is used as the lawful basis for a particular activity, the relevant request will explain what information is being requested and why it is needed.
Consent may be withdrawn at any time by contacting ORSA GROUP LTD using the details provided in this policy.
Withdrawal of consent does not affect processing carried out before withdrawal.
Keeping information secure
ORSA GROUP LTD uses reasonable technical and organisational measures appropriate to the nature of the information processed and the services provided.
Access to personal information is limited to circumstances where it is reasonably required for an authorised business purpose.
Information is reviewed periodically so that information which is no longer required can be securely removed or anonymised where appropriate.
Website information
This website is designed for business and professional service enquiries. Visitors should avoid submitting unnecessary personal information through contact forms or email.
Information submitted through the website should be relevant to the enquiry or service being discussed.
Policy updates
This Privacy Policy may be reviewed and updated when website functions, business processes or applicable data protection requirements change.
Where a material change affects how personal information is used, the updated information will be made available before the new processing begins where required.
Questions about privacy
If you have a question about this Privacy Policy or would like to exercise an applicable information right, please contact ORSA GROUP LTD directly.
8 Shepherd Market, London, England, W1J 7JY
Telephone: +44 7828523698
Individuals may also raise a data protection concern with the Information Commissioner’s Office where applicable.
Clear information matters.
ORSA GROUP LTD aims to keep its handling of personal information clear, proportionate and connected to the services and website functions described in this policy.