Clear information about your data.

Who we are

ORATHON LIMITED (“Orathon”, “we”, “us”) is a company registered in England and Wales under company number 16726045, with its registered office at 5 Bradford Square, London, England, E1 0SG. We are the controller of the personal information described in this policy.

For any question about this policy or how we handle your information, email contact@orathonsolutions.com.

Information we collect

When you use our contact form, we collect:

• your name, work email address, and, if you provide it, your company name;
• the service you select and the message you write;
• anti-spam data: an empty hidden field and the time the form was opened, which help us detect automated submissions.

If you email us directly, we receive your email address, your message, and anything else you choose to include.

When you visit the website or submit the form, our infrastructure provider processes technical information such as your IP address, browser type, and request details. This is needed to deliver pages securely and protect the website from abuse.

Please don’t include special category information, such as health or financial information, in your enquiry. We don’t need it to respond.

How we use it and our lawful basis

• To respond to your enquiry and discuss possible work with you. We rely on taking steps at your request before entering into a contract, or on our legitimate interest in responding to business enquiries.
• To protect the website and contact form from spam and misuse. We rely on our legitimate interest in keeping our services secure. To limit repeated submissions, your email address is converted into a one-way hash for a short period. The hash is not stored with your enquiry.
• To keep business records and to establish, exercise, or defend legal claims. We rely on our legitimate interests and, where applicable, our legal obligations.

What we don't do

We don’t sell your personal information. We don’t add you to marketing lists because you submitted an enquiry, and we don’t make decisions about you through automated decision-making or profiling.

Who we share it with

We use service providers that process personal information for us under contract and only on our instructions:

• Cloudflare hosts this website, runs the service that validates contact-form submissions, and provides security and abuse protection.
• Postmark delivers accepted contact-form enquiries to our inbox by email.
• Our business email provider stores enquiries and our correspondence with you.

We may also share information with professional advisers, or where required by law, regulation, or a valid request from a public authority. If Orathon is involved in a reorganisation or sale, information may be transferred to the relevant parties, subject to appropriate confidentiality protections.

International transfers

Some of our service providers may process personal information outside the United Kingdom. When this happens, we make sure the transfer is covered by UK adequacy regulations or by appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can contact us for more information about these safeguards.

How long we keep it

We keep enquiry information only for as long as reasonably necessary for the purposes described in this policy. When deciding how long that is, we consider:

• whether the conversation is ongoing or likely to continue;
• whether the enquiry led to a business relationship, in which case the information becomes part of our client records;
• our legal, accounting, and tax obligations;
• whether we need the information to establish, exercise, or defend legal claims.

When information is no longer needed, we delete it or anonymise it. Our service providers keep limited technical and delivery logs under their own retention settings.

How we protect it

Information submitted through this website is sent over encrypted HTTPS connections. Access to enquiries is limited to people who need it to respond, and the contact form is protected against automated abuse. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to protect your information.

Your rights

Under UK data protection law, you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased;
• restrict how we use your information;
• object to processing based on our legitimate interests;
• receive your information in a portable format, where applicable.

Some of these rights are subject to legal conditions and exemptions. To exercise a right, email contact@orathonsolutions.com. We may need to verify your identity before responding, and we will respond within the time limits set by data protection law.

If you have a concern about how we handle your information, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies and analytics

This website does not use analytics, advertising, or tracking technologies, and it does not set cookies for those purposes. Our infrastructure provider may use strictly necessary cookies or similar technologies to protect the website from malicious traffic. These do not require consent. If we introduce analytics or other optional technologies, we will update this policy first and ask for your consent where required.

Changes to this policy

We may update this policy when our website, service providers, or processing activities change. The effective date shows when this version took effect. Where appropriate, we will highlight significant changes on this page.