Privacy Policy

Last updated: January 2024

Introduction

orchard-port is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you acknowledge that you have read and understood this policy.

Information We Collect

We may collect the following types of personal information:

• Contact Information: Name, email address, company name, and postal address when you submit enquiry forms or register for our services.
• Business Information: Details about your business operations relevant to providing payment services, including transaction volumes and business type.
• Technical Data: IP address, browser type, operating system, and browsing patterns when you visit our website.
• Communication Records: Records of correspondence when you contact us via email or through our website forms.

How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and provide requested information about our services.
• To assess your eligibility for our payment processing services.
• To deliver and maintain our services if you become a client.
• To comply with legal and regulatory obligations.
• To improve our website functionality and user experience.
• To send service-related communications to existing clients.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit a contact form or subscribe to communications.
• Contract: When processing is necessary to fulfil our service agreements with you.
• Legal Obligation: When we must comply with applicable laws and regulations.
• Legitimate Interests: When processing is necessary for our business operations, provided this does not override your rights.

Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Payment network providers necessary for delivering our services.
• Professional advisors including legal, accounting, and compliance consultants.
• Regulatory authorities when required by law.
• Service providers who assist with our website hosting and maintenance.

All third parties with whom we share data are required to maintain appropriate security measures and process data only as instructed by us.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for two years. Client data is retained for the duration of the business relationship plus six years to comply with financial record-keeping requirements.

Your Rights

Under UK data protection law, you have the following rights:

• The right to access your personal data.
• The right to rectification of inaccurate data.
• The right to erasure in certain circumstances.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing.
• Rights related to automated decision-making.

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

International Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, please contact us:

Email: [email protected]
Address: 47 Commerce Street, Manchester, M2 4WQ, United Kingdom

Complaints

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.