Legal
Privacy Policy
Last updated: April 2026
1. Who we are
Orkyn Technologies is a custom software, ERP and digital systems agency with offices in UK and India. We are the data controller for personal information collected through our website at orkyn.ai and through our client engagements.
You can contact us regarding any privacy matters at hello@orkyn.ai.
2. What information we collect
We collect the following categories of personal information:
Contact form submissions
When you submit our contact form, we collect your first name, last name, email address, phone number and the content of your message. This information is used solely to respond to your enquiry.
Analytics data
We collect anonymous usage data including pages visited, time spent on the site, device type, browser, and approximate geographic location. This data is aggregated and cannot be used to identify you personally.
Client project data
During client engagements, we may process business data, operational data and other information necessary to deliver the agreed services. This is governed by a separate Data Processing Agreement and our NDA.
3. How we use your information
We use your personal information for the following purposes:
- To respond to enquiries submitted through our contact form
- To communicate with existing and prospective clients about our services
- To deliver software development and consulting services to clients
- To improve our website and user experience through anonymous analytics
- To comply with our legal and contractual obligations
- To send project-related communications to clients who have engaged our services
We do not use your personal data for automated decision-making or profiling. We do not sell, rent or share your personal information with third parties for marketing purposes.
4. Legal basis for processing
Under UK GDPR, we process your personal data under the following legal bases:
Legitimate interests
To respond to enquiries and communicate about our services with people who have expressed interest in working with us.
Contract performance
To deliver the services agreed in our client contracts and to fulfil our contractual obligations.
Legal obligation
To comply with applicable laws and regulations including tax, financial reporting and data protection requirements.
Consent
Where you have provided explicit consent, for example subscribing to communications. You may withdraw consent at any time.
5. Third-party services we use
We use the following third-party services that may process your data on our behalf:
Resend
Email delivery service used to receive contact form submissions. Form data is transmitted securely and used only to deliver your message to our team. Resend is GDPR compliant.
Privacy policyVercel
Our website is hosted on Vercel. Vercel collects basic server logs and performance data as part of hosting. Vercel is GDPR compliant and processes data within approved regions.
Privacy policyVercel Analytics
We use Vercel Analytics to collect anonymous page view and performance data. No personally identifiable information is collected. Data is aggregated and anonymised.
Privacy policyGoogle Analytics 4
We use Google Analytics to understand how visitors use our site. GA4 collects anonymised usage data. We have configured GA4 to anonymise IP addresses. You can opt out using the Google Analytics Opt-out Browser Add-on.
Privacy policy6. Cookies
Our website uses the following types of cookies:
Essential cookies
Required for the website to function correctly. These cannot be disabled.
Analytics cookies
Used by Google Analytics and Vercel Analytics to collect anonymous usage data. These can be disabled through your browser settings or using the Google Analytics opt-out tool.
7. How long we keep your data
Contact form enquiries
We retain contact form submissions for 12 months from the date of receipt, unless a client relationship develops in which case data is retained for the duration of the engagement plus 6 years as required by UK law.
Client project data
Retained for the duration of the contract and for 6 years after the end of the engagement to comply with legal and financial record-keeping requirements.
Analytics data
Anonymous analytics data is retained for 26 months as configured in Google Analytics. Vercel Analytics data is retained according to Vercel's standard retention policy.
8. Your rights under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
- Right to access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion of your personal data in certain circumstances
- Right to restriction — request that we limit how we use your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to our processing of your data based on legitimate interests
- Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at hello@orkyn.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. International data transfers
Orkyn Technologies operates from both the United Kingdom and India. When personal data is transferred between these locations, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements. Our third-party service providers are selected to ensure data is processed within approved jurisdictions or under appropriate data transfer agreements.
10. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encrypted data transmission, access controls, and secure hosting infrastructure through Vercel. Despite these measures, no internet transmission is completely secure and we cannot guarantee absolute security.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our services, legal requirements or data practices. The date at the top of this page will be updated accordingly. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
12. Contact us
If you have any questions about this privacy policy or how we handle your personal data, please contact us: