Privacy Policy

The controller for personal data processed through orcustech.dev (the “Site”) is Orcus Tech — registered entity, company number, registered address. You can reach us about anything in this policy at contact@orcustech.dev.

A data protection officer has / has not been appointed.

This policy covers the Site only. Personal data we process on behalf of a client, inside a platform we operate for them, is governed by our agreement with that client, under which we act as processor rather than controller.

The Site is a static, published website. By design it does not:

• set cookies of any kind, including analytics or advertising cookies;
• run analytics, tag managers, session recording or tracking pixels;
• load fonts, scripts or images from third-party domains at page view — typefaces are compiled into the Site and served from our own origin;
• offer any login, account or payment flow;
• profile visitors or build advertising audiences;
• transmit what you type. The project brief questionnaire runs entirely in your browser — your answers are held in the page while you work, never sent to us as you type, and never stored on our servers as a draft. Nothing leaves your device until you press a button that hands the finished text to your own email client or to your clipboard.

Because there is nothing to consent to, the Site shows no cookie banner. That absence is deliberate, not an omission.

Correspondence you choose to send. The contact links and the project brief both open your own email client. If you write to us, we receive what you send — typically your name, email address, employer and the details of your enquiry, plus whatever you chose to put in the brief. Sending it is entirely your decision, and you control its contents right up to the moment you press send in your own mail application.

Technical delivery data. Our hosting provider processes the data inherent in serving a web page — IP address, timestamp, requested URL, user agent — to deliver the Site and protect it from abuse. We do not combine these records with correspondence, and we do not use them to identify individuals.

To answer your enquiry — our legitimate interest in responding to business contact (GDPR Art. 6(1)(f)), or, where your enquiry concerns a possible engagement, the taking of steps prior to entering a contract (Art. 6(1)(b)).

To operate and secure the Site — our legitimate interest in keeping it available and resistant to abuse (Art. 6(1)(f)).

We do not sell personal data, and we do not use it for advertising.

We rely on a small number of providers acting under contract on our instructions:

• Hosting and CDN — provider, serving the Site and its delivery logs.
• Email — provider, receiving and storing correspondence sent to our address.

We disclose personal data otherwise only where we are legally required to, or where it is necessary to establish or defend a legal claim.

Where a provider named above processes data outside the European Economic Area, that transfer relies on transfer mechanism — for example an adequacy decision or Standard Contractual Clauses under GDPR Art. 46, together with any supplementary measures identified in our assessment. We will supply details of the safeguards on request.

Correspondence is retained for retention period, or for as long as the commercial relationship it concerns remains live and any applicable limitation period runs, whichever is longer. Enquiries that do not lead anywhere are deleted after retention period.

Technical delivery logs are retained by our hosting provider for retention period.

Under the GDPR you may request access to your personal data, its rectification or erasure, restriction of processing, or its portability, and you may object to processing carried out on the basis of legitimate interests. Where processing rests on consent, you may withdraw it at any time without affecting prior processing.

Write to contact@orcustech.dev and we will respond within one month, as the GDPR requires. We do not charge for this.

If you are not satisfied with how we handle your request, you may complain to a supervisory authority — for us, supervisory authority — or to the authority in the EU member state where you live or work.

We take no decisions about you by automated means, and we do not profile visitors.

The Site addresses businesses and is not directed at children. We do not knowingly process children’s personal data through it.

If this policy changes, the revised version appears here and the date above is updated. Where a change materially affects how we handle data you have already sent us, we will tell you directly.