Privacy Policy

Last updated: 20 December 2025

This Privacy Notice explains how Orr Consulting Limited (“we”, “us”, “our”) collects and uses personal data when you use our website, specifically when you (1) submit an enquiry via our contact form, or (2) subscribe to receive our AI Insight emails.

1. Who we are (Data Controller):

For the personal data described in this notice, Orr Consulting Limited is the data controller (i.e., we decide why and how your personal data is processed).

Contact for privacy queries: enquiries@orrconsulting.ai
Registered office address: 11 Silverholm Drive, Cleghorn, Lanark, Lanarkshire, United Kingdom ML11 7SY

2. What personal data we collect:

2.1 Contact form (AI consultation / enquiry)

When you use our contact form, we collect the details you enter, which include: first name, last name, email, company, phone, position, and the message content.

2.2 Email subscription form (AI Insight emails)

When you subscribe, we collect the details you enter, which include: first name, last name, email, company, phone, and position.

Our subscription process uses double opt-in (you receive a confirmation email and you must confirm before being added to the mailing list).

3. How we use your data (purposes):

We use your personal data to:

Respond to enquiries and communicate with you about your request.
Send AI Insight emails to subscribers who have confirmed their subscription, and to manage subscriptions/unsubscribes.
Maintain basic records of communications and subscription preferences (e.g., keeping an “unsubscribe” status so we don’t email you again).

4. Lawful bases (UK GDPR):

We rely on the following lawful bases to process your data:

Enquiries / contact form: Legitimate interests (running our business and responding to requests) and/or steps prior to entering a contract (where your enquiry relates to potential services).
Email marketing (AI Insight emails): Consent (you choose to subscribe and confirm via double opt-in).
Unsubscribe suppression: Legitimate interests (respecting your preferences and ensuring we don’t send unwanted emails).

5. Who we share your data with:

Our website is hosted on Wix, which provides the platform used to collect form submissions and manage site functionality. Wix acts as a data processor when processing visitor data on our behalf.

6. We do not sell your personal data.

7. Where your data is stored and international transfers:

Because we use Wix, your information may be stored in Wix systems and data centres in several locations (including the United States, Ireland, South Korea, Taiwan and Israel).

Where international transfers apply, Wix describes using recognised transfer mechanisms such as Standard Contractual Clauses (SCCs) and additional safeguards.

8. How long we keep your data:

We keep personal data only for as long as needed for the purposes above:

Enquiries: up to 12 months after the last meaningful contact, unless we need it longer (e.g., to administer an ongoing engagement, or for legal/accounting reasons).
Email subscribers: until you unsubscribe, or until we stop sending the AI Insight emails.

9. Your rights:

Under UK GDPR, you may have rights including: access, rectification, erasure, restriction, portability, and objection—plus the right to withdraw consent for marketing at any time.

Unsubscribe from emails: use the “Unsubscribe” link in any marketing email.

To exercise any rights: email enquiries@orrconsulting.ai.

10. Complaints: If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO).

11. Cookies and similar technologies:

Our website is hosted on Wix and uses essential cookies that are required for the site to function securely and reliably (for example, security and load balancing). We do not use analytics, advertising, or other non-essential tracking cookies.
We display a cookie notice using Consentik. A cookie may be set to remember that you have seen the notice. You can manage cookies through your browser settings; however, blocking essential cookies may affect how the website functions.

12. Security:

We take appropriate measures to protect personal data. All data is stored on secure servers behind a firewall.

13, Changes to this notice:

We may update this Privacy Notice from time to time. The “Last updated” date at the top shows when it was last changed.