Orca Advisory Ltd · Your information

Privacy
Notice.

This notice explains what personal information we collect, why we collect it, how we use it, and the rights you have under UK data protection law.

Effective date18 July 2026

Data controllerOrca Advisory Ltd

Contactinfo@orcaadvisory.co.uk

Orca Advisory Ltd ("Orca Advisory", "we", "our" or "us") is committed to protecting your personal information and respecting your privacy.

We provide consultancy, strategic advice, training and professional services relating to online safeguarding, digital competency, artificial intelligence, education technology and organisational improvement.

01

What Information We Collect

Depending on how you interact with us, we may collect the following information.

Contact information

  • Name
  • Organisation and job title
  • Email address and telephone number
  • Postal address

Business information

  • Organisation details and enquiry information
  • Project requirements and consultancy notes
  • Meeting records and training attendance

Website information

  • IP address, browser type and device information
  • Pages viewed, time spent on pages and referral source
  • Cookies and similar technologies

Marketing preferences

  • Newsletter subscriptions
  • Event registrations
  • Communication preferences
02

How We Collect Information

We collect information when you:

  • contact us by email or telephone;
  • complete a website enquiry form;
  • request consultancy services;
  • register for training or webinars;
  • subscribe to newsletters;
  • meet us at conferences or events; or
  • interact with our website.
03

Why We Use Your Information

We use personal information to:

Provide services

  • Respond to enquiries
  • Provide consultancy services
  • Deliver training and webinars
  • Manage client relationships

Operate our business

  • Produce quotations and invoices
  • Fulfil contractual obligations
  • Improve our services
  • Maintain website security
  • Meet legal and regulatory obligations
  • Send requested professional updates
05

Marketing Communications and Cookies

Marketing communications

We only send marketing communications where we have an appropriate lawful basis.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us directly.

Cookies

Our website may use cookies to improve functionality, analyse website performance and enhance your browsing experience.

Where required by law, we will ask for your consent before using non-essential cookies. You can also manage cookies through your browser settings.

06

Who We Share Information With

We do not sell personal information.

We may share information with trusted service providers that help us operate our business, such as:

  • website hosting and email service providers;
  • cloud storage providers;
  • accountants and IT support providers; and
  • payment processors.

These organisations only process personal information on our behalf and under appropriate contractual safeguards. We may also disclose information where required by law.

07

How We Keep Information Secure

We take appropriate technical and organisational measures to protect personal information, including:

  • secure cloud services;
  • encryption where appropriate;
  • strong password management and multi-factor authentication;
  • access controls;
  • regular software updates; and
  • staff confidentiality obligations.
08

How Long We Keep Information

We only keep personal information for as long as necessary. Typical retention periods include:

Client records

Up to 7 years after completion of services.

Financial records

6 years plus the current financial year.

Marketing records

Until consent is withdrawn or the information becomes inactive.

Website analytics

According to the settings of our analytics provider.

Information is securely deleted when it is no longer required.

09

Your Rights

Under UK data protection law, you have the right to:

  1. Be informedAbout how your information is used.
  2. AccessYour personal information.
  3. RectificationCorrect inaccurate information.
  4. ErasureRequest deletion of your information, where applicable.
  5. RestrictionAsk us to restrict processing.
  6. ObjectObject to processing in applicable circumstances.
  7. Data portabilityRequest transfer of eligible information.
  8. Withdraw consentWhere consent is the legal basis.

To exercise any of these rights, please contact us using the details below.

10

Making a Complaint and Contacting Us

If you are unhappy with how we handle your information, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO).

Keeping you informed

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legislation, our services or our business practices.

The latest version will always be published on our website together with the effective date shown at the top of this notice.