1. Introduction
Orthinal ("Orthinal", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, create an account, purchase our digital products, or otherwise use our services.
Orthinal operates as a UK-based digital marketplace providing professionally designed digital products, including website templates and related resources.
This Privacy Policy is intended to explain your privacy rights and how we handle your personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website or services, you acknowledge the practices described in this Privacy Policy.
2. Information We Collect
We may collect and process the following categories of personal information.
2.1 Information You Provide to Us
Account Information: When you create an Orthinal account, we may collect your name, email address, password, and other information necessary to manage your account.
Profile Information: You may choose to provide additional information, such as a profile picture, biography, website, or social media links.
Purchase and Transaction Information: When you purchase a product through Orthinal, we may collect information necessary to process and record the transaction, such as your name, email address, billing details, order information, and transaction history.
Payment card information is processed by our third-party payment providers. We do not store complete payment card details on our own servers.
Communications: If you contact us by email, through our contact form, or through another communication channel, we may collect the information contained in your message and any information you voluntarily provide.
2.2 Information We Collect Automatically
When you access or use our website, certain information may be collected automatically, including:
- IP address
- Browser type and version
- Operating system
- Device type
- Approximate location derived from IP address
- Pages visited and interactions with our website
- Referral sources
- Usage and diagnostic information
We use this information to operate, secure, analyse, and improve our services.
2.3 Cookies and Similar Technologies
We may use cookies and similar technologies to provide essential website functionality, remember preferences, understand how visitors use our website, and improve our services.
You can manage or disable cookies through your browser settings. Certain features of our website may not function properly if essential cookies are disabled.
3. Sign-In and Third-Party Authentication
Orthinal may offer third-party authentication services, such as Google Sign-In.
If you choose to sign in using a third-party authentication provider, that provider may share certain information with us, such as your name, email address, and profile picture, depending on the permissions you grant.
We use this information to create and manage your Orthinal account and provide authentication services.
Your use of a third-party authentication service is also subject to that provider's own privacy policy and terms.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
- To create and manage your Orthinal account
- To provide and operate our website and services
- To process purchases and deliver digital products
- To provide customer support
- To communicate with you about your account, purchases, and our services
- To improve our website, products, and user experience
- To understand website usage and analyse performance
- To detect, prevent, and investigate fraud, abuse, and security incidents
- To maintain the security and integrity of our services
- To comply with applicable legal and regulatory requirements
- To establish, exercise, or defend our legal rights
Where required by law, we will only process your personal data where we have a lawful basis to do so.
5. Legal Bases for Processing
Under the UK GDPR, we rely on one or more of the following lawful bases when processing personal data:
Contract
We may process your information where it is necessary to provide services or fulfil our contractual obligations to you, such as processing an order or managing your account.
Legitimate Interests
We may process information where it is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.
This may include improving our services, maintaining website security, preventing fraud, and managing our business.
Consent
Where required, we may rely on your consent to process personal data for specific purposes, such as certain marketing communications or non-essential cookies.
You may withdraw your consent at any time.
Legal Obligation
We may process your personal data where necessary to comply with a legal or regulatory obligation.
6. Sharing Your Personal Data
We do not sell your personal data.
We may share personal data with trusted third parties where reasonably necessary to operate our business and provide our services.
These may include:
Service Providers
We may use third-party providers for services such as:
- Payment processing
- Website hosting
- Authentication
- Analytics
- Email delivery
- Cloud storage
- Security and fraud prevention
- Customer support
These providers are permitted to process personal data only as necessary to provide their services to us and, where applicable, under appropriate contractual arrangements.
Legal and Regulatory Authorities
We may disclose personal information where required to do so by law, regulation, court order, legal process, or governmental authority.
Business Transfers
If Orthinal is involved in a merger, acquisition, restructuring, financing, or sale of some or all of its assets, personal data may be transferred as part of that transaction, subject to applicable data protection requirements.
7. International Data Transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law.
Where required, we may rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to EU Standard Contractual Clauses, or other lawful transfer mechanisms.
8. Data Security
We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Depending on the nature of the information and the risks involved, these measures may include:
- Encryption of data during transmission
- Secure authentication and password protection
- Access controls
- Security monitoring
- Regular software and infrastructure updates
- Appropriate restrictions on access to personal data
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, reporting, and regulatory requirements.
The length of time we retain information depends on the type of information and why we need it.
For example:
- Account information: generally retained while your account remains active.
- Transaction records: retained for as long as necessary to comply with applicable accounting, tax, legal, and regulatory obligations.
- Customer communications: retained for as long as reasonably necessary to handle the relevant request and maintain appropriate business records.
- Analytics information: may be retained in aggregated or anonymised form for longer periods.
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
10. Your Data Protection Rights
Under applicable UK data protection law, you may have the following rights:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to Erasure
You may request that we delete your personal data in certain circumstances.
Right to Restrict Processing
You may ask us to restrict the processing of your personal data in certain circumstances.
Right to Data Portability
Where applicable, you may request your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You may have the right to object to certain types of processing, including processing based on legitimate interests and certain forms of direct marketing.
Right to Withdraw Consent
Where we process your personal data based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in the Contact Us section.
11. Marketing Communications
Where permitted by law, we may send you information about Orthinal, our products, updates, or other relevant services.
Where consent is required, we will obtain your consent before sending marketing communications.
You can unsubscribe from marketing emails at any time by using the unsubscribe option provided in the communication or by contacting us directly.
Transactional and service-related communications may still be sent where necessary to provide services you have requested.
12. Cookies
Orthinal may use different categories of cookies and similar technologies.
These may include:
- Essential Cookies: Required for core website functionality and security.
- Preference Cookies: Used to remember settings and preferences.
- Analytics Cookies: Help us understand how visitors interact with our website.
- Marketing Cookies: Where used, these may help us measure or personalise marketing activities.
Where legally required, we will request your consent before placing non-essential cookies on your device.
You can also manage cookies through your browser settings.
13. Children's Privacy
Our services are not directed towards children.
We do not knowingly collect personal data from children where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us without appropriate consent, please contact us. If we become aware that we have collected personal data in circumstances where we should not have, we will take reasonable steps to delete it.
14. Automated Decision-Making
We do not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
If this changes in the future, we will update this Privacy Policy and provide any information required by applicable data protection law.
15. Your Right to Complain
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can investigate and address your concern.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
The ICO's website is available at: https://ico.org.uk/
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, or applicable laws.
When we make changes, we will update the "Last updated" date at the top of this page.
Where required by law, we will provide additional notice of significant changes.
17. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:
Email: privacy@orthinal.com
Website: Orthinal
We aim to respond to valid privacy requests within the timeframe required by applicable data protection law.