Privacy policy

This website and the Orkello app are run by Orkello. You can reach us at info@orkello.com.

There are two sides to how we handle information, and it matters which one applies:

• Our website, and your Orkello account. We decide how this information is used, so we're its “controller”. This policy covers it.
• What a company puts into Orkello: its customers, jobs, quotes, invoices, tenants, team chats and so on. That company decides what goes in and how it's used, so the company is the controller and we look after it for them as their “processor”. If you're a customer of a company that uses Orkello, please contact that company about your information. We'll help them answer you.

• Your account: your name, email address and password (stored scrambled, so nobody can read it), and anything you add to your profile, such as a phone number, birthday or photo.
• Keeping your account safe: sign-in codes we email you, devices you've asked us to remember, and records of signing in.
• Using Orkello: a log of important changes made in a company (who did what, and when), so its owners can see it, and your settings, such as notifications and your home page.
• Our website: which pages are visited, the country and town a visit comes from (worked out by our host from the connection, not from your device), and a scrambled code so we can count visitors. We don't store your network address and we don't use advertising or tracking cookies.
• Things you send us: your email address if you sign up for early access or our newsletter, and anything you send through our contact form or support chat.
• The demo: trying the demo uses a guest sign-in with no name or email. Its made-up company is deleted the next day.

The law asks us to say why we're allowed to use each kind of information:

• To provide Orkello to you and your company (our contract with your company, and our legitimate interest in running a service people rely on).
• To keep it secure and stop misuse (our legitimate interest, and to meet legal duties).
• To understand how the website is used so we can improve it (our legitimate interest; this doesn't identify you).
• To send early-access news and newsletters (your consent; every email has a link to stop them).
• To answer you when you contact us (our legitimate interest in replying).
• To keep records the law requires, such as for tax (legal obligation).

We don't sell personal information, and we don't use it for advertising.

We use a small number of trusted companies to run Orkello. They can only use information to provide their service to us, under contracts that require them to protect it. Our main database is in London.

When information goes outside the UK, we make sure it's protected to the standard UK law requires, for example through the UK's approved contract terms for international transfers or the UK–US data bridge.

We may also share information if the law requires it, or to protect people from harm or fraud.

• Your account, for as long as you have one. Email us any time to have it deleted. When a company closes, the accounts of people who aren't in any other company are deleted with it.
• A company's information, for as long as the company uses Orkello. When a company closes, everything is deleted after a notice period (including files and photos), and we can give the company a copy of its information first.
• Demo companies, until the next day.
• Website visit records, only as long as we need them to understand how the website is used.
• Early-access and newsletter emails, until you unsubscribe.
• Records the law requires, such as invoices we send you, for as long as the law says (usually six years).

We only use cookies and similar storage that Orkello needs to work:

• Signing in, so you stay signed in across Orkello and your company's address.
• Small preferences kept on your device, such as whether the sidebar is narrow, or closing the early-access bar.

We don't use advertising cookies or cookies that track you across other websites, so we don't need to ask you about them.

• Every request is checked by the database itself, so one company can never see another's information.
• Connections are encrypted, and passwords are stored scrambled.
• Optional two-step sign-in sends a code to your email before you can get in.
• Only the few people at Orkello who need to can reach the systems that hold information.
• If something ever went wrong that put your information at risk, we'd tell you and the ICO as the law requires.

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that's wrong
• delete your information
• stop or limit how we use it, or object to it
• give your information to you in a form you can take elsewhere
• withdraw your consent, for example to newsletters, at any time

Email info@orkello.com and we'll reply within a month. It's free. For information a company has put into Orkello, we'll pass your request to that company.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Orkello is for businesses and isn't meant for anyone under 16.

If we change this policy, we'll update the date at the top. If a change is important, we'll tell the owners of every company on Orkello before it applies. See also our terms of service.