Privacy notice
How we use your information.
This notice explains what Orca (“Orca”, “we”) collects when you use this website or deal with us, why, who we share it with, how long we keep it, and your rights. We collect as little as we can, and we never ask for documents, files or access to your systems.
Who we are
Orca is the controller of your personal data. For anything about your data, email jensen@orcaagents.co.
What we collect
| When | What |
|---|---|
| You complete the 3-minute check | Your answers about your company: sector, size, how long it has operated, where it’s based, the kinds of records it keeps, how its work is documented, whose material it is and who would decide. These describe the company, not you. |
| You send us your request | Your first name, work email, role and company website, whether you’d rather hear back by WhatsApp or email (and your phone number if you choose WhatsApp), any note you add, the name of whoever referred you if you tell us, and a record of the notice you agreed to and when. |
| You arrived from one of our links | The campaign tags in the link (for example utm_source), so we know which outreach worked. |
| You email us or we work together | Our correspondence, and if we introduce you to a programme, a record of the introduction and how it went (whether you were accepted, the terms, whether a deal completed and any fee due to us). |
We count page views with Vercel Web Analytics, run by our hosting provider, only to see how the site is used so we can improve it. It doesn’t use cookies or store anything on your device, and we only see totals: which pages were viewed, the referring site, country, and browser and device type. It can’t tell us who you are. You can object at any time (see Cookies and storage). We use no advertising or tracking tools. Like any website, our hosting provider also keeps short-lived server logs (including IP addresses) to keep the site secure and running, and to stop abuse of the form we keep a one-way code made from your IP address (it can’t be turned back into the address) for 24 hours.
If we contacted you first
We may email people at UK businesses whose work fits what AI data programmes look for. We use business contact details that are publicly available, for example on a company’s website, Companies House or professional profiles. Every email says who we are and how to stop hearing from us, and we stop immediately if you ask.
Why we use it, and on what basis
- To review your request and send you our recommendation, by WhatsApp or email, whichever you chose. Our legitimate interest in responding to a business enquiry you made.
- To introduce your company to a programme. Only when you tell us to go ahead, and only the details we’ve told you we’ll share.
- To keep records of introductions, outcomes and fees. Our legitimate interest in running the business, and our legal obligations for financial records.
- To improve how we match companies with programmes. Our legitimate interest, using combined information that doesn’t identify you.
- To contact people at businesses we think could benefit. Our legitimate interest in telling businesses about a service relevant to them, with an opt-out in every message.
- To see how the site is used. Our legitimate interest in improving it, using page-view totals that don’t identify you.
A person at Orca reviews every request and decides what to recommend. We don’t make decisions about you by automated means.
Who we share it with
- AI data programmes, only when you tell us to go ahead with an introduction, and only what we told you we’d share. The programme then handles your data under its own privacy notice.
- Service providers who run things for us: Vercel (website hosting and page-view counts), Neon (our database), Resend (sending our emails) and Google Workspace (our email inbox and the spreadsheet we track requests in). They act on our instructions and can’t use your data for anything else.
- WhatsApp (Meta), only if you ask us to reply there: your number and our messages pass through WhatsApp under its own terms.
- Professional advisers or authorities, where we’re legally required to.
We never sell your personal data.
Transfers outside the UK
Some of our service providers store or process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge) or the UK’s International Data Transfer Agreement or Addendum, so your data keeps the same protection.
How long we keep it
- Requests that don’t lead to an introduction: 24 months after we last heard from you, then deleted.
- Records of introductions, outcomes and fees: six years after the end of the financial year they relate to, because financial records must be kept that long.
- Outreach records: until you ask us to stop, then just enough to make sure we don’t contact you again.
You can ask us to delete your request at any time, and we will unless the law requires us to keep it.
Cookies and storage
This site doesn’t use cookies. While you complete the check, your answers are kept in your browser’s session storage so a reload doesn’t lose them. That’s strictly necessary for the form to work, stays on your device, and is cleared when you submit your request or close the tab. Our fonts and page-view counter are served from this site, so your browser doesn’t contact any third party when you visit.
Page-view counting relies on the exception for statistics that improve a service, so it doesn’t ask for consent, but you can object. If your browser sends Global Privacy Control we treat that as an objection, and you can also turn counting off here (the choice is remembered in this browser only):
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to someone else. Email jensen@orcaagents.co and we’ll reply within one month. If you’re unhappy with how we’ve handled your data, tell us at the same address: we’ll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change this notice, we’ll update it here and change the date below.
Last updated 8 October 2026