Your information. Handled with purpose.

1. Who is responsible

Origin Corp Limited, trading as Origin Corp, is the controller of personal information collected for its own business enquiries, website administration and business relationship management.

Where we process personal information on behalf of a client as part of field service delivery, the parties' respective data-protection roles and instructions may instead be governed by the relevant service or data processing agreement.

2. Information we collect

Our enquiry forms may collect your name, company, business email, optional phone number, country, site address, requested attendance date and time, service requirements, engineer quantity, site time zone, and the message, scope of work and additional notes you provide.

Please do not submit passwords, access credentials, payment-card details, special category data or unnecessary information about other people through the website.

We may also receive business contact, site or project information from a client, MSP, service provider, employer or authorised site contact. Where data-protection law requires us to provide privacy information directly to that individual, we will do so within the applicable timeframe, normally by the first communication or disclosure and no later than one month after receiving the information unless an exemption applies.

Netlify and other infrastructure providers may also process technical information needed to deliver and protect the service, such as IP addresses, request times, browser or device information, and security logs.

3. Purposes and lawful bases

We use personal information only where we have a lawful reason to do so.

• Business enquiries and relationships — legitimate interests: to respond to business contacts, assess requests, coordinate potential services, maintain business relationships and operate our website efficiently.
• Pre-contract and contract: where an individual is personally party to a contract, to take requested steps before entering into it or to perform it.
• Website and information security — legitimate interests: to prevent abuse, investigate faults, protect systems and maintain service reliability.
• Legal obligations: to keep, disclose or otherwise process records where UK law requires us to do so, including relevant tax, accounting and regulatory obligations.

Enquiry details are not an automatic subscription to marketing. The website does not currently use profiling or solely automated decision-making to make decisions about individuals.

4. Recipients and international transfers

Where necessary for an agreed purpose, information may be shared with authorised Origin Corp personnel, relevant field engineering resources, service delivery contacts, professional advisers, service providers, or public authorities where disclosure is legally required. We aim to share only the information needed for the task.

Netlify provides website hosting and form-submission infrastructure. Enquiry details submitted through the website are processed through Netlify Forms. Hostinger provides our business email service and receives form-notification emails sent to our business inbox.

These providers may process information outside the United Kingdom. Where UK international-transfer rules apply, we rely on the safeguards made available under the relevant provider terms and data processing agreements, which may include adequacy arrangements, the UK Extension to the EU-U.S. Data Privacy Framework, the UK International Data Transfer Addendum and/or Standard Contractual Clauses, as applicable to the transfer. You can contact info@origincorp.co.uk for more information about the safeguards relevant to your information.

5. Retention and security

Enquiry information that does not lead to an assignment or ongoing business relationship is normally kept for up to 12 months after the last meaningful contact, then deleted or anonymised unless there is a specific reason to keep it longer.

Where an enquiry develops into a service assignment or customer relationship, relevant service correspondence, operational evidence and business records may be kept for up to six years after the relevant service or relationship ends where reasonably necessary for tax, accounting, contractual, dispute-resolution or legal-claim purposes. Some records may be kept for a different period where law requires it or where a live dispute, investigation or legal claim makes longer retention necessary.

Infrastructure and security logs are retained according to the settings and service terms of the relevant providers and are accessed only where needed for service delivery, troubleshooting or security. We review retained information and delete or anonymise it when it is no longer reasonably needed.

We use proportionate access controls and secure transmission arrangements, but no website or communication channel can guarantee absolute security.

6. Your rights

Depending on the circumstances and lawful basis, you may have rights to access your personal information, correct inaccuracies, request erasure, restrict processing, object to processing and obtain portable information. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise a data-protection right, contact info@origincorp.co.uk. We may request proportionate information to verify your identity. We aim to respond without undue delay and normally within one month, subject to any extension or exception permitted by law.

7. Cookies and website data

Origin Corp does not currently use advertising cookies or optional analytics trackers on this website, and enquiry drafts are not stored in persistent browser storage by the application.

Netlify or other infrastructure providers may process technical request data and use mechanisms that are strictly necessary to deliver, secure or operate their services. If we later add non-essential analytics, advertising or similar technologies, we will update this notice and implement any consent mechanism required by applicable law before activating them.

8. Questions and complaints

Contact info@origincorp.co.uk about this notice or your personal information.

If a concern cannot be resolved, you can complain to the UK Information Commissioner's Office through its complaints service.

See also our website terms.