Privacy Policy

1. Who we are

Ordinect is a trading name of Beacon & Ledger Consulting Ltd, registered in England and Wales (company number 16537737). We are the data controller for the personal data described in this policy.

Contact: privacy@ordinect.com

2. Data we collect

We may collect the following categories of personal data:

• Identity data: name, job title, firm name
• Contact data: email address, phone number
• Technical data: IP address, browser type, device information
• Usage data: pages visited, features used, session duration
• Marketing data: communication preferences

3. Lawful basis for processing

Under UK GDPR, we process your data on the following bases:

• Consent (Article 6(1)(a)): when you submit the waitlist or demo form. See section 4 for how that consent is obtained and recorded.
• Legitimate interest: to improve our services, analyse usage, and secure our website
• Contract: to provide our services when you become a customer
• Legal obligation: to comply with UK law and regulations

4. The waitlist and demo form

When you submit the form on this site we collect your email address, firm name, firm size, and which option you chose — a product demo or general updates. We use your choice to decide what we send you: people who ask for a demo hear from us to arrange one, people who ask for updates receive product news only.

We use double opt-in. Submitting the form does not add you to any mailing list. We send a confirmation email, and you are only added once you click the link inside it. If you never click, your details are not added to a list and you hear nothing further from us.

That confirmation is our record of your consent. We retain the fact and timestamp of your confirmation for as long as we hold your data, so we can demonstrate the consent was freely given, as UK GDPR requires. You can withdraw it at any time using the unsubscribe link in any email we send, or by emailing us — withdrawing is as easy as giving it.

5. How we use your data

• To arrange product demos and send product updates you asked for
• To provide and improve our practice management platform
• To analyse website usage and optimise performance
• To comply with legal and regulatory obligations

6. Data sharing and processors

We do not sell your personal data. We share it with the following processors, each acting on our instructions under a data processing agreement:

• Brevo (Sendinblue SAS) — email marketing and transactional email. Brevo receives your email address, firm name, firm size, and chosen option, and sends the double opt-in confirmation described in section 4. Brevo is established in France and states that it hosts customer data exclusively within the European Union, across data centres operated by OVH in France and Germany and Google Cloud in Belgium.
• Vercel — website hosting and the server function that receives your form submission. Vercel processes your submission in transit; it does not store it.
• Google Analytics — aggregated usage analytics. We do not send your form data to Google Analytics.

7. Data retention

We retain personal data as follows:

• Confirmed contacts: until you unsubscribe or ask us to erase your data, or 24 months after our last meaningful contact with you, whichever comes first. At that point the record is deleted from Brevo.
• Unconfirmed submissions: if you never click the confirmation link, Brevo discards the pending record within 30 days and we hold nothing.
• Consent records: the timestamp and source of your confirmation, kept for as long as we hold your contact record and for 24 months afterwards, as evidence of consent.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@ordinect.com.

9. Cookies

We use essential cookies for site functionality and optional analytics cookies (Google Analytics) to understand usage. You can manage cookie preferences through your browser settings.

10. International transfers

Your form data is held by Brevo within the European Union. Transfers from the UK to the EEA are covered by the UK adequacy regulations, so no additional safeguard is required for this transfer.

Where any other processor transfers data outside the UK or EEA, we rely on a UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an equivalent mechanism.

11. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.