سياسة الخصوصية

We collect Personal Identity & Contact Information (name, corporate email, phone number, job title) through web forms or support inquiries. We also automatically collect Technical & Usage Data, including IP addresses, browser types, and clickstream data, as well as Communication Records and Client Project Assets such as source code or data inputs for custom engineering.

We process personal data only when an established legal basis applies under UK GDPR Article 6. This includes processing for Service Provision and Contract Execution (Article 6(1)(b)), System Maintenance & Security (Article 6(1)(f) - Legitimate Interests), Direct Marketing (Article 6(1)(a) - Express Consent), and Legal & Regulatory Compliance (Article 6(1)(c)).

We engage trusted third-party vendors for hosting, compute infrastructure, and analytics, all operating under formal Data Processing Agreements (DPAs). We may disclose data to UK law enforcement or regulatory bodies when legally compelled. Personal information is never sold, rented, leased, or traded for commercial purposes.

All data in transit across public networks is encrypted using Transport Layer Security (TLS 1.3), and data at rest is encrypted using Advanced Encryption Standard (AES-256). Access to personal data is restricted by multi-factor authentication (MFA) and role-based access control (RBAC). Client project assets and custom AI datasets are ring-fenced within secure, isolated environments.

Personal data is retained only for the minimum period necessary to fulfill specific operational purposes or satisfy legal reporting requirements. Upon expiration, data is permanently deleted from primary and backup systems or fully anonymized.

Under the UK Data Protection Act 2018 and UK GDPR, individuals have the Right of Access, Right to Rectification, Right to Erasure ("Right to be Forgotten"), Right to Restriction, Right to Data Portability, and the Right to Withdraw Consent at any time. To exercise these rights, individuals can contact our Data Protection Lead.

Our website and services are tailored exclusively for legal commercial entities and adult business professionals. We do not intentionally or knowingly collect, process, or solicit personal data from individuals under 13 years of age.

For inquiries, exercise of data subject rights, or regulatory escalation, please contact our legal team at privacy@originsltd.co.uk or by mail to the Legal Compliance Department, Origins Ltd. UK.