Privacy notice

Orvenant LLC operates this website. Our headquarters address is 16192 Coastal Hwy. Lewes, DE19958, United States. Contact hi@orvenant.com about this notice or your personal information.

When you visit, hosting and security services process technical information needed to deliver and protect the website, which may include your IP address, requested address, browser information and request timing. When you email or call us, we receive the contact details and information you choose to share. Please do not send passwords, payment-card details or confidential customer records in an initial enquiry. When you send the consultation form, we receive your name, email, optional company, selected services and message to assess and respond to your enquiry. The form sends these details to Orvenant's intake service rather than opening your email application. Do not include passwords, card details or confidential customer records. Sending an enquiry does not subscribe you to marketing emails.

We use information to operate and protect the website, respond to enquiries and manage an existing business relationship. Where applicable, the basis depends on the activity: steps requested before an agreement, performance of an agreement, legal obligations or legitimate operational interests. Marketing consent is separate from a project enquiry. We do not treat contacting us as permission to subscribe you to a newsletter.

Cloudflare delivers and protects the public website. Our company email and business applications use a netcup-hosted server; outbound email uses Amazon SES in Frankfurt. These service arrangements can involve processing in more than one country. A European server does not mean that every part of the service is processed only in Europe. We use service providers for their operational functions, not to publish your enquiry as marketing content. Cloudflare Turnstile checks for automated abuse. Cloudflare processes technical security information, including your IP address, browser signals and a challenge token. The token is validated by our service and is not stored with your enquiry. Cloudflare Queues temporarily carries enquiry data for delivery, with a maximum 24-hour retention on the Free plan. Our encrypted intake and CRM records are stored on our netcup-hosted server. If repeated delivery attempts fail, an encrypted recovery copy can be kept in our private European Cloudflare R2 bucket for up to 30 days. Recovery requires restricted operator access. Operational alert emails contain categories, not your enquiry text or contact details. Cloudflare's processing is not limited to the location of our European server.

We retain information according to its purpose, the business relationship and applicable legal obligations. Access is limited to people and providers who need it for those purposes. We review information that is no longer needed and remove or anonymize it where appropriate. Backups can retain copies for a limited recovery period; they are not used as a separate marketing audience. A precise retention schedule for customer operations is maintained separately from this website notice.

Depending on the law that applies, you may be entitled to request access, correction, deletion, restriction or a copy of certain information, and to object to certain uses. Where processing relies on consent, you can withdraw it. Email hi@orvenant.com; we may need proportionate information to verify the request. You may also contact the relevant supervisory authority. This notice does not limit rights provided by applicable law.

We use Google Analytics only with your consent. In the consent banner, Accept all allows both Analytics and advertising features, Reject all refuses both, and Choose lets you allow Analytics on its own. Advertising features can be allowed only together with Analytics. Google Analytics is not loaded before you allow Analytics, and the website, contact options and consultation form work the same if you refuse. When you allow Analytics, Google Analytics stores a randomly generated identifier in a first-party cookie so that it can recognize return visits from the same browser, as described in our Cookie notice. Google then receives information about your visits: the full address of each page you view, including query parameters such as campaign tags but not the part after #; the page title; the address of the page that linked to ours, as your browser provides it; the campaign source, medium and name; your approximate location, such as city, region and country, which Google derives from your IP address; your device type, brand and model, browser, operating system, language and screen size; and your sessions, engagement time and engagement events. Where we enable Google’s enhanced measurement, this can also include scrolling, clicks on links to other websites, site search terms, file downloads, video engagement and form interactions such as starting or submitting a form. We also measure clicks on our email address and telephone number and whether a consultation request was received. We never send the contents of form fields, your enquiry text, name, email address or telephone number to Google Analytics. An action in a report does not establish that you sent a message or became a customer. Google states that Google Analytics does not log or store individual IP addresses from users in the EU, Switzerland or the UK. For that traffic, Google uses the IP address on servers in those regions only to derive approximate location and then discards it. If you also allow advertising features and audience insights, we turn on Google signals and allow Google’s advertising storage and advertising signals. For visitors who are signed in to a Google Account and have turned on ad personalization, Google associates this site’s measurements with that account. This lets Google give us aggregated reports about the age range, gender and interests of our visitors and about how people use our website across devices. Google may withhold small groups from these reports, and we do not receive your Google Account details. To provide this, the Google tag also contacts Google advertising domains such as doubleclick.net, where Google may read or set its own advertising cookies, as the Cookie notice explains. Orvenant does not currently run advertising campaigns or remarketing, and we do not use these features to show you ads. Google can use information collected through Google signals under its own Privacy Policy and your Google Account settings, including for ad personalization. That is why we ask for this category separately. If you allow only Analytics, Google signals and advertising storage stay off. Google provides Google Analytics and processes the Analytics measurements on our behalf as our service provider. For Google signals, Google combines them with Google Account information that it holds and handles that information under its own Privacy Policy. Google can process this information in the United States and other countries. Google states that it relies on legal frameworks for international data transfers, including the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and standard contractual clauses. The explanation above that a European server does not mean all processing occurs only in Europe also applies. We set Google Analytics to keep user-level and event-level data for 14 months, without resetting that period on new activity. Google states that it keeps age, gender and interest data for two months regardless of this setting. These settings do not set a deletion period for most standard reports based on aggregated data. You can change or withdraw either choice at any time with Privacy settings, shown at the bottom of every page where Analytics can run. Withdrawing Analytics also turns off advertising features. Withdrawal stops future collection by this website for that category and, for Analytics, removes this site’s accessible Analytics cookies; it does not automatically erase information Google already received. Your choice is kept for 12 months, and we ask again earlier if we materially change these categories. If your browser sends a Global Privacy Control signal, advertising features stay off and cannot be turned on; you can still choose Analytics. Google’s ad settings let you manage ad personalization, and Google’s opt-out browser add-on blocks Google Analytics in your browser on all websites. These tools and Google’s explanations are linked under Further information below. Contact hi@orvenant.com about information requests.

We update this notice when the site's processing changes. The effective date identifies the published version. Third-party websites linked from this site have their own practices.