Privacy Policy

Last updated: March 2026

This policy explains what data we collect, why we collect it, what we do with it, and what rights you have. We've written it in plain English because privacy policies shouldn't require a law degree to understand.

Who we are

Blue Orchan is a content and business intelligence consultancy based in the United Kingdom.

Website: blueorchan.com Email: hello@blueorchan.com

For the purposes of UK GDPR and the EU General Data Protection Regulation, Blue Orchan is the data controller. That means we decide what data gets collected and why.

What data we collect

We collect data in two ways: what you give us directly and what gets collected automatically when you visit the site.

Information you provide

When you fill in a form on our website (contact form, Business Autopsy booking form, or any other enquiry form), we collect the details you submit. This typically includes your name, email address, business name, website URL, and any additional information you choose to share about your business or project.

When you email us directly at hello@blueorchan.com, we store the contents of that correspondence.

Information collected automatically

When you visit our website, our hosting provider (Hostinger) automatically collects standard server log data. This may include your IP address, browser type, operating system, referring URL, pages visited, and the date and time of your visit. This data is collected to keep the website running and to understand general usage patterns. We do not use this data to identify individual visitors.

Why we collect it and our lawful basis

UK GDPR requires us to have a lawful basis for processing your personal data. Here's what applies to us.

Consent. When you submit a form on our website, you actively consent to us using your data for the purpose stated at the point of collection. For the Business Autopsy form, that means producing your report and communicating with you about it. For the contact form, that means responding to your enquiry. You can withdraw consent at any time by emailing hello@blueorchan.com.

Legitimate interests. We process some data where we have a legitimate business interest in doing so and where that interest does not override your rights. This includes storing correspondence to maintain a record of client communications and analysing anonymous website usage data to improve our site.

Legal obligation. We may retain certain data where required by law, for example to comply with tax and accounting obligations.

What we do with your data

We use your data to respond to your enquiries, produce the work you've asked for (reports, audits, content), communicate with you about your project, and improve our website and services.

That's it. No surprises.

What we don't do with your data

We don't sell your data. We don't rent it out. We don't share it with advertisers. We don't use it to build marketing profiles. We don't send you unsolicited emails unless you've specifically asked to hear from us.

Who we share data with

We share your data only where necessary to deliver our services or meet legal requirements.

Form processing. Our website forms use FormSubmit.co to handle submissions. When you submit a form, your data passes through their servers before reaching us. FormSubmit.co processes this data on our behalf and does not use it for their own purposes. You can review their privacy practices at formsubmit.co.

Website hosting. Our website is hosted by Hostinger. Server log data (IP addresses, browser information) is processed by Hostinger as part of their hosting service.

Professional advisers. We may share data with our accountant or legal advisers where necessary for tax, legal, or regulatory purposes.

Law enforcement. We will share data if required to do so by law or in response to a valid legal request from a competent authority.

We do not share your data with anyone else.

International data transfers

Our hosting and form processing services may store or process data outside the United Kingdom and the European Economic Area. Where this happens, we take reasonable steps to check that adequate safeguards are in place, including standard contractual clauses or equivalent protections recognised under UK GDPR and EU GDPR.

If you are based outside the UK or Europe, this policy applies to you equally. We treat all personal data with the same level of care regardless of where you are located.

How long we keep your data

We don't keep data longer than we need it.

Enquiry and form data. We retain the information you submit via our forms for up to 24 months from your last contact with us. If your enquiry leads to a project, we retain project-related data for up to 36 months after the project completes.

Email correspondence. We retain emails for up to 36 months from the date of the last message in the conversation.

Server logs. Automatically collected server log data is retained by our hosting provider in accordance with their own retention policies, typically no longer than 12 months.

After these periods, we securely delete your data. If you'd like your data deleted sooner, email us and we'll sort it.

Your rights

Under UK GDPR (and EU GDPR if you're based in the EEA), you have the following rights.

Access. You can ask us what personal data we hold about you. We'll provide a copy within 30 days.

Correction. If any data we hold is inaccurate or incomplete, you can ask us to correct it.

Deletion. You can ask us to delete your personal data. We'll do so unless we have a legal reason to keep it.

Restriction. You can ask us to restrict how we process your data in certain circumstances.

Portability. You can ask for a copy of your data in a commonly used, machine-readable format.

Objection. You can object to processing based on legitimate interests. We'll stop unless we have compelling grounds to continue.

Withdraw consent. Where we process data based on your consent, you can withdraw that consent at any time. This won't affect anything we did with your data before you withdrew consent.

To exercise any of these rights, email hello@blueorchan.com. We aim to respond within 30 days.

Cookies

Our website may use cookies set by our hosting provider (Hostinger) for essential site functionality. We do not use advertising cookies, tracking cookies, or third-party analytics tools such as Google Analytics.

If this changes in the future, we'll update this policy and add a cookie consent mechanism to the site.

Children's data

Our services are aimed at businesses and business owners. We do not knowingly collect data from anyone under 16. If you believe we have collected data from a minor, please contact us immediately and we'll delete it.

Complaints

If you're unhappy with how we've handled your data, we'd prefer you contact us first at hello@blueorchan.com so we can try to resolve it.

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk

If you are based in the European Economic Area, you may also contact your local data protection authority.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top. We won't reduce your rights under this policy without your consent. If we make significant changes, we'll make reasonable efforts to notify you.

Contact

Questions about this policy or your data? Get in touch.

Email: hello@blueorchan.com Website: blueorchan.com