Request Demo
Platform Solutions Resources About Contact Login Request Demo

Privacy Notice

How Orphean collects, uses, and protects your information.

Last updated: August 2026

1. Introduction

Your privacy is important to us.

Orphean provide solutions that provide a unified intelligence layer that sits above our customer’s existing security stack. It correlates signals across physical, cyber, and operational domains, and turns that intelligence into a continuous, audit-ready governance, risk, and compliance.

This Privacy Notice applies to the personal data that Orphean Ltd (“Orphean”, “we”, “us” or “our”) process in relation to your interaction with our social media, websites, events, and business promotion. It describes and explains the personal data that we collect, how we process and use it, for what purposes we use it, how we may disclose it, and how we safeguard it.

For the avoidance of doubt, this Privacy Notice does not apply to situations where we act on behalf of our customers and process their information, generally in the role as “data processor” as defined by applicable data protection laws. Our processing of personal data on behalf of our customers is governed by agreements between us and our customers.

Orphean is committed to ensuring that your personal data is protected and secured in accordance with applicable legislation including the principles related to the processing of personal data as set out in Article 5 of the UK GDPR.

2. Personal Data We Collect

When we use the term “personal data” in this Privacy Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. Orphean collect your personal data in the following ways:

  • Information you provide when you contact us or interact with us. We collect personal data that you provide when you contact us or interact with us, such as your name, address, email address, and telephone number. We may collect other information to process your request or inquiry properly, such as questions, comments, or feedback.
  • Interest in our services. We collect personal data if you choose to participate in a survey, research, promotion, marketing campaign, free trials or evaluations of our services, or events conducted or sponsored by us. You may provide us with personal data such as your name, email address, and/or telephone number, employer name, your title, and audio or visual information.
  • Information collected automatically. As you interact with our website, we may automatically collect technical data about your equipment, browsing actions and patterns, such as device and usage data including IP address, browser type, pages viewed, referring URLs, and timestamps, collected through cookies and other similar technologies. Cookies are small text files that are placed on your device which web servers utilise and that can be retrieved later in the domain that placed the cookie. We may use cookies to provide an enhanced user experience, remember preferences, and assist you in navigating our website. You can control cookies through your browser settings; disabling some cookies may affect site functionality. For more information about our use of cookies, please contact us.
  • Personal Data from third parties or publicly available sources. We may obtain personal data about you from other sources as set out below, which we may combine with personal data we collect automatically or directly from you:
    • Our Customers and other users who interact with our services. We may receive your personal data from our customers, and other users that interact with our services. This includes any information collected by us for support related to your organization’s use of our services or events.
    • Business Partners. We may receive your personal data from our business partners.
    • Social Media. When you interact with our services through various social media networks, we may receive some information about you when permitted to share with third parties. The data we receive is dependent upon your privacy settings with the social network, including, but not limited to, your profile information, profile picture, gender, username, user ID, age range, language, and country. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services.

3. How We Use Information

We use your personal data to provide, develop, operate, maintain, and improve our website and services, including for the following purposes:

  • To provide our products, services, and information that you request, such as to respond to inquiries regarding the use of our products and demonstration requests;
  • To provide customer service and support and send you technical notices, updates, support and administrative messages;
  • To send administrative information and, where permitted, relevant product communications;
  • To complete your requests related to an event held or sponsored by us, and other marketing purposes;
  • To monitor usage, detect and prevent fraud or abuse, and ensure the security of our website;
  • To comply with our legal and regulatory obligations and enforce our agreements; and
  • For other purposes for which we obtain your consent, or for any other purpose disclosed at the time of collection.

4. Our Legal Bases and How We Process Your Personal Data

We may only use your personal data when we have a legal basis for doing so. We use different legal bases depending on the purpose of our processing activity. These legal bases are consent, contractual necessity, legitimate interests (ours, yours, or those of another party), compliance with a legal obligation, performing a task in the public interest, and protection of vital interests.

The following are the legal bases that Orphean rely on when we process your information:

  • Consent. We ask for your consent to access or use your personal data for specific purposes. If we do, you will be able to revoke your consent by contacting us. This includes but is not limited to when you sign up for any events that we run, or request a demo of our products;
  • Contractual Necessity. If you enter into a contract with us or we take steps at your request prior to agreeing a contract, we may process your personal data when it is necessary to perform the contract. This means we may use your personal data for purposes such as to enable the delivery of our services or become our customer or partner;
  • Legitimate Interest. We use your personal data when this is necessary to achieve legitimate interests—whether belonging to us, you, or a third party—provided these interests are not outweighed by your interests or fundamental rights and freedoms. This includes but is not limited to the following processing activities: when we communicate, when you use our services, when managing our marketing list, and sharing personal data with other parties to run our business efficiently and securely;
  • Legal Obligation. We may use your personal data when it is necessary to comply with a legal obligation, such as accounting, taxation, employment, and other business activities.

5. How We Share Information

We do not sell your personal information. We may provide your personal data:

  • To service providers, contractors, and other third parties to support our business and that process data on our behalf (such as hosting, analytics, and communications providers), which are bound by obligations to keep personal data confidential, to use it only for the purposes for which we disclose it to them, and to comply with their data protection obligations;
  • To professional advisors and other third parties, including in connection with a corporate transaction such as a sale or transfer of some or all of our assets in which personal data held by us in the capacity of Data Controller is among the assets transferred;
  • Where required by law or if we have good faith belief that it is necessary to: comply with applicable law, comply with a subpoena or court order, or to protect rights, safety, and security.

6. Data Retention

We retain personal information for as long as necessary to provide our services and for the other purposes described in this Privacy Notice. We also retain personal data when necessary to comply with contractual and legal obligations, when we have a legitimate interest to do so and for the exercise or defence of legal claims. The retention periods will be different depending on the type of personal data and the purposes for which we use the personal data.

7. Security

The security of your personal information is important to us. We maintain appropriate administrative, technical, and physical safeguards that are designed to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. We regularly review our security measures to consider new technologies and methods. For more detail, see our Security page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

The personal data we collect may be transferred and stored in countries outside of the jurisdiction you are in, to locations where we and our third-party service providers have operations.

In the event of a transfer, including to countries outside the UK or the European Economic Area (EEA), we will ensure that: i) the personal data is transferred to countries that are recognised as offering an adequate level of protection, or ii) the transfer is made pursuant to appropriate safeguards such as the International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers. If you have any questions about these safeguards, then please contact us.

9. Your Rights and Choices

You have rights and can also make choices about the collection and use of your personal data by Orphean. You can control your personal data that Orphean has obtained and exercise your data protection rights as highlighted in this section. Please note that some of these rights apply generally, while others will only apply in certain circumstances, and in some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable law.

  • Right to access: You have the right to obtain information about the personal data stored about you, including information about the processing.
  • Right to rectification: You have the right to require us to rectify any incorrect or inaccurate personal information about you that we hold.
  • Right to erasure: You have the right to require us to erase some or all of your personal data.
  • Right to object to the processing of your personal data: In certain circumstances you have the right to object to the processing of your personal data.
  • Right to restriction of processing: In certain circumstances, you have the right to require us to restrict the use of your data.
  • Right to data portability: In certain circumstances you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to share it with a third party.
  • Right to withdraw consent: Where you have previously provided your consent to the processing of personal data you are entitled to withdraw that declaration(s) of consent with future effect. However, this right to withdraw consent does not affect the legitimacy of any processing operations previously executed.

If you wish to exercise any of the rights set out above, please contact us at privacy@orphean.io. Please note that we reserve the right to not fulfil a request to exercise any of the above rights and choices if we are unable to ascertain your identity. If you are not satisfied with how we have responded to a request, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Children's Privacy

The services are intended for business use and are not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that data. If you believe we might have any information from or about a child under 13, please contact us.

11. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated where required by law.

12. Complaints

If you are unhappy with the way we are handling your personal data or you have any concerns about the protection of your personal data, you may raise a question or complaint with us. Do this by emailing privacy@orphean.io. We will acknowledge receipt of your complaint within 30 days and we will, without undue delay, take appropriate steps to respond to your complaint, make appropriate enquiries, keep you informed and tell you the outcome of your complaint.

13. Contact Us

If you have questions about this Privacy Notice or our data practices, please email privacy@orphean.io.