Skip to content
OrvellanOrvellan — home

Privacy

Privacy policy

This policy explains what personal data Orvellan collects through this website, why, and what rights you have. This site holds no patient or clinical data of any kind.

Draft. This policy is a draft pending legal review and is not yet in force.

Who is responsible

Because we offer services to practices in the United Kingdom and the European Union, UK GDPR and EU GDPR apply to that processing alongside the Law of Georgia on Personal Data Protection.

What we collect

If you use the enquiry form we collect your name, your practice name, your email address, your telephone number if you give one, the scanner you use, and anything you write in the message field.

Our server records the IP address a submission came from. We use it only to rate-limit the form and to investigate abuse.

We do not use advertising cookies, and we do not track you across other websites.

Clinical and patient data

This website does not collect, receive or store patient data of any kind. The file panel shown on the process page is an illustration and cannot accept a file.

Please do not send patient information through the enquiry form. If you do, we will delete it and tell you.

Why we may use it, and on what basis

We use your enquiry to answer you and, if you ask, to send pricing and account details. The lawful basis is our legitimate interest in responding to a business enquiry, and taking steps at your request before entering a contract.

We do not use your details for marketing unless you separately ask us to.

Who else sees it

Each acts on our instructions under a data processing agreement.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, object to our using it, or ask us to restrict how we use it.

If you are unhappy with our response you can complain to the Information Commissioner's Office in the UK, to your national supervisory authority in the EU, or to the Personal Data Protection Service in Georgia.

Security

This site is statically generated with no database and no user accounts. The enquiry form is the only place data is submitted, and it is rate limited and bot protected. Our security contact is published at /.well-known/security.txt.