Privacy policy

The Orange Cat EOOD is the data controller. Address: Bul. Sofroniy Vrachanski 1, vh. V, et. 4, ap. 10, 6400 Dimitrovgrad, Haskovo, Bulgaria.

Privacy contact: tiho@theorangecat.dev.

If you email us directly, we process the address, content and metadata included in that email. If the form is enabled and you use it, we also process your name, company, country, project preferences, UTM attribution parameters and evidence of your request or consent.

When the form is enabled, Formspark also processes the IP address, approximate location derived from it and request metadata such as browser, referring page and origin to deliver the form, show where it came from and filter abuse.

We do not buy contact lists or treat a published address as consent. Do not enter health, criminal, biometric, children's or other special-category data in the form or email.

Replying to your enquiry and taking requested pre-contractual steps: GDPR Article 6(1)(b).

Sending one reminder when you explicitly select that option: consent under GDPR Article 6(1)(a). It is optional and can be withdrawn at any time.

Protecting the service, preventing abuse and retaining evidence of requests, opt-outs and authorisations: legitimate interests under GDPR Article 6(1)(f). We do not use an enquiry for later campaigns without a separate valid authorisation.

Google Workspace processes corporate email and Netlify hosts the site under their respective data processing terms. Only when the form is enabled, Formspark (Trampoline Software SRL, Belgium) receives and forwards its data as a processor; it states that primary data is stored in Ireland and Germany and publishes its subprocessors and transfer mechanisms.

We do not sell data. We only disclose it where required by law or necessary to provide the requested service.

Enquiries are retained while they are handled and for up to 12 months after closure, unless a contract begins or a legal duty requires another period.

Formspark retains submissions until we delete them; a deletion remains recoverable for 30 days. It publishes specific periods of up to 12 months for IP, approximate location and filtered submissions, and 7 days for server logs.

Consent evidence and suppression records are retained for as long as needed to demonstrate authorisation or respect a request not to be contacted again.

You may request access, rectification, erasure, restriction, objection or portability, and withdraw consent without affecting earlier processing. Email tiho@theorangecat.dev.

You may also complain to the supervisory authority where you live, including the Spanish AEPD or the Irish Data Protection Commission.

The site uses a preference cookie to remember the language and sessionStorage to retain, for the session, UTM parameters, initial path, language, referrer domain and a limited sequence of commercial interactions. These data do not leave the browser unless you voluntarily submit an enquiry, when they are attached to explain its origin.

We do not use this measurement for behavioural advertising. If we add analytics that requires consent, a choice must be offered before it is activated.

We will publish changes here and show a new version date. A material change to purposes or legal bases does not turn an earlier authorisation into a broader one.