Note: This policy is a practical starter version for launch. It should be reviewed when Orchard Works opens formal activity or becomes a company.
1. Controller
Orchard Works is the trading brand used for software products, APIs, agents and digital operations services.
Until the formal business entity/activity is updated, the operational contact is André Pereira, reachable through privacy@orchardworks.co.
2. Data we collect
We may collect the following categories of data:
- contact details submitted through forms: name, email, company and message;
- commercial communication data: enquiries, demo requests and support emails;
- technical data required to operate the website, forms and security logs;
- payment and order data processed through Lemon Squeezy when a digital product is purchased;
- client documents or business content only when provided for a demo, pilot or contracted service.
3. Purposes and legal bases
We process data to respond to enquiries, prepare demos, deliver digital products, provide support, manage commercial relationships and comply with applicable obligations.
The usual legal bases are pre-contractual steps, contract performance, legitimate interest in managing business communications, and legal obligations where applicable. Consent may be used for optional marketing or non-essential cookies.
4. Processors and third-party services
We may use carefully selected providers for hosting, forms, email, payments, analytics, AI infrastructure and file processing. Current or planned providers may include Netlify, Lemon Squeezy, email providers and AI/API infrastructure providers.
For payment processing, Lemon Squeezy may act as merchant of record for eligible digital products and handle checkout, payment methods, tax calculation/collection and receipts.
5. AI and client content
Client files, prompts, questions and outputs may be processed to provide demos, pilots or contracted services. Orchard Works aims to apply data minimisation, client separation, access control, retention limits and human review for business-critical outputs.
Do not submit sensitive, confidential or regulated personal data unless a written agreement and appropriate safeguards are in place.
6. Retention
Contact form submissions and commercial emails are kept only as long as necessary to manage the relationship or comply with obligations. Demo data can be deleted on request, unless retention is required by law or contract.
7. Your rights
Depending on the context, you may request access, rectification, erasure, restriction, objection and portability of your personal data. You may also lodge a complaint with the competent data protection authority.
8. Privacy contact
For privacy requests, contact privacy@orchardworks.co.
Last updated: 04/06/2026