Orixe

Legal

Privacy Policy

This policy explains how Orixe collects and uses personal data when you visit our websites, request a demo or use the Orixe platform, and describes the rights you have over your data.

1. Who is responsible for your data

The data controller is Orixe, Östra Hamngatan 16, Göteborg, Sweden (orixe@orixe.se, +46 760 07 25 66) and Orixe Technologies (Pvt) Ltd, Orion City, No. 752, Dr. Danister De Silva Mawatha, Colombo 0900, Sri Lanka (orixe@orixe.lk).

2. Collecting and using your personal data

We collect data you give us directly — for example when you fill in a contact or demo request form, create a platform account, or correspond with us — and technical data collected automatically when you use our websites.

  • Contact details: name, company, role, email address, phone number and country.
  • Account data: login identifiers, profile details and activity in the Orixe platform.
  • Supplier and compliance data you or your suppliers upload to the platform.
  • Usage data: IP address, browser and device type, pages visited and referring source.

3. Use of your personal data

  • To provide, operate, secure and improve the Orixe platform.
  • To respond to demo requests, enquiries and support cases.
  • To send service messages and, where you have agreed, relevant information about Orixe.
  • To comply with legal obligations and to establish or defend legal claims.

4. Legal basis

We process personal data on the basis of contract performance, our legitimate interest in operating and marketing a B2B service, your consent where required (for example for non-essential cookies), and legal obligations.

5. Sharing and transfers

We share data with service providers that host and support the platform, and with your own organisation's administrators. Where data is transferred outside the EU/EEA, we use appropriate safeguards such as EU Standard Contractual Clauses. We never sell personal data.

6. Retention

We retain personal data for as long as needed to provide the service and to meet legal, accounting and reporting requirements, after which it is deleted or anonymised.

7. Your rights

  • Access, correction and deletion of your personal data.
  • Restriction of, or objection to, certain processing.
  • Data portability where processing is based on contract or consent.
  • Withdrawal of consent at any time, and the right to lodge a complaint with a supervisory authority.

8. Security

Orixe applies technical and organisational measures including access control, encryption in transit, audit logging and blockchain-backed integrity checks on traceability records.

9. Contact

To exercise your rights or ask about this policy, contact orixe@orixe.se.