Privacy Policy

Who we are

Orange Penguin ICT Ltd, company number SC742207, is based at Discovery House 3.2, Gemini Crescent, Technology Park, Dundee DD2 1SW. For questions about this notice or your personal information, email info@orangepenguin.uk or call 0800 054 8805.

For website enquiries, marketing sign-ups and our own business records, we are normally the data controller. When we manage a client's systems or access their staff and customer data on their instructions, we normally act as a data processor. In that case, the client remains the controller and their privacy notice also applies.

What we collect

We may collect your name, business name, work contact details, message and selected assessment when you use our forms, contact us or sign up for the free email course. We also keep correspondence, support requests, account and billing details where needed to provide services.

In providing managed IT support, we may have access to device and account identifiers, support logs, configuration information and data held on client systems. We only access client content when required to deliver the agreed service or resolve an issue. Our website and service providers may collect basic technical information such as IP addresses and browser information for security and operation.

Why we use it

• To answer enquiries and arrange assessments, where we have a legitimate interest in responding to you.
• To deliver IT support, administer contracts, manage accounts and handle payments, where necessary for a contract or our legitimate interests in running the business.
• To protect systems, investigate incidents and prevent misuse, where necessary for legitimate interests or a legal obligation.
• To meet legal, tax and accounting obligations.
• To send the free email course you request and any other marketing you have agreed to receive. You can unsubscribe from marketing at any time.

Where we act as a processor, our client's instructions and data processing agreement govern how we handle their data. We do not sell personal information.

Who we share it with

We use trusted providers for website hosting, email, cloud services, support tools and communications. They may process information on our behalf under appropriate contracts and security measures. We may also share information with professional advisers, regulators or authorities where required by law, and with a client where it relates to their services. We do not share enquiry details with unrelated advertisers.

International transfers

Some providers may process data outside the UK. Where required, we use appropriate safeguards, such as UK adequacy regulations or UK-approved contractual protections, and assess the risks of the transfer.

How long we keep it

We keep information only for as long as needed for the reason it was collected, our contract, legal obligations or legitimate business needs. Retention periods vary by record type: for example, financial records may need to be retained longer than an unsuccessful enquiry. Client service data is handled under the relevant contract and disposal instructions. You can ask about the period applicable to your information.

Keeping information safe

We apply access controls, security monitoring and other proportionate safeguards to protect the information we handle. No online service can be guaranteed completely secure. If you believe your information has been exposed, please contact us promptly.

Your rights

Under UK GDPR, you may have rights to access, correct, erase or restrict your data, object to certain uses, receive certain data in a portable format, and withdraw consent where consent is the basis for processing. These rights depend on the circumstances. Contact us at info@orangepenguin.uk to make a request. If your data is held by one of our clients and we act as their processor, we will direct you to that organisation.

You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies and external services

Our website uses essential browser storage to keep the site working and to remember your cookie choice. It may also load third-party content, including Google Maps on the contact page, which may let the provider collect technical information under its own privacy terms.

We use Google Ads (Google Ireland Limited) to measure which adverts bring people to our site and to improve our ad spend. Advertising cookies are only set if you click "Accept" on our cookie banner. If you reject, Google receives only limited, cookieless signals with no advertising cookies. If you accept and then send us an enquiry from one of our advert pages, your email address and phone number are passed to Google in hashed form to match the enquiry to the advert (enhanced conversions). We store your choice, the date you made it and the version of the notice shown in your browser. You can change your mind at any time using the "Cookie settings" link in the footer.

Changes to this policy

We may update this notice when our services or legal requirements change. The date at the top shows the latest revision.