Legal
Privacy Policy
Last updated: January 1, 2025
Effective: January 1, 2025
Your privacy is of paramount importance to Orion Consultation. This policy explains clearly what data we collect, how we use it, and your rights. We will never sell your personal information to third parties.
01 Who We Are
Orion Consultation ("Orion", "we", "us", or "our") is a strategic advisory firm providing business consultation, executive coaching, and advisory services to individuals and organisations worldwide. For the purposes of applicable data protection legislation, Orion Consultation is the data controller responsible for your personal information.
Contact email: privacy@orionconsultation.com
Registered address: [Your Business Address]
02 Information We Collect
Information you provide directly:
- Full name, email address, and phone number
- Business information (company name, role, industry, revenue range)
- Information shared during consultation sessions or intake forms
- Payment details — processed securely via third-party processors; we do not store full card numbers
- Communications sent via email, contact forms, or messaging platforms
- Feedback, testimonials, and survey responses
Information collected automatically:
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time spent, and navigation behaviour on our website
- Referring URLs and search terms used to find our site
- Cookie data and similar tracking identifiers
03 How We Use Your Information
- Service delivery: To provide, manage, and improve our consultation packages and advisory services
- Client communication: To respond to enquiries, schedule calls, and send service-related updates
- Billing & payments: To process consultation fees, issue invoices, and manage subscription billing
- Marketing (with consent): To send newsletters, insights, and promotional content where you have opted in
- Analytics & improvement: To understand how our website is used and improve user experience
- Legal compliance: To comply with applicable laws, regulations, and legitimate legal proceedings
- Security: To detect, investigate, and prevent fraudulent or unauthorised activity
We will never use your personal data for automated decision-making that produces legal or similarly significant effects without your explicit consent.
04 Legal Basis for Processing
- Contract performance: Processing necessary to deliver the consultation services you have engaged us for
- Legitimate interests: Operating and improving our business, preventing fraud, and maintaining security
- Legal obligation: Compliance with tax, accounting, and regulatory requirements
- Consent: For marketing communications and non-essential cookies, where you have given explicit consent
05 Data Sharing & Disclosure
We do not sell your personal data. We may share information with third parties only in the following limited circumstances:
- Service providers: Trusted vendors who assist in delivering our services (payment processors, CRM platforms, video conferencing, email providers) under strict data processing agreements
- Professional advisors: Lawyers, accountants, and auditors under obligations of confidentiality
- Business transfers: In the event of a merger, acquisition, or sale of business assets
- Legal requirements: When required by law, court order, or governmental authority
- Protection of rights: To protect the rights, property, or safety of Orion Consultation, our clients, or the public
06 Cookies & Tracking Technologies
Our website uses cookies to enhance your experience and gather analytics data. We use strictly necessary cookies (essential), analytics cookies (anonymised usage data), and marketing cookies (with your consent). You may manage cookie preferences through your browser settings or our cookie preference centre. See our Cookie Policy for full details.
07 Data Retention
- Active client records retained for the duration of the engagement plus 7 years for legal and accounting compliance
- Enquiry and lead data retained for up to 24 months from last contact
- Marketing consent records retained for the duration of consent plus 3 years
- Website analytics data retained for up to 26 months in aggregated form
When data is no longer required, it is securely deleted or anonymised.
08 Your Rights
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data in certain circumstances
- Restriction: Request that we limit processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Withdraw consent: Withdraw any consent given at any time without affecting prior processing
To exercise any right, email privacy@orionconsultation.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
09 Data Security
- TLS/SSL encryption for all data transmitted to and from our website
- Encrypted storage for sensitive client records
- Access controls and role-based permissions for internal systems
- Regular security assessments and staff training
No method of internet transmission is 100% secure. In the event of a data breach affecting your rights, we will notify you and relevant regulatory authorities as required by law.
10 International Transfers
Your information may be transferred to and processed in countries outside your own. Where we transfer data internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by relevant authorities — to ensure your data receives equivalent protection.
11 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to active clients and by a prominent notice on our website. The "last updated" date at the top reflects the most recent revision. Continued use of our services after changes are posted constitutes acceptance.