Privacy notice

Who is responsible for your data

The data controller is Original Apps Limited (company number 12589547), trading as Origin Apps, registered in England and Wales.

Registered office address: Unit A, 82 James Carter Road, Mildenhall, Suffolk, IP28 7DE.

Contact for any privacy question: [email protected].

What data is collected

Two things, and nothing else:

• Enquiries. If you use the contact form, the name, email address and message you enter, plus anything else you choose to include.
• Technical logs. Cloudflare, which hosts and serves this site, records standard request data including IP address, browser type and the pages requested. This happens for every website and is used for security and to keep the site running.

What is not collected

This site runs no analytics, no advertising trackers and no third-party marketing scripts. Fonts are served from this domain rather than from Google, so visiting the site does not tell Google you were here.

If analytics are added later, this notice will be updated before they go live.

Why it is collected, and the lawful basis

• Enquiries are processed to reply to you and, if it goes further, to discuss and carry out work. The lawful basis is legitimate interests — responding to someone who has deliberately contacted a business — and, once work is agreed, performance of a contract.
• Technical logs are processed to keep the site available and secure. The lawful basis is legitimate interests.

Who else handles it

Your data is not sold, and it is not shared for marketing. It passes through a small number of suppliers who process it on Origin Apps’ instructions:

• Cloudflare — hosting and content delivery for this website.
• n8n, self-hosted at n8n.originapps.ai — receives contact form submissions and forwards them to Origin Apps by WhatsApp.
• WhatsApp (Meta) — delivers forwarded enquiries.
• Google Workspace — hosts the [email protected] mailbox for anyone who emails directly.

Where your data is held

Enquiries pass through Cloudflare, WhatsApp (Meta) and Google, which may process data outside the UK under the international transfer safeguards in their own data processing terms.

How long it is kept

Enquiries that do not lead to work: 12 months.

Records relating to work carried out: kept for as long as needed for the project and afterwards to meet legal and accounting obligations, normally six years.

Cloudflare technical logs: retained according to Cloudflare’s own retention periods.

Cookies

This site sets no analytics or advertising cookies. See the cookie notice for the current position.

Your rights

Under UK data protection law you can ask to:

• see a copy of the personal data held about you
• have inaccurate data corrected
• have data erased, where there is no longer a reason to keep it
• restrict or object to how it is used
• receive a copy in a portable format

Complaints

If you are unhappy with how your data has been handled, please raise it directly first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

Changes to this notice

If this notice changes, the date at the top of the page changes with it. Material changes to how data is used will be described here rather than made quietly.