Privacy
Privacy Policy
Last updated: 19 June 2026
This policy explains how Orogen8 ("we", "us") collects, uses, and protects your personal data when you use this website and our forms. Orogen8 is an independent ESG advisory and solutions studio based in Dublin, Ireland. If you have any questions, contact us at [email protected].
What we collect
- Register-interest details. When you ask to be notified about a product, we collect your name, work email, company, role, and your consent choices.
- Purchase details. If you buy a product, payment is handled by Stripe. We receive limited order and contact information to fulfil and account for the sale; we do not receive or store your full card details.
- Enquiries. If you email us or book a call, we keep the information you provide so we can respond.
- Technical data. Our hosting provider processes standard server information such as IP address and browser type to deliver and secure the site. We do not use advertising or tracking cookies.
How we use it
- To contact you about the product or service you registered for.
- To send you related ESG insights and updates — only if you opted in to marketing. You can withdraw this at any time.
- To process and account for purchases.
- To operate, secure, and improve the website.
Legal basis (GDPR)
We rely on your consent for notify and marketing communications, performance of a contract for purchases, and our legitimate interests in operating and securing the site and responding to enquiries.
Who we share it with
We share data only with service providers that process it on our behalf, under appropriate terms:
- Cloudflare — website hosting and storage of form submissions.
- Google — Apps Script and Workspace, used to receive and manage form submissions and email.
- Stripe — payment processing for purchases.
Some of these providers operate outside the European Economic Area; where that is the case, appropriate safeguards (such as Standard Contractual Clauses) apply. We do not sell your personal data.
How long we keep it
We keep register-interest and enquiry data for as long as needed to respond to your interest, and purchase records for as long as required for legal and accounting purposes. You can ask us to delete your data at any time.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict, or port your data, to object to certain processing, and to withdraw consent at any time. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
Marketing opt-out
If you opted in to marketing, you can opt out at any time by emailing [email protected]. We will stop sending marketing messages but may still contact you about a product you specifically registered for or purchased.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.