OrionSuite is based in Uttar Pradesh, India, and currently serves businesses in India. For a privacy request or concern, contact info@orionsuite.in. This notice describes the current website and separates our business records from data processed for a client project.
01Who this notice covers
This notice covers OrionSuite’s public website and information we receive while discussing, quoting, delivering and supporting services. Our current commercial service area is India, but this notice also covers information associated with visitors who access the public website from other locations. We determine the use of our own business enquiry and administration records.
A client’s website or application may collect information for that client’s purposes. Where OrionSuite accesses that information to build or support the system, the client remains responsible for its own notices and lawful instructions. Project-specific data-processing arrangements should state our role, access and deletion requirements.
02Information you provide
If you email us, we receive the sender details, message and attachments you send. During a project, this may include your name, business contact details, organisation, requirements, approved content, billing information and support correspondence.
The Contact Us form collects your name, email address, service interest and project message, with optional business name and phone number. When you submit it, we store these details and the time of your privacy acknowledgement in our website database so we can review and respond to your enquiry. Required fields are identified on the form. Where enquiry email notifications are enabled, a copy of these details is sent to our business inbox for review and a confirmation is sent to the email address you provide. Our email provider processes these messages. Validation errors may temporarily retain your entered details in the website session so you can correct them. The website does not currently offer user registration or online card checkout. Please share only information relevant to your enquiry and information you are authorised to provide.
03Technical visit information
A web server or hosting provider may record your IP address, requested URL, time, browser or device information, response status and diagnostic events when you visit. Such logs can support delivery, troubleshooting and detection of abusive requests; they are distinct from an advertising profile.
The application may set first-party session and request-security cookies. See the Cookie Policy for their purpose and current configuration. The present website source does not include an analytics script, advertising pixel or visitor-tracking SDK.
The contact form uses Cloudflare Turnstile to help detect automated submissions. Cloudflare processes technical information associated with the verification, such as your IP address and browser information. Our server sends the verification token to Cloudflare before accepting an enquiry; it does not send your name, email or project message as part of that verification request. See the Cloudflare Privacy Policy for its processing details.
04How we use information
We use enquiry details to respond and prepare proposals; project details to deliver authorised work; billing records to administer payments and accounting; and support information to investigate issues. Relevant server information can be used to troubleshoot the website and protect its operation.
We do not need private employee records, identity documents or production databases just to discuss a project. Use sample or anonymised data where it serves the purpose. Any additional use, such as optional marketing, should be explained separately rather than assumed from a service enquiry.
05Permission and lawful handling
We handle information for the purposes explained when it is collected and under the applicable legal requirements. Sharing project details is not permission for unrelated marketing or for publishing a client’s confidential work. We seek any consent required for a new optional use.
You can tell us to stop optional communications or withdraw a permission you previously gave by emailing info@orionsuite.in. Withdrawal may affect a service that needs the information, but does not automatically erase records we must retain for a legal obligation or an unresolved transaction.
06Service providers and disclosure
Information needed to deliver our services may be handled by hosting infrastructure and the email or collaboration providers used for the engagement. AWS EC2 is our stated hosting platform. The actual provider, permitted access and processing location for a client project should be identified in that project’s arrangements.
We do not sell enquiry information or provide it to advertising networks through the current website. Where another collaborator needs access, the access should be limited to the task and covered by appropriate confidentiality or processing terms. Information may also need to be disclosed for an applicable legal requirement or to handle a dispute; this is not permission for unrelated disclosure.
07AWS hosting and processing location
An EC2 region is selected for each deployment. The use of AWS does not establish that all information remains in India: hosting, email, backups and support services can have different processing locations. We discuss any required location restrictions before selecting the services for a project.
If your organisation requires a particular region, a client-owned account or restrictions on cross-border access, include that requirement in the scope. We should not copy project data into a different system or region merely for convenience where the agreed restrictions prohibit it.
08Access and security
Before sharing sensitive information or credentials, agree the access method and the people who need it. Our intended approach is limited access for the relevant task, separate authorised credentials where available and removal of unnecessary access after work ends.
Security measures depend on the deployed system and the agreed service. This notice does not claim a security certification, a specific encryption configuration or continuous monitoring for every project. Backups, incident handling, access controls and any special security requirements should be documented for the engagement.
09Retention and deletion
Enquiry information is kept while the enquiry is active and for follow-up that remains relevant. Project correspondence and delivery records may be needed during the engagement, support period and resolution of outstanding issues. Billing and transaction records may need longer retention to meet applicable accounting or legal obligations.
Rather than promise a single retention period for every record, we assess its purpose, the project agreement, applicable law and unresolved matters. Ask us what retention applies to your information. For client-system data, the processing agreement should define return or deletion after handover; backup copies may expire under the agreed backup cycle rather than disappear immediately.
10Your requests and privacy concerns
You can ask what information we hold in relation to your enquiry or engagement, request correction, request deletion where it is appropriate, or raise a concern about its use. Email info@orionsuite.in and provide enough context to locate the relevant record. We may need proportionate verification before disclosing or changing information.
We will assess your request under applicable law and explain any reason we cannot fulfil it in full, such as a required record-retention duty. Requests about information controlled by a client should be directed to that client; we can assist through the authorised project contact where appropriate.
11Indian data-protection framework
Our handling of information is subject to the Indian requirements applicable to the activity and at the relevant time. India’s Digital Personal Data Protection Act and Rules have phased commencement; this notice does not claim that every provision is already in force or that publication of a notice establishes compliance.
For the official rules and commencement provisions, consult the Ministry of Electronics and Information Technology. Where a statutory right or procedure applies to your request, we will handle it accordingly. You may use the competent authority or legal remedy available under the provisions in force.
12Children and sensitive information
Our website describes business services and is not directed at children. We do not need children’s information or sensitive personal information for a general business enquiry. Please do not submit it unless a defined project requirement and appropriate handling arrangements have been agreed.
If information was shared accidentally or without appropriate authority, contact us so it can be assessed and handled. Projects involving children or sensitive records require specific requirements before processing starts; this general notice is not a substitute for those arrangements.
13External links and future changes
Following a LinkedIn or other external link takes you to a service whose own privacy and cookie practices apply. Visiting our website does not by itself authorise those services to collect information through an embedded tracking script, and no such tracker is configured in the current source.
We will update this notice when our collection features or practices change. A material new use of information may require additional notice or permission rather than just a new date on this page.
14Contact OrionSuite
For privacy questions, correction or deletion requests, and concerns about project information, email info@orionsuite.in. Identify whether your message concerns the OrionSuite website, a business enquiry or a particular client project so it can reach the appropriate person.
OrionSuite operates from Uttar Pradesh, India. Project-specific contact and business details belong in the proposal or agreement. We do not ask you to put passwords, financial credentials or identity documents in a privacy enquiry.