Legal

Privacy Policy

Last updated 2 November 2026 · Ornyth

Ornyth is a software and research company. Through Ornyth Studio we build practical software and digital solutions for businesses; through Ornyth Leads we research, verify and deliver B2B prospect lists and business information to help organisations find the right companies and the right people to talk to. This policy explains what information we handle, why, and the choices you have.

We keep this policy written in plain language on purpose. If anything here is unclear, email us at sales@ornyth.co and we will explain it.

1. Who we are

Ornyth ("Ornyth", "we", "us") provides software development and business research services. Our research services include B2B lead research, business data enrichment, market and competitor research, decision-maker research and custom research projects. For the purposes of the UK General Data Protection Regulation and the EU General Data Protection Regulation ("GDPR"), Ornyth acts as a data controller for the information described in this policy. Where a client instructs us to process personal data on their behalf — including data a client puts into software we have built for them — we act as a data processor and follow the client's lawful instructions under a separate data processing agreement.

2. Scope: business data, not private life

Our work is strictly business-to-business. The contact information we research and deliver relates to people in their professional roles — business owners, executives, managers and other decision-makers — at their business contact points (company email addresses, company phone numbers, office addresses). We do not research, buy, sell or enrich data about private individuals for consumer purposes, and we do not build profiles of anyone's private life.

3. Information we handle

3.1 Information our clients and website visitors give us

• Contact and company details you provide when you request a sample, ask for a quote or correspond with us — typically your name, business email address, company name and your requirements.
• The content of your messages and any brief you share about the research you need.

3.2 Business contact information we research

The core of our service is researching business contact data from publicly available sources, including: company websites and press pages, official company registries and filings, public professional profiles, published directories, news and trade publications, and other sources open to the public. We then verify and structure that information ourselves. Depending on the project, a record may include: company name, industry, location, size, website, and the names, roles and business contact details of relevant decision-makers.

3.3 Technical information

Like most websites, our hosting provider records basic technical logs (such as IP address, browser type and pages requested) for security and uptime purposes. We do not run advertising or cross-site tracking on this website. See our Cookie Policy for details.

4. Why we use information, and on what basis

• To operate and deliver our services — preparing samples, quoting, researching and delivering the lists a client ordered. Legal basis: performance of a contract, and legitimate interests in running our business.
• To research business contact data — collecting and verifying publicly available business information, and delivering it to clients who use it for business development. Legal basis: legitimate interests (Article 6(1)(f) GDPR). In our assessment, this is appropriate because the data concerns professional roles and business contact points, is public by nature, supports a normal and socially accepted activity (business outreach between companies), and our clients are expected to contact people in a relevant, professional capacity with a clear opt-out. We do not consider this use to override the rights of the individuals concerned — and anyone who objects is removed, as set out in section 9.
• To respond to you — answering enquiries and correspondence. Legal basis: legitimate interests and, where relevant, steps prior to entering a contract.
• To meet legal obligations — accounting, tax, and records required by law. Legal basis: legal obligation.

5. What we do not do

• We do not sell your personal data to anyone. We sell research services and the business lists we build for clients — we are not a data broker trading in personal information.
• We do not send consumer marketing, and we do not enrich data for credit checks, employment screening, insurance underwriting or any similar purpose.
• We do not research data behind logins, paywalls or anything the source has not made public, and we do not use deceptive means to collect information.

6. How clients are expected to use the data we deliver

Our clients use delivered lists for their own sales, marketing and business development. That outreach is carried out by the client, who is responsible for contacting people lawfully in their jurisdiction — for example the UK GDPR and PECR rules on business electronic marketing, the EU GDPR, and the CAN-SPAM Act in the United States. Our Terms of Service require every client to honour opt-out and unsubscribe requests, to identify themselves honestly in their communications, and to use the data only for legitimate business purposes. If you were contacted by one of our clients and want to stop receiving their messages, you can use the opt-out they provide, or contact us and we will pass the request on and suppress the record on our side.

7. Sharing information

We share information only with: service providers who help us operate (for example hosting, email and file storage providers), professional advisers where necessary, and authorities where the law requires it. Service providers process data on our instructions under contract and are not permitted to use it for their own purposes. We never sell personal data.

8. International transfers

Where information is transferred outside the UK or the EEA (for example when using a service provider there), we rely on the safeguards recognised for such transfers, such as the UK International Data Transfer Add-on (IDTA) or the EU Standard Contractual Clauses, together with additional due diligence on the provider.

9. Opt-out, objection and your rights

If you are a business contact whose details appear in our research, you can object at any time. Email sales@ornyth.co and we will remove and permanently suppress your record — suppression means your details will not be re-researched in future projects.

If the UK or EU GDPR applies to you, you also have the rights to: access the information we hold about you; have inaccurate information corrected; have information erased; restrict or object to processing; data portability; and to complain to your data protection authority (in the UK, the Information Commissioner's Office — ico.org.uk). We respond to rights requests within one month. We may ask a minimal question (such as the email address concerned) to locate the record, but we never require you to explain why you are objecting.

10. How long we keep information

• Client correspondence and project records: for as long as needed to serve the relationship and meet legal, accounting and warranty obligations.
• Business contact records: reviewed and refreshed as part of our research process; records that are objected to are deleted and suppressed indefinitely; stale records are removed when they are no longer verifiable.
• Technical logs: kept by our hosting provider for a short security window, typically under 30 days.

11. How we protect information

We use HTTPS on this website, restrict access to research data to the people who need it, keep working copies limited, and choose reputable service providers. No method of storage or transmission is perfectly secure, but we treat the data in our care with the care a business depends on.

12. Changes to this policy

We may update this policy as our services or the law develop. The "last updated" date above always shows the current version, and material changes will be highlighted on this page.

13. Contact

Questions, objections, rights requests or complaints: email sales@ornyth.co and we will deal with it personally.