Privacy Policy
What we collect, why we collect it, and how to make us delete it. Written to be read rather than to be legally impenetrable.
Effective July 27, 2026
The short version
We collect what you type into our contact form and standard analytics about how the site is used. We use it to answer your question and to make the site better. We do not sell it, we do not rent it, and we share it only with the handful of service providers listed below who help us run the business.
If you want to know what we hold about you, or you want it deleted, call or write and we will handle it. You do not need to cite a regulation or fill in a form.
What we collect
Information you give us
When you submit the form on this site we receive your name, business name, email address, phone number, website, which division you think you need, your budget range, and anything you write in the message field. If you call, we keep notes so we can pick up where we left off.
Information collected automatically
Basic technical information: pages visited, roughly how long you spend on them, the site or search that sent you, browser and device type, and an approximate location from your IP address. This is aggregate and we do not use it to identify individuals.
What we do not collect
- Payment card details. We never take card numbers through this website.
- Social security numbers, government identifiers, or financial account details.
- Sensitive personal information as defined by California law.
- Information about children. This site is not directed at anyone under 16.
How we use it
- To answer your enquiry and follow up on it.
- To route you to the right division, or to tell you that you do not need us.
- To prepare a proposal or scope of work if you ask for one.
- To deliver and support work you have engaged us to do.
- To improve the site, including which pages are useful and which are not.
- To meet legal, tax, and accounting obligations.
We do not use your details for automated decision making and we do not build advertising profiles from them. If you have not asked to hear from us, we will not add you to a marketing list.
Who we share it with
A short, honest list. Each of these processes data on our behalf and is bound to use it only for the service it provides us.
- Our three divisions. Orca Creative, Orca Marketing, and Orca IT are part of the same family of companies. If your enquiry belongs with one of them, we pass it internally rather than to a third party.
- Form processing. Submissions reach us through a third party form service which passes the message to our email and does not retain it for its own purposes.
- Email and file storage. Our email and document systems hold correspondence and files.
- Website analytics. We use Google Analytics to see which pages are working. It records aggregate usage rather than anything that identifies you, and it does not run at all if your browser signals Do Not Track or Global Privacy Control.
- Hosting. The servers this site runs on.
- Accounting. Invoicing and bookkeeping records for clients.
We will also disclose information if legally required to, for example in response to a valid subpoena or court order. If that happens and we are permitted to tell you, we will.
We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act, and we have not done so in the preceding twelve months. There is nothing to opt out of, because we do not do it.
Cookies and tracking
This site uses a small number of cookies. Some are necessary for it to function. Others support analytics so we can see which pages are working. We do not run advertising cookies or third party tracking pixels.
You can block or delete cookies in your browser at any time and the site will keep working. Most browsers also send a Do Not Track or Global Privacy Control signal, and we honor those where our systems receive them.
How long we keep it
- Enquiries that do not become projects. Up to 24 months in case you come back, then deleted.
- Client records. For the length of the engagement and seven years afterward, which is what our tax and accounting obligations require.
- Project files and source assets. While we work together and archived afterward, so you can come back years later and still get your files.
- Analytics. Aggregate data on a rolling basis, typically 14 months.
Your rights
Depending on where you live you may have specific legal rights over your information. We extend the following to everyone who contacts us, regardless of where they are, because drawing lines by residency seemed like a strange way to treat people.
- Know. Ask what personal information we hold and where it came from.
- Access. Request a copy of it.
- Correct. Ask us to fix anything inaccurate.
- Delete. Ask us to erase it, subject to records we are legally required to keep.
- Opt out. Tell us to stop contacting you, at any time, for any reason.
- Non discrimination. We will not treat you differently for exercising any of these.
To use any of these, call 800.274.6775 or use the form on this site. We confirm receipt quickly and respond within 45 days, which is the window California law allows, though in practice it is usually the same week.
How we protect it
Access to client data is limited to the people working on your project. Accounts use strong authentication, devices are encrypted, and we review who has access to what when people join or leave.
We will not claim any system is perfectly secure, because none is. What we will tell you is that if a breach ever affected your information we would notify you directly and promptly rather than burying it in a notice on a website.
Changes to this policy
If we change how we handle information we will update this page and change the effective date at the top. Material changes will be flagged clearly rather than slipped in quietly. This version took effect on July 27, 2026.
How to reach us
Call 800.274.6775 or use the form on this site. A person will answer, and it will be someone who can action your request rather than route it somewhere else.