Legal
Privacy & cookie policy
What we collect, why, who we share it with, and your rights. Written in plain English.
Last updated: 14 October 2026
Who we are
ORI Group is the data controller for the personal data described here. We're an Amsterdam-based, fully remote agency working with clients across Europe.
- Address: Gerard Doustraat 95D, 1072 VN Amsterdam, Netherlands
- Email: info@origroup.nl
- Phone: +31 6 21988301
- KvK (Dutch Chamber of Commerce): 90374533
- VAT: NL004810755B04
What we collect, and why
When you use our contact form we collect the name, email address, company (optional) and message you give us, and our hosting provider logs your IP address for a short time for security. We use this to reply to you and, if it leads somewhere, to prepare working together. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in replying to people who contact us.
If you instead book a call, that scheduling is handled by Calendly under their own privacy terms. We make no automated decisions about you and don't profile you.
Who we share it with
We don't sell your data. We use a small number of service providers that handle it on our behalf under data-processing agreements:
- Resend — delivers contact-form submissions to our inbox as email (sent from the EU; the company is based in the US).
- Microsoft 365 — our mailbox and files, where your enquiry lives once it arrives.
- Vercel — hosts this site and keeps short-lived server logs.
- Calendly — call bookings, if you book one.
- Google Analytics 4 — measures how the site is used. Only loads if you accept analytics cookies.
- AI writing tools — may help us draft replies and documents; we don't paste more of your data into them than the task needs.
Some of these providers are outside the EEA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU standard contractual clauses in that provider's agreement.
Cookies
The site itself sets no cookies until you choose. If you accept analytics, Google Analytics sets _ga and _ga_<id> (both kept for 2 years) to measure how the site is used. They load only after you accept via the cookie banner. You can decline with one click, and nothing is loaded. Your choice is stored in your browser (ori-cookie-consent, not a cookie), and you can change it any time using the “Cookie settings” link in the footer.
How long we keep it
We keep enquiry emails for up to 24 months after our last contact, unless you ask us to delete them sooner or we need to keep them longer for legal or accounting reasons (invoices, for example, must be kept for seven years under Dutch tax law).
Your rights
Under the GDPR you can ask us to access, correct, delete, restrict or port your data, object to our processing, or withdraw consent at any time. Email info@origroup.nl and we'll handle it within one month.
If you think we've mishandled your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
We'll update this page if our practices change, and revise the date above. Questions? Get in touch.