Privacy Policy

Welcome to the Oro Intel privacy policy. We respect your privacy and are committed to protecting your personal data. This policy explains how we process your personal data when you visit our website at oro-intel.com (the “Site”), use our platform, or interact with us in any way. It also explains your privacy rights and how the law protects you.

1. Who we are

Oro Intel Ltd is the data controller responsible for your personal data as described in this policy. When we say “Oro Intel”, “we”, “us” or “our”, we mean Oro Intel Ltd.

Contact details:
Email: william@oro-intel.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO) at www.ico.org.uk. We'd appreciate the chance to address your concerns directly before you approach the ICO.

We keep this policy under regular review. Any changes will be posted on this page with an updated date.

2. What our platform does

Oro Intel is a procurement intelligence platform that helps businesses identify opportunities to sell products and services to UK local authorities and public sector bodies. We do this by collecting, analysing, and surfacing information from publicly available sources including council committee papers, cabinet reports, scrutiny meeting documents, and published tender notices.

This means we process two distinct categories of people's data: our users (people who sign up and use the platform) and public sector individuals whose names or roles appear in publicly available council documents. This policy covers both.

3. Data we collect about our users

When you sign up for or use Oro Intel, we may collect the following:

Identity and Contact Data — your name, email address, company name, job title, and phone number if you provide it.

Account and Preferences Data — your signal definitions, saved searches, alert preferences, and other configuration choices you make within the platform.

Technical Data — your IP address, browser type, device type, operating system, and other technical information about how you access the Site.

Usage Data — information about how you use the platform, including pages visited, features used, searches run, and documents viewed.

Communications Data — records of correspondence if you contact us by email or through the Site, and your marketing preferences.

Payment Data — if you subscribe to a paid plan, your payment details are processed by our third-party payment processor. We do not store your full card details.

We do not intentionally collect special category data (such as health, ethnicity, or political opinions) about our users, and our Site is not intended for children under 13.

4. Data we collect from publicly available sources

Our platform processes information from publicly available UK public sector documents including council committee papers, cabinet reports, officer reports, scrutiny meeting minutes, budget papers, and tender notices published on portals such as Find a Tender and Contracts Finder.

These documents are published by public authorities for public access and may contain the names, job titles, and professional roles of public sector officials — for example, report authors, committee members, and named officers.

We process this information to build our procurement intelligence database. We do not collect personal contact details of public sector officials beyond what appears in the published documents, and we do not use this data to contact those individuals directly.

5. How we collect your data

Directly from you — when you create an account, fill in a form, subscribe to alerts, contact us, or otherwise provide information to us.

Automatically — when you use our Site, we collect Technical and Usage Data through cookies and similar technologies. See Section 10 for details.

From public sources — we collect publicly available procurement-related documents from UK council websites, government portals, and statutory publication platforms using automated collection methods.

6. How and why we use your data

We only process personal data where we have a lawful basis to do so. The bases we rely on are:

Performance of a contract — to provide you with access to the Oro Intel platform, deliver alerts and reports, manage your account, and process payments.

Legitimate interests — to improve and develop our platform, analyse usage patterns, ensure security, and to collect and process publicly available procurement data for the purpose of building our intelligence database. Our legitimate interest in processing public sector document data is that it enables us to provide a service that improves transparency and access to public procurement information for businesses, particularly SMEs. We have conducted a legitimate interest assessment and concluded that this processing does not override the rights of the individuals concerned, given that the data is already published by public authorities for public consumption.

Consent — to send you marketing communications where you have opted in. You can withdraw consent at any time.

Legal obligation — to comply with our legal and regulatory obligations.

7. Who we share your data with

We may share your personal data with the following categories of recipient:

Service providers who help us run the platform — including cloud hosting providers, email delivery services, analytics tools, and payment processors. These providers only process your data on our instructions and are contractually bound to protect it.

Professional advisers — including legal, accounting, and insurance providers where necessary.

Regulators and authorities — including HMRC and the ICO, where required by law.

Business transfers — if Oro Intel is acquired, merges with another company, or sells assets, your data may be transferred to the new owner. We would notify you if this happens.

We do not sell your personal data to third parties. A list of our current sub-processors is available on request by emailing william@oro-intel.com.

8. International data transfers

Some of our service providers are based outside the UK. Where we transfer personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate contractual safeguards are in place, including Standard Contractual Clauses approved by the ICO or transfers to countries that have received an adequacy decision.

If you would like details of the specific safeguards in place for any particular transfer, please contact us.

9. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Publicly sourced procurement data is derived from documents published by public authorities and may be retained indefinitely as part of our intelligence database. In some circumstances we may anonymise your personal data, in which case we may use this information indefinitely without further notice to you.

10. Cookies

We use cookies and similar technologies on our Site to improve your experience and understand how the Site is used. We use strictly necessary cookies to make the Site function, and analytics cookies to understand usage patterns.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.

11. Your rights

Under UK data protection law, you have the following rights:

Access — request a copy of the personal data we hold about you.

Correction — ask us to correct inaccurate or incomplete data.

Erasure — ask us to delete your personal data where there is no compelling reason for us to continue processing it.

Objection — object to processing based on legitimate interests, including in relation to publicly sourced data about you that appears on our platform.

Restriction — ask us to suspend processing in certain circumstances.

Portability — request your data in a structured, machine-readable format.

Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email william@oro-intel.com. We will respond within one month. We may need to verify your identity before acting on your request. You will not have to pay a fee to exercise your rights, though we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

12. Rights of public sector individuals

If you are a public sector official whose name or role appears in documents processed by our platform, you have the same rights described above. In particular, you may object to our processing of your data or request its removal.

Because we process this data under legitimate interests, we will assess any objection or erasure request on a case-by-case basis, balancing your rights against our legitimate purpose of providing procurement transparency. Given the data originates from documents published by public authorities, in most cases continued processing will be justified, but we take every request seriously and will respond within one month.

To make a request, email william@oro-intel.com with enough detail for us to identify the data concerned.

13. Automated decision-making

Our platform uses automated processing to analyse documents, detect procurement signals, and match opportunities to user-defined criteria. These processes do not produce decisions that have legal or similarly significant effects on individuals. No automated profiling is carried out on our users for the purpose of making decisions about them.

14. Security

We have put in place appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. Access to personal data is restricted to personnel who need it to perform their roles, and all are subject to confidentiality obligations.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

15. Third-party links

Our Site may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies when you visit them.

16. Contact

For any questions about this policy, or to exercise your rights, contact us at:

Oro Intel Ltd
Email: william@oro-intel.com