Privacy Policy

This privacy policy explains how One Rectangle Limited (“we”, “us”, or “our”) processes personal data when you visit orlimited.com or otherwise interact with us. We are the data controller for that processing.

1. Who we are

One Rectangle Limited is a private company limited by shares, incorporated in England & Wales (Companies House number 15416016). Our registered office is:

• One Rectangle Limited
• England & Wales
• Company No. 15416016

For data protection enquiries, contact us at hello@orlimited.com. We are assessing our obligation to register with the Information Commissioner’s Office (ICO) under the Data Protection (Charges and Information) Regulations 2018 and will update this policy if registration is required.

2. Scope and application

This policy applies to personal data we process in connection with our corporate website, contact enquiries, and related business communications. It does not cover third-party websites linked from our site (including our venture brands), which are governed by their own privacy policies. Where we process personal data on behalf of clients under contract, we act as a data processor and the relevant client’s privacy notice applies.

3. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data: name, email address, company name, job title (if provided), and the contents of messages you send via our contact form or email.
• Technical data: IP address, browser type and version, device type, operating system, referring URL, pages viewed, and approximate location derived from IP address (typically country/region level).
• Cookie and consent data: your cookie preference stored in local storage (see our Cookie policy).
• Correspondence records: emails and other communications you send to us, including metadata necessary to respond and maintain records.

We do not intentionally collect special category data (such as health, ethnicity, or biometric data) or criminal offence data through this website. Please do not submit such information via our contact form unless we have expressly requested it and explained the lawful basis.

4. How we collect personal data

• Directly from you when you complete our contact form, email us, or otherwise communicate with us.
• Automatically through server logs and hosting infrastructure when you browse our website.
• From your device when you set cookie preferences via our cookie banner.

5. Purposes, lawful bases, and retention

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process personal data only where we have a lawful basis. The table below summarises our main processing activities:

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms and concluded that processing is necessary and proportionate. You may object to processing based on legitimate interests (see section 9).

6. Who we share personal data with

We do not sell your personal data. We share data only with trusted service providers who process it on our instructions, and where disclosure is required by law or to protect our rights. Our key processors include:

• Vercel Inc.: Website hosting and content delivery (United States). Transfers are safeguarded using UK International Data Transfer Agreement and/or UK Addendum to EU Standard Contractual Clauses.
• Resend, Inc.: Transactional email delivery for contact form enquiries (United States). Transfers are safeguarded using UK International Data Transfer Agreement and/or UK Addendum to EU Standard Contractual Clauses.

We require processors to implement appropriate technical and organisational security measures and to process personal data only in accordance with our instructions and applicable data protection law.

7. International transfers

Some of our processors are located outside the United Kingdom. Where personal data is transferred internationally, we ensure a valid transfer mechanism is in place under UK GDPR Chapter V, such as an adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment where required.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption in transit, access controls, and contractual safeguards with subprocessors. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access: to obtain a copy of your personal data and information about how we use it.
• Right to rectification: to correct inaccurate data or complete incomplete data.
• Right to erasure: to request deletion in certain circumstances (“right to be forgotten”).
• Right to restriction: to limit how we use your data in certain circumstances.
• Right to data portability: to receive data you provided in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making: we do not use solely automated decision-making that produces legal or similarly significant effects.

To exercise any right, email hello@orlimited.com. We may need to verify your identity before responding. We aim to respond within one month, as required by law. You also have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

10. Children

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time to reflect changes in law, technology, or our practices. The “Last updated” date at the top will change accordingly. Material changes may be highlighted on our website where appropriate.

12. Contact

Data protection queries: hello@orlimited.com
One Rectangle Limited, registered in England & Wales, Company No. 15416016