Privacy Policy

Privacy Policy

This Privacy Policy explains how OriginRhythm collects, uses, shares, and retains personal data when you visit originrhythmthread.garden or interact with our services. It applies to information handled in connection with our AI software development and AI implementation activities, as well as general website enquiries and related communications.

Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
01

How We Use Data

We use personal data to respond to enquiries, provide and improve our services, manage client and business relationships, maintain security, monitor site performance, keep records, comply with legal obligations, and support internal administration. Where appropriate, we may also use data to assess project requirements, deliver AI-related development work, and communicate about service updates or operational matters.

Processing is limited to purposes that are relevant to the operation of the site and services.
02

Service Providers and Partners

We may share personal data with hosting providers, analytics services, communications tools, professional advisers, and other vendors that support our operations. These parties are expected to process data only for the services they provide to us and to use appropriate safeguards consistent with their role.

Service providers receive only the information needed to perform their assigned functions.
03

Legal Disclosures

We may disclose personal data where required to comply with law, court orders, regulatory requests, or lawful requests from public authorities. We may also share information where necessary to protect our rights, investigate suspected misuse, or support legal claims and compliance activities.

Disclosure to public authorities is limited to situations where a lawful basis exists.
Privacy Office

Contact Details

Email contact
Telephone contact
+44 7271 898328
Postal address
8 Wildman Road, Law, Carluke, ML8 5ET
Privacy enquiries
Data category

Data We Collect

We may collect identifiers and contact details, business or project information you choose to provide, account and communication records, technical data such as device and browser information, usage data, and any content submitted through forms, enquiries, or service interactions. Where relevant to AI software development or implementation work, we may also process information about business requirements, system configurations, and project outputs.

The categories of data collected depend on how users interact with the site and services.
Collection source

How We Collect Data

We receive personal data directly from you when you complete forms, send messages, request information, or otherwise interact with OriginRhythm. We also collect certain data automatically through the operation of the website, including log data, device data, and cookie-related information. In some cases, we may receive information from business partners, service providers, or other parties involved in delivering or supporting our services.

Information may come from direct submissions, automated logs, and service-related communications.
Cookie type

Cookies and Similar Technologies

We may use essential cookies to support site operation and security, preference cookies to remember settings, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent depending on their function. Similar technologies may also be used for comparable purposes, subject to applicable settings and controls.

Cookie use is limited to operational, preference, and analytics functions.
User control

Cookie Controls

We use standard browser and site controls to manage cookie use where available. You can usually block or delete cookies through your browser settings, although some parts of the site may not function properly if essential cookies are disabled. Where a consent tool is provided, you may update your preferences through that tool.

Cookie preferences can usually be adjusted through browser settings and, where available, site controls.

Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to request portability where applicable. Some requests may be limited where we must keep information for legal, security, or contractual reasons.

Available rights depend on the nature of the data and the legal basis for processing.

Requests should be made using the contact details in this policy and should describe the information or right you wish to exercise. We may ask for additional information to confirm identity and to locate the relevant records. If a request is refused in whole or in part, we will explain the reason where required by law.

We may need to verify identity before acting on a privacy request.

We retain personal data for the period needed to provide services, manage enquiries, maintain records, meet legal obligations, resolve disputes, and enforce agreements. When data is no longer required, we delete it, anonymise it, or restrict it so that it is no longer actively used, subject to any retention duties that apply.

We keep data only for as long as needed for the relevant purpose or legal requirement.

If we make material changes to this Privacy Policy, we will update the policy on this page and may provide additional notice where appropriate. The date of the latest revision should be reviewed regularly, as continued use of the site after changes take effect may indicate acceptance of the updated notice to the extent permitted by law.

We may revise this notice to reflect legal, technical, or operational changes.