Legal
Privacy Policy
This policy explains what personal information we collect when you visit organbyte.com, use our contact form or chat assistant, how we use it, who we share it with, and the choices you have. It applies to this website only. How we handle client data inside an engagement is covered on our Trust & Security page.
On this page
- 01Who we are
- 02What this policy covers, and what it does not
- 03What we collect
- 04How we use your information
- 05Our legal bases (EU, UK and similar laws)
- 06Who we share it with
- 07Cookies, local storage and your choices
- 08How long we keep it
- 09International transfers
- 10Security
- 11Your rights
- 12Children
- 13Links to other sites
- 14Changes to this policy
- 15How to contact us
Who we are
OrganByte IT Solutions (OrganByte, we, us) operates organbyte.com. We are registered in Florida, United States, with our engineering and delivery hub in Karachi, Pakistan. For the purposes of data protection law, we are the data controller of the personal information described in this policy. Our founder is the point of contact for privacy matters.
You can reach us about anything in this policy at info@organbyte.com, or through our contact page.
What this policy covers, and what it does not
This website is a marketing and enquiry site. It has no user accounts, processes no payments, and is not a platform you log into. This policy covers the information the site, its contact form and its chat assistant collect from visitors.
Please do not send us patient or health information through this site
The website, the contact form and the chat assistant are not intended for protected health information or any other sensitive personal data, and they are not a covered channel under HIPAA. Do not submit patient details, medical records or anything about a person's health through them. If you are a healthcare organisation and need to share such information, we will set up an appropriate channel under a signed Business Associate Agreement first.
Data we process on behalf of clients during an engagement is governed by the agreement we sign with that client, not by this policy. Our Trust & Security page describes how we handle it.
What we collect
Contact form
When you submit the contact form we collect your name, email address, phone number, the service you are asking about, your message, and your company name if you choose to give it.
Chat assistant
When you use the chat assistant we collect the messages you type, the assistant's replies, and timestamps. To keep your conversation together across page loads, the site stores a random session identifier in your browser's local storage. That identifier is not linked to your name unless you type identifying details into the chat.
Analytics and cookies
We use Google Analytics to understand how the site is used: which pages are viewed, roughly where visitors come from, what device and browser they use, and how they arrived at the site. Google Analytics sets cookies to do this and receives a truncated form of your IP address. We do not run advertising pixels. If that changes, we will update this policy first.
Technical data
Like most websites, our hosting provider records technical information when you load a page, such as your IP address, the time of the request and the page requested, in order to serve the site securely and to detect abuse.
We do not knowingly collect government identifiers, financial account details, biometric data or health information through this site, and we ask you not to send them.
How we use your information
- To respond to your enquiry and to arrange and hold a discovery call if you ask for one.
- To deliver services you have asked for, and to take the steps needed before entering into an agreement with you.
- To operate, secure and improve the site, including understanding which content is useful.
- To keep records we are required to keep, and to establish, exercise or defend legal claims.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not use the contents of your enquiry or your chat conversation to market to anyone other than you.
Our legal bases (EU, UK and similar laws)
Where the GDPR, the UK GDPR or a similar law applies to you, we rely on the following bases:
- Steps taken at your request before entering into a contract, for responding to enquiries and preparing proposals.
- Our legitimate interests in running, securing and improving a business website, balanced against your rights.
- Your consent, where we ask for it, which you can withdraw at any time.
- Compliance with legal obligations that apply to us.
Who we share it with
We share personal information only with the service providers that run this site and handle enquiries, each of which processes it on our instructions:
| Provider | What it does | Information involved |
|---|---|---|
| Vercel | Hosts the website and measures page performance | Technical data such as IP address and request logs |
| Google Analytics | Website analytics | Cookie identifiers, pages viewed, device and browser data, truncated IP address |
| Render | Hosts the backend service that powers the chat assistant and receives contact-form submissions | Contact-form fields, chat messages and session identifier |
| AI model provider | Generates the chat assistant's replies from the messages you send | Chat messages |
| Email delivery provider | Forwards contact-form submissions to our inbox | Contact-form fields |
| Cloudinary | Serves some of the images on the home page | Technical data such as IP address |
| Google Fonts | Serves web fonts on the home page | Technical data such as IP address |
We may also share information with professional advisers (for example lawyers and accountants) under confidentiality, with authorities where the law requires it, and with a successor if our business is sold or merged, in which case this policy continues to apply to your information.
Cookies, local storage and your choices
Cookies are small files a website stores in your browser. Local storage is a similar mechanism without an expiry date. This site uses:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguishes visitors and sessions for analytics | Up to 2 years |
| organbyte_session_id | This site (local storage) | Keeps your chat conversation together across pages | Until you clear site data |
| themeMode | This site (local storage) | Remembers a display preference | Until you clear site data |
Analytics loads when a page loads. You can stop it in three ways: block or delete cookies in your browser settings, install the Google Analytics opt-out browser add-on, or use a content blocker. Blocking analytics does not affect how the site works. You can clear the chat session identifier at any time by clearing this site's data in your browser.
How long we keep it
- Contact-form enquiries: up to 24 months after our last contact with you, or longer if we enter into an agreement, in which case the engagement's records rules apply.
- Chat assistant transcripts: up to 12 months from the conversation.
- Analytics data: for the retention period configured in Google Analytics, after which Google deletes it.
- Technical logs: for the short period our hosting providers keep them for security and troubleshooting.
We delete or anonymise information when it is no longer needed for the purpose we collected it for, unless the law requires us to keep it longer.
International transfers
We are a United States company and our engineering and delivery team is based in Karachi, Pakistan. Our service providers operate in the United States and elsewhere. This means your personal information may be stored in, and accessed from, countries outside the United States, the European Economic Area and the United Kingdom, including Pakistan, whose data protection laws may differ from those in your country.
Where the law requires a safeguard for such a transfer, we use the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an equivalent mechanism, together with contractual confidentiality and access controls for anyone on our team who handles your information. You can ask us for details of the safeguards we rely on.
Security
The site is served over HTTPS, so information you send us is encrypted in transit. Access to enquiries and chat transcripts is limited to the people who need it to respond to you. We choose service providers that publish their own security practices and we review those practices before we use them. No website can guarantee perfect security, and we ask you not to send us anything through the site that you would not want to be read by the people handling your enquiry.
Your rights
Depending on where you live, you may have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete your information.
- Receive your information in a portable format.
- Object to, or ask us to restrict, certain processing.
- Withdraw consent where we rely on it, without affecting what was done before you withdrew it.
- Complain to a data protection authority. In the EU or UK, that is the authority in the country where you live or work.
California residents
Under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use and share it, to delete it, to correct it, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in California law, so there is nothing to opt out of. If that ever changes, we will add a "Do Not Sell or Share My Personal Information" link to this site first.
How to exercise your rights
Email info@organbyte.com with the word Privacy in the subject line, or use our contact page, and tell us what you would like us to do. We may ask you to confirm your identity so that we do not act on someone else's request. We respond within 30 days, and we will tell you if we need longer and why. Exercising your rights is free.
Children
This site is for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 13, or under 16 where the GDPR or UK GDPR applies. If you believe a child has given us personal information, contact us and we will delete it.
Links to other sites
The site links to third-party sites, including our LinkedIn page. Those sites have their own privacy practices, which we do not control. Read their policies before you give them information.
Changes to this policy
We will update this policy when our practices or the law change. The dates at the top show when it took effect and when it was last changed. If a change materially affects how we use information you have already given us, we will say so prominently on this page, and where we can, we will tell you directly.
How to contact us
OrganByte IT Solutions, Florida, United States. Email: info@organbyte.com. Or use the contact page on this site.
Ask Byte
Ask Byte
Typically replies instantly
just Now
Hi! I'm OrganByte's assistant. How can I help you today?
AI-generated content may be incorrect