Privacy Policy

Last updated · 24 August 2026

This policy explains what we collect when you use oudorigin.io or send us an enquiry, why we collect it, and what you can ask us to do about it. We have kept it short and specific rather than long and defensive.

01Who we are

OudOrigin is a provenance system for agarwood, operated by its founding team in India. In this policy, “we” and “us” mean the operators of oudorigin.io. For any question about this policy, or to exercise a right described below, write to oudorigin@gmail.com.

02What this policy covers

This policy covers the public website at oudorigin.io only.

It does not cover records held inside a provenance ledger we operate for a customer. In those deployments the customer is the controller of their own commercial data, and we process it only on their instructions under a separate written agreement.

03What we collect

We collect only what you choose to send us:

Enquiry details — the organisation name, organisation type, contact person, email address, telephone number and message you submit through the contact form, or send us by email.
Technical data held by our hosting provider — standard server logs such as IP address, browser type and pages requested, retained by that provider for security and reliability.

We do not use advertising trackers, and we do not sell or rent personal data to anyone. We do not collect special category data through this site, and you should not send it to us.

04Cookies and similar technologies

This site sets no advertising or analytics cookies.

This site stores nothing in your browser beyond what is needed to display the page.

Typefaces are loaded from Google Fonts. Your browser’s request to that service will disclose your IP address to Google, under Google’s own privacy terms.

05Why we use it, and on what basis

We use enquiry details to reply to you, to arrange a briefing or demonstration, and to keep a record of the correspondence. Where Indian law applies, we rely on the consent you give by submitting the form. Where the UK or EU General Data Protection Regulation applies, we rely on our legitimate interest in responding to business enquiries addressed to us.

We will not add you to a marketing list on the strength of an enquiry.

06Who else sees it

Enquiry details are seen by the people in our team who need to answer you. Beyond that, data may be handled by service providers acting on our instructions — our website host, our email provider, and, if configured, the form-delivery service that passes your message to our inbox.

We may disclose information where we are legally required to, and we will resist any request that appears to us to be unlawful or excessive.

07Where it is held, and for how long

Our providers may store data outside India, including in the United States and the European Union. Where required, we rely on the transfer mechanisms those providers make available.

We keep enquiry correspondence for as long as needed to deal with the enquiry and any relationship that follows it, and normally no longer than 36 months after our last exchange with you, unless we are required to keep it longer.

08Your rights

Subject to the law that applies to you, you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, erase it, restrict how we use it, or withdraw a consent you gave. You may also complain to a supervisory authority — in India, the Data Protection Board established under the Digital Personal Data Protection Act, 2023.

Write to oudorigin@gmail.com and we will respond within 30 days. We may ask you to confirm your identity first.

09Security

The site is served over HTTPS. Enquiry data is held in access-controlled systems. No system is perfectly secure, and email in particular is not a confidential channel — please do not send commercially sensitive information through the contact form. Ask us for a secure channel instead.

10Children

This site is intended for businesses and public bodies. It is not directed at children, and we do not knowingly collect data from them.

11Changes

If we change this policy we will update the date at the top of this page. Material changes will be described here rather than made silently.

This policy is drafted to reflect how the site actually works. It is not a substitute for legal advice, and it should be reviewed by a qualified adviser — together with the entity name, registered address and grievance-officer details required under the Digital Personal Data Protection Act, 2023 — before the site is relied on commercially.