How OrreryHIM Handles Your Personal Information

Scope of This Privacy Policy

This Privacy Policy applies to personal information handled by OrreryHIM through:

• the public website at orreryhim.com;
• phone, WhatsApp and email communications;
• project discussions and quotations;
• website, software, hosting and database services;
• payment-gateway integration and transaction support;
• maintenance, troubleshooting and technical consultation.

This policy does not automatically apply to a website, software system or database operated independently by an OrreryHIM client. In those situations, the relevant organisation may act as the primary controller or decision-maker for the information held in its system.

Information OrreryHIM May Receive

The information received depends on how you interact with OrreryHIM.

Information Collected Through the Website

Basic technical information may be generated when someone visits the website. Depending on the hosting and website configuration, this may include:

• IP address;
• browser and device type;
• requested pages and access time;
• referring website or search source;
• server, error and security logs.

This information may be used for website operation, security, performance analysis, troubleshooting and protection against abusive activity.

OrreryHIM does not use this website to create detailed personal behavioural profiles for sale to advertisers.

Cookies and Similar Technologies

The website, WordPress, hosting platform or embedded third-party services may use cookies or similar storage technologies.

These technologies may support:

• basic website functionality;
• security and session management;
• remembering user preferences;
• traffic or performance measurement;
• embedded content provided by another service.

Visitors can control or delete cookies through their browser settings. Blocking essential cookies may affect some website functions.

How Personal Information May Be Used

OrreryHIM may use information for purposes such as:

Information may also be used where reasonably necessary to protect OrreryHIM, a client, a website visitor or another person from fraud, security threats, misuse or unlawful activity.

Client Projects and End-User Information

Some projects may involve information belonging to a client’s students, customers, employees, applicants or users.

In such cases:

• the client remains responsible for deciding why the information is collected and how it should be used;
• OrreryHIM should receive only the information reasonably required for development, migration, testing or support;
• live personal data should not be used for testing when suitable sample or masked data can be used instead;
• the client is responsible for providing lawful instructions and obtaining any notices, permissions or consents required for its own operations.

Project-specific responsibilities may also be defined in a proposal, agreement, quotation or service terms.

Payment and Transaction Information

When OrreryHIM develops or supports an online payment workflow, the payment gateway normally processes sensitive card, banking, UPI or authentication information within its own secure environment.

OrreryHIM or the client application may receive transaction information such as:

• customer or student reference;
• order or receipt reference;
• transaction amount;
• payment status;
• gateway transaction identifier;
• payment date and settlement information.

When Information May Be Shared

OrreryHIM may share limited information where reasonably necessary with:

• hosting and domain providers;
• email and communication service providers;
• payment gateways and merchant-service providers;
• software, plugin or platform providers;
• professional advisers where necessary;
• government, regulatory or law-enforcement authorities where legally required.

Information should be limited to what the recipient needs for the relevant task.

OrreryHIM does not sell personal information to advertising companies, data brokers or unrelated marketing organisations.

Third-Party Services

OrreryHIM projects may depend on third-party services such as WordPress, hosting platforms, domain registrars, payment gateways, email providers, analytics tools, plugins and cloud services.

These providers may process information under their own privacy policies and terms. OrreryHIM does not control every aspect of their systems, retention periods or international infrastructure.

Clients and visitors should review the privacy terms of relevant third-party services where those services directly collect or process their information.

How Long Information May Be Retained

Retention depends on the nature of the information and the reason it was received.

Information may be retained longer where necessary for a legal claim, dispute, security investigation or statutory obligation.

Information Security

OrreryHIM uses reasonable technical and organisational measures appropriate to the type of information and service involved.

Measures may include:

• restricted administrative access;
• password and credential controls;
• HTTPS and SSL configuration;
• software updates and security reviews;
• backups and recovery planning;
• temporary or limited access where practical;
• removal of access after completion of the task.

International Processing

Some third-party hosting, email, software or cloud providers may operate infrastructure outside India.

As a result, information processed through those providers may be stored or handled in another country, subject to the provider’s systems, contractual terms and applicable law.

OrreryHIM does not independently transfer information outside India for unrelated commercial purposes.

Children’s Information

The public OrreryHIM website is not intended to collect personal information directly from children for marketing or account creation.

School-management and educational projects may process student information on behalf of the relevant school or institution. The institution is responsible for ensuring that such information is collected and used lawfully and that required parental or guardian permissions are handled appropriately.

Your Requests and Choices

Depending on the circumstances and applicable law, you may contact OrreryHIM to:

• ask what personal information has been provided;
• request correction of inaccurate information;
• request deletion where retention is no longer necessary;
• withdraw consent for optional communication;
• raise a concern regarding the handling of information.

OrreryHIM may need to verify your identity and may request enough information to locate the relevant record.

A request may be limited where information must be retained for legal, accounting, security, contractual or dispute-resolution reasons.

Communication Preferences

OrreryHIM may contact you regarding an enquiry, quotation, active project, invoice, support request or important service matter.

OrreryHIM does not operate a large unsolicited promotional mailing programme. You may ask not to receive optional marketing or promotional communication.

Operational messages relating to an active service, payment, security issue or project may still be necessary.

External Links

The OrreryHIM website may link to client websites, service providers, documentation, social platforms or other external resources.

OrreryHIM is not responsible for the privacy practices, security or content of an external website merely because a link appears on orreryhim.com.

Visitors should review the privacy information of the external service before submitting personal information.

Changes to This Privacy Policy

This Privacy Policy may be updated when OrreryHIM’s website, services, third-party tools or legal responsibilities change.

The latest version will be published on this page with an updated effective date.

Continued use of the website after an update does not remove any rights available under applicable law.

Privacy Questions and Complaints

Questions, correction requests or privacy concerns may be sent to:

Please include enough information to identify the relevant enquiry, project or record. Do not include passwords, OTPs, banking credentials or unrelated confidential information.