ORCA Opti

Legal

California Privacy Notice

How ORCA Opti collects, uses and shares the personal information of California residents, under the CCPA as amended by the CPRA.

Draft. This notice is being finalised and the wording is subject to change.

Last updated: 25 July 2026

This California Privacy Notice supplements our Privacy Policy and applies only to California residents ("consumers") whose personal information we process, as required by the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA"). Terms defined in the CCPA have the same meaning when used here. It does not apply to personal information that is exempt from the CCPA.

1. Categories of personal information we collect

In the last 12 months we have collected the following categories of personal information:

  • Identifiers — name, business email, phone number, IP address and online identifiers.
  • Customer records / commercial information — company, role, and records of products or services purchased or considered, including proposals, contracts and invoices.
  • Internet or other electronic network activity — interactions with our websites and emails, pages viewed and resources downloaded.
  • Geolocation data — approximate location inferred from IP address (not precise geolocation).
  • Professional or employment-related information — job title and employer; and, for job applicants, CV, references and right-to-work status.
  • Sensitive personal information — account log-in credentials for the platform. We do not use or disclose this to infer characteristics about you.
  • Inferences — limited inferences drawn from the above to tailor marketing, where you have consented.

We do not collect, through our marketing websites, government identifiers, financial account numbers, health, biometric or precise geolocation data.

2. Sources of personal information

We collect personal information directly from you; automatically through cookies and analytics; and from third parties such as resellers, channel partners, referral sources and public business directories.

3. Purposes for collecting personal information

We collect and use personal information for the business purposes described in "How we use it" in our Privacy Policy — including to operate and secure our websites and platform, respond to enquiries and support requests, onboard and bill customers and partners, send service and (where permitted) marketing communications, understand site usage in aggregate, and meet legal and contractual obligations.

4. Disclosures of personal information

In the last 12 months we have disclosed the categories above to service providers and contractors for business purposes — including cloud and platform providers (e.g. Microsoft Azure), our CRM and marketing tools (e.g. HubSpot), and analytics and tag-management tools (e.g. Google Analytics 4 and Google Tag Manager) — under contracts that restrict their use of the information.

5. "Sale" and "sharing" of personal information

We do not sell personal information for money. Under the CCPA, the use of certain advertising and analytics cookies for cross-context behavioural advertising can be treated as "sharing" (and, in some cases, a "sale") of identifiers and internet-activity data. You can opt out using the "Do Not Sell or Share My Personal Information" link and the "Cookie Preferences" control in the footer of every page. We also honour recognised opt-out preference signals, such as the Global Privacy Control (GPC), where required. We do not knowingly sell or share the personal information of consumers under 16.

6. Sensitive personal information

We do not use or disclose sensitive personal information for purposes that, under the CCPA, would give you the right to limit its use. If that changes, we will provide a "Limit the Use of My Sensitive Personal Information" option.

7. Retention

We retain each category of personal information for as long as needed for the purpose it was collected or as required by law, consistent with "How long we keep it" in our Privacy Policy.

8. Your California privacy rights

Subject to the CCPA's exceptions, California residents have the right to:

  • know and access the personal information we have collected, used, disclosed and shared;
  • delete personal information we have collected from you;
  • correct inaccurate personal information;
  • opt out of the "sale" or "sharing" of personal information;
  • limit the use and disclosure of sensitive personal information (where applicable); and
  • not receive discriminatory treatment for exercising any of these rights.

9. How to exercise your rights

You may submit a request through our contact page. We will verify your request against information we hold before responding, and we will respond within 45 days (extendable by a further 45 days where permitted). You may use an authorised agent to submit a request on your behalf, with proof of authorisation.

10. Do Not Sell or Share My Personal Information

To opt out, use the "Do Not Sell or Share My Personal Information" link in the website footer, or set your "Cookie Preferences".

11. Contact

This notice forms part of our Privacy Policy. For questions, contact us through our contact page.