Draft — needs owner and legal review before it is relied on. The structure and the substance come from OR²'s own privacy text. The registered entity, its address, the contact route for data requests and the supervisory authority are still to be confirmed by OR².
Who we are
OR² operates OR², a business-operations platform provided to registered businesses on an invite-only basis. Businesses use OR² to manage stock, purchases, sales, accounts and cash flow within their own isolated workspace. The registered entity name, registered address and jurisdiction are set out in the schedule at the end of this policy, which is to be completed by OR² before this policy takes effect.
This policy explains how information is handled across the service.
The information in OR²
Information in the service falls into two kinds:
- Account information. Details your workspace administrator provides when provisioning your account, such as your name, email address, role, and your business's details.
- Business records. The records you and your team create in the course of running your business: products, bills, payments, ledgers and reports.
What we do not collect
The service carries no advertising machinery and no analytics machinery.
- No advertising trackers.
- No third-party analytics.
- No profiling of you or your business.
- Nothing is collected beyond what the service needs to run.
This website carries no analytics script, no advertising script and no third-party embed. The fonts it uses are served from this site's own origin.
Your workspace is yours alone
Every business on OR² gets an isolated workspace. Your records are never visible to, or shared with, another business.
Even OR² platform staff have no routine view of your business records. Access is restricted to the narrow operational needs of running the service.
How data is protected
- Data is encrypted in transit.
- Access to systems is controlled and limited.
- Administration follows least-privilege principles.
- Workspaces are isolated from one another by design.
Retention and deletion
You stay in control of your business records. You can export, correct or delete your data at any time.
When data is deleted, it is removed with no history and no footprints. Deletion in OR² is complete. The retention period for a workspace that is ended is to be confirmed by OR².
Sharing
We do not sell, rent or share business data.
The service's infrastructure is hosted by our service providers, who process it under obligations that protect it and only on our instructions. Those providers, the categories of data they process and the locations they process it in are to be listed by OR² before this policy takes effect.
Your rights
You can exercise the following rights over your account and business records:
- Access: see the information held in your workspace.
- Correction: fix records that are wrong.
- Export: take your records out of the service.
- Deletion: have records removed with no history and no footprints.
These rights are exercised through your workspace administrator. A public address for data requests has not been published yet; it appears here once OR² confirms it.
Changes to this policy
If we make material changes to this policy, we will communicate them in advance through the service. The effective date at the top of this page reflects the current version.
Contact
Questions about privacy are handled through your workspace administrator.
Schedule to be completed by OR²
- Registered entity name, registered address and jurisdiction.
- Public email address for data requests.
- List of infrastructure providers and the data they process.
- Retention period for an ended workspace.
- Effective date.