Privacy Policy

Who we are

Orcas Prime is a marketing agency based in Jaipur, Rajasthan, India. We build and run Shopify stores and online advertising for D2C brands, and we are paid a percentage of net sales. This policy explains what information we collect, why, and how you can have it removed. "We", "us" and "our" mean Orcas Prime.

What we collect

• This website. Standard analytics data (pages viewed, device type, approximate location, referring site) collected through Google Analytics 4. If you contact us by email or WhatsApp, we keep the message and the details you give us.
• Client business data. When a brand becomes our client, it gives us access to its own business accounts so we can report on and improve results. This includes advertising performance data (spend, impressions, clicks, campaign, ad set and ad names, purchases and revenue attributed to ads), store order data (order values, products, order status, payment method, delivery and return status) and shipping status data from the client's courier.
• Customer details inside client order data. For each order this can include the customer's email address, phone number, and delivery city and PIN code. We do not store customer names or street addresses. We use these only to measure delivery and return outcomes for that client. We do not use them to contact those customers or for any purpose of our own.
• Meta (Facebook and Instagram) advertising data. With the client's permission, we read advertising performance data for the client's own ad accounts through Meta's Marketing API. We receive reporting data about the client's ads. We do not receive, request or store the profiles, messages, posts or personal information of Facebook or Instagram users.

How we use it

• To show each client its own profit, advertising and delivery figures in a private dashboard.
• To advise on and optimise the client's advertising, store and shipping operations.
• To respond to enquiries and to operate and improve this website.
• To meet legal, accounting and tax obligations.

We do not sell personal data. We do not use client data to advertise to anyone, to build profiles of individuals, or for any purpose other than serving the client it belongs to. One client's data is never shown to another client.

Data obtained from Meta

We access Meta platform data only with the permission of the business that owns the ad account, granted by that business through Meta's own business tools. We use the ads_read permission to read advertising performance data, and we use it only to produce reports for that same business. We do not share Meta platform data with third parties other than the service providers listed below, who process it on our behalf. A client can withdraw our access at any time in its Meta Business Settings, and we then stop receiving its data.

Who else handles the data

We use a small number of service providers to store and process data on our behalf: a managed database provider and a dedicated server provider, both with data centres in the European Union; a workflow automation tool that we host ourselves; Shopify, courier and advertising platforms that the client already uses; and Google Analytics for website statistics. They process data only to provide their service to us. We may also disclose information where the law requires it.

Security

Access credentials are stored in encrypted or access-controlled systems and are not kept in the reporting database. Dashboards are private to the client they belong to and are shared only through links given to that client. Access to our systems is limited to the people who need it to do the work.

How long we keep it

We keep client data for as long as we work with that client. When the engagement ends, or when a client asks, we delete the client's advertising, store and shipping data and revoke the stored credentials within 30 days, except for records we must keep by law, such as invoices and tax records. Website analytics are kept for the period set in our Google Analytics property.

Your choices and rights

You can ask us to tell you what we hold about you, correct it, or delete it. Instructions for deletion are on our data deletion page. If you are a customer of one of our clients, your data was supplied by that client, who is responsible for it; you can ask either the client or us, and we will act on a request relating to data we hold. We follow India's Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000.

Children

Our services are for businesses. We do not knowingly collect personal data from children.

Changes to this policy

If we change this policy we will post the new version on this page and update the date at the top.

Contact and grievances

For any question, request or complaint about your data, write to orcasprime@gmail.com or call +91 90018 33059. We reply within 7 working days.