Privacy Policy

Last updated: 30 September 2026

Ordilio ("Ordilio", "we", "us", or "our") is currently in early access. This website is a pre-launch marketing site, and it does not yet offer user accounts, orders, invoicing, or any of the other Platform features described elsewhere on this site. This Privacy Policy explains what personal data we actually collect through this website today, and how we use it.

1. Who we are

This website is operated by CGRAPS DIGITAL OPERATIONS LTD, trading as Ordilio, a company currently being incorporated in the Republic of Cyprus. Once incorporation is complete, we will publish our company registration number and registered address here.

2. What personal data we collect

We only collect personal data through this website in the following ways:

• Contact form. When you use the "Get in touch" form, we collect the name, email address, and message you provide.
• Spam and abuse prevention. The form uses Cloudflare Turnstile, a bot-detection check, which processes your IP address and device/browser signals to confirm you're not an automated script. The form also includes a hidden field ("honeypot") that helps us silently discard automated spam submissions.
• Basic technical logs. Like most websites, our hosting provider (Cloudflare) automatically logs technical information such as IP address, browser type, and request timestamps for security and reliability purposes.
• Security logging. Automated scanners often try to reach login pages that do not exist on this website, such as /wp-login.php or /admin. When one of these addresses is requested, we log the time, IP address, network provider, country, browser user agent and the address requested, and, if a login form is submitted, the username entered. Passwords are never stored. These addresses are not linked from this website, so ordinary visitors do not reach them.

We do not currently use analytics, advertising, or tracking cookies on this website. We do not sell personal data, and we don't use your contact-form details for marketing.

3. Why we use it

• To read and respond to the message you send us: necessary to deal with your enquiry.
• To verify you're a real person and prevent spam or abusive submissions: our legitimate interest in keeping the form usable and our inbox functional.
• To keep the website secure and operating reliably: our legitimate interest, and that of our hosting provider.
• To detect and understand automated attacks on this website (security logging): our legitimate interest in protecting the website and our systems.

4. Who we share it with

We use a small number of service providers to run this website and process enquiries:

• Cloudflare: hosting, content delivery, the Turnstile bot-protection check, and storage of security logs.
• Our email delivery provider: used solely to route contact-form submissions to our inbox.
• Google: Google Sheets, where we keep a daily summary of the security logs.

Typefaces used on this site are hosted on our own domain rather than loaded from a third-party font service.

We don't share your data with advertisers or data brokers. We may disclose information where required by law.

5. International transfers

Our service providers operate global infrastructure, so data may occasionally be processed outside your country, including outside the EU/EEA. Where that happens, we rely on the safeguards those providers already have in place (such as Standard Contractual Clauses) to protect your data.

6. How long we keep it

We keep contact-form submissions only for as long as reasonably necessary to respond to you and keep a record of the conversation, and we delete or anonymise them once that's no longer needed, unless we're required to keep something longer for legal reasons.

Security logs are kept for 90 days and then deleted automatically, both on Cloudflare and in the daily summary kept in Google Sheets.

7. Your rights

Depending on where you're located, you may have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at the email below.

8. Cookies

This website uses only strictly necessary cookies, for example those set by Cloudflare Turnstile to complete the bot-detection check on our contact form. We do not currently use analytics or marketing cookies. If that changes, we'll update this section and request consent where required.

9. Children

This is a business-to-business website intended for people acting in a professional capacity. It is not directed at children.

10. Changes to this policy

We may update this Privacy Policy as the website and product evolve, particularly around launch. We'll update the date at the top of this page when we do.

11. Contact us

Questions about this policy or how we handle your data? Email us at info [at] ordilio [dot] com or use our contact form.