Privacy Policy & Terms of Service

The data controller responsible for the personal data described in this policy is:

ORION ENTERPRAJS DOOEL Skopje

Bulevar 3-ta Makedonska Brigada br. 70/6-064, 1000 Skopje, North Macedonia

Business number: 7374372 · Tax number: 4082019524567

For any privacy question or to exercise the rights described below, contact us at hello@orioncreate.com.

We collect personal data in two situations:

• When you contact us. Our contact form asks for your name, email address, organization (optional), the service you’re interested in, and your message. We use this solely to respond to your inquiry.
• When you browse the site. Like most websites, some technical and usage data is collected automatically — see “Cookies & analytics” below.

We do not collect financial, government ID, or other special-category data through this site.

• Responding to your inquiry — to answer the message you send us and, if you ask us to, discuss a potential project. Legal basis: taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business inquiries.
• Keeping the contact form secure — we use Cloudflare Turnstile to screen submissions for bots, and briefly use the sending IP address to apply a rate limit (max. 5 submissions per 10 minutes) that is held in memory and not written to a database. Legal basis: legitimate interest in preventing abuse and spam.
• Understanding how the site is used — aggregate analytics (pages viewed, approximate location, device/browser type, referral source) via Google Analytics, to help us improve the site. See “Cookies & analytics” for how to control this.

We never sell personal data, and we do not use your contact-form details for unrelated marketing.

Essential cookies. We use Cloudflare Turnstile on the contact form, which may set a short-lived cookie or similar technology solely to verify that a submission is coming from a person rather than a bot. This is strictly necessary for the form to work, isn’t used for tracking or advertising, and doesn’t require your consent.

Analytics cookies (optional). We use Google Analytics 4 to understand overall site traffic. It sets first-party cookies (typically named _ga and _ga_*) in your browser and may process data — such as an approximate, non-precise location derived from your IP address, browser, and device type — on Google’s servers in the United States, under Google’s own data-protection commitments.

These analytics cookies only load after you accept them in the cookie banner shown on your first visit. If you decline, or don’t respond, Google Analytics never loads and no analytics cookies are set. You can change your mind at any time by manage your cookie preferences to reopen that banner, or by blocking/deleting cookies directly in your browser’s privacy settings, using a browser extension such as Google’s Analytics opt-out add-on, or enabling “Do Not Track” / Global Privacy Control where your browser supports it. None of this affects your ability to browse the site or use the contact form.

We use a small number of service providers to operate this site, each acting as a processor on our behalf:

• SMTP2GO — delivers contact-form submissions to our inbox by email.
• Cloudflare, Inc. — provides the Turnstile bot-protection widget used on the contact form.
• Google LLC (Google Analytics) — provides website analytics, as described above.
• Our hosting provider — hosts the website and processes standard web-server logs (e.g. IP address, requested URL) as part of normal infrastructure operation.

We don’t share your data with anyone else, and we don’t sell it. Some of these providers may process data outside North Macedonia or the EU/EEA (notably Google and Cloudflare, both US-headquartered), relying on their own standard contractual safeguards.

Contact-form messages are kept for as long as reasonably needed to respond to your inquiry and for legitimate business record-keeping (for example, if it leads to a project), after which we delete them on request or periodically as part of routine inbox cleanup. Rate-limit data tied to an IP address is held in memory only and clears automatically after 10 minutes. Analytics data is retained according to our Google Analytics configuration — see Google’s Privacy Policy for details on Google’s own retention practices.

Subject to applicable law (including the GDPR, if it applies to you), you have the right to:

• ask us what personal data we hold about you, and get a copy of it (access);
• ask us to correct inaccurate data (rectification);
• ask us to delete your data (erasure);
• ask us to restrict or object to certain processing;
• ask for your data in a portable format; and
• withdraw consent at any time, where processing relies on it.

To exercise any of these, email hello@orioncreate.com. If you’re not satisfied with our response, you can lodge a complaint with the Agency for Personal Data Protection of the Republic of North Macedonia, or, if you’re located in the EEA or UK, with your own country’s data protection authority.

This site is intended for businesses and organizations, not children. We do not knowingly collect personal data from anyone under 16.

We may update this policy from time to time, for example if we start using a new tool or service. The “Last updated” date at the top of this page reflects the most recent revision.