Privacy Policy

This policy applies to orcaweb3.io, operated by Orca Web3, a division of Orca Agency, United States. It covers this website and the enquiry form on it. It does not cover the sibling division sites, each of which publishes its own policy, or any third party site we link to.

What we collect

Information you give us

If you submit the enquiry form we collect what you type into it: your name, email address, company or project name, Telegram or X handle, project type, the chain you are working on or considering, budget range, timing, and the content of your message. If you email or call instead, we hold whatever you send.

Information collected automatically

Our hosting environment keeps standard server logs, which typically record the IP address making the request, your browser user agent, the page requested, the referring page and a timestamp. Logs exist for security, abuse prevention and debugging.

Analytics

We use Google Analytics 4 with the measurement ID G-82PBW3HDNM to understand which pages people read and where visitors arrive from. GA4 sets first party cookies in your browser, commonly _ga and a property specific cookie of the form _ga_<container-id>, which store a randomly generated identifier used to distinguish one browser from another. Google Analytics 4 anonymises IP addresses by default, so IP data is not logged or stored by GA4 the way it was in the previous version of the product. We do not use GA4 advertising features or remarketing audiences here, and we do not upload customer lists to it.

What we never collect

This matters more here than on an ordinary business site, so it gets its own section. We will never ask you for a seed phrase, a recovery phrase, a private key or a wallet signature. Not on this site, not by email, not in a direct message, not ever. Nobody legitimate needs any of those to discuss a branding project with you.

No wallet connection is required to use orcaweb3.io. There is no connect button, we do not request signatures, and we do not read wallet balances or transaction history to profile visitors. If a page claiming to be us asks you to connect a wallet or sign a transaction, it is not us.

Why we process your information, and on what basis

• To reply to you. We use your details to answer the enquiry, scope the work, prepare a proposal and, if it goes ahead, run the engagement. Where GDPR or UK GDPR applies, the legal basis is our legitimate interest in responding to an enquiry you initiated, and where a contract follows, performance of that contract.
• To keep the site working and secure. Server logs are processed on the basis of our legitimate interest in running a functioning, non abused website.
• To measure the site. Analytics is processed on the basis of consent where your jurisdiction requires it, and otherwise on our legitimate interest in understanding aggregate usage.
• To meet legal obligations. Where we are required to retain records, for example for tax or accounting purposes, we process on the basis of legal obligation.

Who we share it with

A short list, and it stays short. Google, as the provider of Google Analytics. Our email and hosting providers, which process data on our instructions to deliver messages and serve the site. Where an engagement begins, the sibling Orca division working on your project. Professional advisers and authorities where we are legally required to disclose.

Nobody else. We do not sell personal information, we do not share it with data brokers, list vendors or advertising networks, and we do not add enquiry contacts to a marketing list you did not ask to join.

Retention

Enquiries are kept while we are in an active conversation or relationship with you, and for a reasonable period afterwards so we can answer follow up questions and meet record keeping obligations. Project records are kept for the period our accounting and professional obligations require. Server logs are kept for a short operational window and then rotated. Analytics data is retained according to the retention setting configured in the Google Analytics property, after which Google deletes user level and event level data automatically. You can ask us to delete your enquiry sooner and we will, subject to anything we are legally required to keep.

International transfers

We are based in the United States and our providers may process data in the United States and other countries, so if you are in the UK, the European Economic Area or another restricted jurisdiction your information will be transferred outside your country. Where a safeguard is required, transfers are made under mechanisms such as the European Commission standard contractual clauses, the UK international data transfer addendum, or a provider's participation in an approved framework.

Your rights

GDPR and UK GDPR

If you are in the EEA or the UK you have the right to access the personal data we hold about you, to have inaccurate data rectified, to have data erased, to restrict processing, to receive your data in a portable format, and to object to processing carried out on the basis of legitimate interest. Where processing rests on consent, you can withdraw that consent at any time without affecting the lawfulness of what happened before. You also have the right to complain to your national supervisory authority, and in the UK to the Information Commissioner's Office.

California residents

Under the CCPA as amended by the CPRA, California residents have the right to know what personal information we collect, use and disclose, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information, and not to be treated differently for exercising any of these rights. For clarity: we do not sell personal information and we do not share personal information for cross context behavioral advertising, as those terms are defined in that legislation. There is therefore nothing to opt out of, but every other right applies and we honor it.

To exercise any right, contact us using the details below. We verify a request by replying to the address we hold for you and asking for enough detail to locate your records. We do not charge for this.

Opting out of Google Analytics

Three ways. Install the Google Analytics opt out browser add on published by Google, which stops the analytics script sending data from that browser. Block or delete cookies for this site in your browser settings. Or use a browser or extension that blocks analytics scripts. Nothing here breaks if you do.

Cookies

This site uses cookies for analytics as described above, and may use a strictly necessary cookie to remember a preference such as a dismissed notice. We do not run advertising cookies. Every mainstream browser lets you view, block and delete cookies under privacy or site settings.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has submitted information here, tell us and we will delete it.

Security

The site is served over HTTPS, form submissions travel over an encrypted connection, access to enquiry data is limited to staff who need it, and our providers are chosen partly on their security posture. Being honest about the limit: no method of transmission over the internet and no method of electronic storage is perfectly secure. We cannot guarantee absolute security, only reasonable current measures.

Changes to this policy

If this policy changes we will update the effective date at the top of this page, and material changes will be described here rather than quietly folded in. Continued use of the site means the current version applies.

Contact us

For any privacy question, or to exercise a right described above, email info@orcaweb3.io or use the form at orcaweb3.io/contact. Orca Agency is on 800.274.6775.

Legal notice: this policy is published for general information about our data practices and does not constitute legal advice. Privacy obligations vary by jurisdiction and by how a business operates. Have qualified counsel review this document against your own circumstances before relying on it.