Privacy Policy

    Last updated: 7 April 2026

    1. Introduction

    Origin Sourcing ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

    We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    2. Information We Collect

    We may collect the following types of information:

    • Contact Information: Name, email address, phone number, and company name when you submit our contact form.
    • Message Content: The content of messages you send through our contact form.
    • Technical Data: IP address, browser type, and device information for security and analytics purposes.
    • Cookies: We use essential cookies to ensure our website functions correctly. See our Cookie Policy section below.

    3. How We Use Your Information

    We use the information we collect to:

    • Respond to your inquiries and provide requested services
    • Communicate with you about our services
    • Improve our website and services
    • Comply with legal obligations
    • Protect against fraudulent or illegal activity

    4. Legal Basis for Processing

    Under UK GDPR, we process your data based on:

    • Consent: When you submit our contact form, you consent to our processing of your data.
    • Legitimate Interests: For improving our services and website security.
    • Legal Obligation: When required by law.

    5. Third-Party Services

    We use the following third-party services to process your data:

    • Web3Forms: For sending email notifications when you submit our contact form. Your contact information is transmitted securely to enable email delivery.
    • Hosting Provider: Our website and database are hosted on secure, GDPR-compliant servers.

    These third parties are required to protect your data in accordance with applicable data protection laws.

    6. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

    • Contact form submissions: Retained for up to 3 years or until you request deletion.
    • Technical data: Retained for up to 12 months for security purposes.

    7. Your Rights

    Under UK GDPR, you have the following rights:

    • Right of Access: Request a copy of your personal data.
    • Right to Rectification: Request correction of inaccurate data.
    • Right to Erasure: Request deletion of your personal data.
    • Right to Restrict Processing: Request limitation of data processing.
    • Right to Data Portability: Request transfer of your data to another service.
    • Right to Object: Object to processing based on legitimate interests.
    • Right to Withdraw Consent: Withdraw your consent at any time.

    To exercise any of these rights, please contact us at info@originsourcing.co.uk.

    8. Cookie Policy

    Our website uses essential cookies that are necessary for the website to function properly. These cookies do not collect personal information and cannot be disabled.

    We do not use tracking cookies or third-party analytics that would require your consent.

    9. Data Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest.

    10. International Transfers

    Your data may be transferred to and processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

    12. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us:

    You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.