1. Scope of this policy
This Privacy Policy applies to the Oriko website, demo bookings, early-access forms, support requests, documentation, communications and Oriko product services. It does not replace a written data processing agreement, customer agreement or platform agreement where one applies.
Oriko is built in South Africa and is designed to support privacy-conscious, first-party data use. We aim to process personal information lawfully, minimally and securely.
2. Our role under privacy law
Website and sales interactions
When you visit the website, book a demo, join early access or contact Oriko, Oriko generally acts as the responsible party for that personal information.
Customer product data
When a customer uses Oriko to process customer events, platform data, reports or audiences, Oriko generally acts as an operator processing that data on the customer's instructions.
The customer remains responsible for the lawfulness of the personal information they collect, upload, connect or instruct Oriko to process.
3. Information we collect
| Contact details | Name, email address, company name, role, phone number and information you submit through forms. |
|---|---|
| Demo bookings | Calendly booking details, meeting time, guest emails, notes and related calendar metadata. |
| Website data | Device, browser, page activity, approximate location, referral source, IP address and cookie data. |
| Product data | First-party events, customer identifiers, orders, platform spend, campaign data, reports, audiences and connected platform metadata. |
| Support data | Messages, troubleshooting details, diagnostics, feedback and files you choose to share with us. |
We ask customers not to send special personal information, payment card information, government identity numbers, health information, children's data or other high-risk information unless Oriko has agreed in writing.
4. How we use information
We use personal information to:
- provide, secure, monitor and improve the website and services;
- respond to enquiries, demo requests and support messages;
- create accounts, manage access and maintain workspaces;
- connect platforms, process events, generate reports and power Oriko product features;
- send service updates, onboarding messages and important administrative notices;
- analyse website and product usage so we can improve Oriko;
- protect against fraud, misuse, security threats and unlawful activity;
- comply with legal, tax, accounting and regulatory obligations.
Where required, we rely on consent. We may also process information where necessary to provide services, perform a contract, comply with law, protect legitimate interests or follow a customer's lawful instructions.
5. Customer data inside Oriko
Oriko helps customers understand marketing performance by connecting first-party events, advertising data, customer journeys, commerce data, CRM data, reports and audiences.
Customers are responsible for their privacy notices, consent mechanisms, platform permissions and legal basis for collecting and sending data to Oriko. Oriko processes that customer data to provide the agreed services and does not sell customer data.
Oriko may use aggregated, anonymised or de-identified information to improve the product, understand performance, develop benchmarks and operate the business, provided it does not identify a customer, end-user or individual.
6. When we share information
We may share information with:
- service providers who help with hosting, storage, analytics, email, scheduling, support and security;
- connected platforms you authorise, such as advertising, commerce, CRM, analytics and data platforms;
- professional advisers, auditors, insurers or legal representatives;
- authorities, regulators or courts where required by law or to protect rights and safety;
- a buyer, investor or successor if Oriko is involved in a merger, acquisition, financing or sale of assets.
Some providers may process information outside South Africa. Where this happens, Oriko aims to use appropriate safeguards and reputable providers.
7. Security
Oriko uses reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure. These measures may include access controls, encryption, secure credentials, monitoring, logging, retention controls and vendor review.
No system is perfectly secure. You are responsible for securing your own devices, accounts, credentials, connected platforms and user permissions.
8. Retention
We keep personal information for as long as reasonably needed to provide services, run the business, comply with law, resolve disputes, enforce agreements and maintain security. Retention periods may vary depending on the type of data, customer instructions, legal obligations and operational needs.
Where appropriate, Oriko may delete, anonymise or aggregate information when it is no longer needed.
9. Your privacy rights
Depending on applicable law, you may have the right to request access to personal information, correction, deletion, objection to processing, restriction of processing, withdrawal of consent and information about third parties who received your personal information.
To make a request, contact hello@oriko.co.za. We may need to verify your identity before responding. If your information is processed by Oriko on behalf of a customer, we may direct your request to that customer.
You may also contact or lodge a complaint with the Information Regulator in South Africa through its official channels.
10. Children
Oriko is not intended for children and should not be used to knowingly collect children's personal information. If you believe a child has provided personal information to Oriko, please contact us.
11. Changes and contact
Oriko may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.
Privacy questions can be sent to hello@oriko.co.za.