1. Introduction
OREN ("we", "us") operates OREN at https://oren.co.za. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our Service.
We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of Republic of South Africa, and other applicable laws. By using the Service, you acknowledge this Policy.
2. Responsible party
For purposes of POPIA, the responsible party is OREN. For privacy enquiries or to exercise your rights, contact:
Email: hello@contact.oren.co.za
3. Information we collect
Account and profile data: name, email address, password (stored securely by our authentication provider), company name, address, phone, VAT number, and preferences you provide in settings.
Business data you enter: customer and supplier details, quotes, invoices, line items, and files you upload (e.g. logos).
Technical and usage data: IP address, browser type, device information, log data, and actions within the Service (e.g. sign-in times) for security, support, and service improvement.
Communications: messages you send to support and emails we send relating to your account.
4. Why we use your information
We process personal information for purposes including:
- Providing, operating, and maintaining the Service.
- Authenticating users and securing accounts.
- Sending transactional emails (e.g. confirmations, invoices, team invites).
- Customer support and responding to enquiries.
- Complying with legal obligations and enforcing our Terms.
- Analytics and improvement of the Service (aggregated where possible).
Our lawful bases under POPIA include consent (where required), performance of a contract with you, and legitimate interests that are not overridden by your rights (such as security and fraud prevention).
6. Cross-border transfers
Some processors may store or process data outside Republic of South Africa. Where required, we take reasonable steps to ensure appropriate safeguards (such as contractual clauses or provider certifications) are in place.
7. Retention
We retain personal information for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion subject to exceptions (e.g. billing records we must keep for tax purposes).
8. Security
We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and row-level security in our database. No method of transmission or storage is completely secure; please use a strong, unique password.
9. Your rights
Subject to POPIA and applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion, subject to lawful retention requirements.
- Object to certain processing or withdraw consent where processing is consent-based.
- Lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, email hello@contact.oren.co.za. We may need to verify your identity before responding.
Information Regulator (South Africa): www.justice.gov.za/inforeg
11. Children
The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal information from children.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated date. Material changes may be communicated by email or in-app notice.
13. Contact
OREN
Email: hello@contact.oren.co.za