LegalGlobal privacy framework

Global Privacy Notice

How Oridian handles personal information across its corporate website and business relationships, and where product-specific privacy terms begin.

Effective date
14 August 2026
Last updated
31 August 2026
Version
1.1
At a glance

The operating principles behind this notice.

01

No data brokerage

Oridian does not operate as a data broker and does not sell personal information for monetary consideration.

02

Marketing is a choice

Submitting an inquiry does not subscribe a person to marketing. Subscriptions remain separate and optional.

03

Tracking is controllable

Optional analytics, advertising and functional technologies are governed through Privacy Choices.

04

One privacy contact

Privacy questions and rights requests can be sent to legal@oridiangroup.com.

On this page

Who we are and what this notice covers

Oridian Group S.A.S. de C.V. ("Oridian", "we", "us" or "our") is established in El Salvador. This Global Privacy Notice describes how Oridian handles personal information when people visit the corporate website, contact us, or interact with us in a business or professional capacity.

This notice covers the corporate website, inquiries, meetings, demonstrations, business contacts, marketing preferences and related corporate records. Products, onboarding workflows, employment processes and customer-controlled processing may require additional privacy notices or contractual data-processing terms.

Information we may collect and where it comes from

The information depends on how a person interacts with Oridian. Required form fields should be limited to what the interaction genuinely needs; optional fields remain optional.

Contact and professional information
Name, email address, organization, role, country or market, and other business contact details provided directly by the person or their organization.
Inquiry and relationship records
The request, correspondence, meeting details, product interest and proportionate records used to manage the relationship.
Technical and security information
IP address, browser or device information, timestamps, referrer and request or security logs produced by the site and its infrastructure.
Optional measurement information
Usage, referral, campaign or advertising signals only when a registered technology is enabled under the applicable privacy choice.
Preference and compliance records
Privacy choices, marketing preferences, rights requests and records needed for security, legal obligations or accountability.
Public or professional sources
Business contact information from referrals or public professional sources only when Oridian actually uses it for governed business development.

How and why information may be used

Oridian may use personal information to respond to inquiries, arrange meetings or demonstrations, manage business relationships, operate and secure the website, understand site usage, manage permitted advertising, send communications a person has chosen to receive, comply with law, protect rights and security, and establish or defend legal claims.

Where applicable law requires a lawful basis, the basis may include consent, steps requested before a contract, performance of a contract, legitimate interests, a legal obligation or another basis available for the particular processing. The applicable basis depends on the jurisdiction and circumstances.

Necessary technology and optional choices

This site uses first-party storage needed to remember privacy choices. An optional functional preference can remember the selected light or dark theme. Google Analytics loads only after Analytics is enabled through Privacy Choices. No advertising technology is registered for loading.

Future optional technologies must remain blocked until their category is permitted under Oridian's global baseline. Analytics never enables Advertising, and a choice can be changed later through Privacy Choices.

Marketing remains separate from an inquiry

A person who contacts Oridian is not automatically subscribed to marketing. Newsletter or product-update subscriptions require a separate affirmative choice, and marketing messages must provide a practical way to unsubscribe or object.

One-to-one business development is governed separately from newsletter consent. Its source, jurisdiction and opt-out status must be recorded before it is scaled.

When information may be disclosed

Oridian may disclose personal information to providers that support hosting, cloud infrastructure, communications, security, customer management, analytics or advertising where enabled, and professional services. Information may also be disclosed when law requires it, to protect legal rights or security, or in a legitimate corporate transaction subject to applicable law.

Oridian does not operate as a data broker and does not sell personal information for monetary consideration. Some privacy laws may classify disclosures to advertising or measurement providers as sharing or targeted advertising; where those rules apply, the relevant choices and opt-out mechanisms must be provided.

Information may be processed across borders

Oridian is established in El Salvador, while providers supporting its operations may process information in other countries. Where applicable law restricts an international transfer, Oridian uses the safeguards or transfer mechanisms required for the relevant processing.

Retention follows purpose, law and risk

Oridian retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including managing inquiries and business relationships, maintaining security, meeting legal obligations, resolving disputes and establishing or defending legal claims. The period varies by record, relationship and applicable law.

Oridian applies technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. No method of transmission or storage is completely secure, and this statement is not an absolute guarantee.

Privacy rights and requests

Depending on applicable law and the circumstances, a person may ask about access, correction, deletion, portability, restriction, objection, withdrawal of consent, marketing opt-out or advertising choices. Requests can be sent to legal@oridiangroup.com.

Oridian may need to verify a request proportionately and may limit or deny it where applicable law permits or requires. A minimal suppression record may be retained after a marketing opt-out so the address is not added again.

Access and know
Ask what personal information Oridian holds, subject to lawful exceptions.
Correction
Ask to correct inaccurate personal information where appropriate.
Deletion or suppression
Ask for deletion, subject to legal, contractual, security and claims-related exceptions.
Object or withdraw
Object to applicable processing, withdraw consent, unsubscribe from marketing or change advertising choices.

Where this corporate notice stops

General corporate forms are not intended for health information, government-issued identification, account credentials, financial-account details or other sensitive personal information. Do not submit that information unless Oridian has specifically requested it through a designated secure workflow.

A product workflow that collects identity, tax, employment, health or other higher-impact information needs its own layered notice. Customer-controlled processing may also be governed by a data-processing agreement, and applicant information requires a separate applicant notice when Careers is activated.

The corporate website and general inquiry forms are not directed to children. Oridian does not knowingly collect personal information from children through these surfaces. If you believe a child has submitted personal information, contact legal@oridiangroup.com so the matter can be reviewed and addressed.

Current automation posture and jurisdiction activation

The corporate website does not currently use solely automated decision-making on inquiries that produces legal or similarly significant effects. Material automated decision-making must be reviewed and disclosed before activation.

El Salvador is the home-law baseline. U.S. state, Central American, EEA and UK modules activate only after their applicability, transfer, marketing, tracking and rights requirements are reviewed. This architecture does not claim blanket GDPR or CCPA compliance.

El Salvador
Home-law baseline for this notice and Oridian's current corporate website practices.
United States
Commercial acquisition is active; state-law applicability and commercial-email requirements are reviewed as scale and practices change.
Central America
Country modules activate only after a current country-specific review.
EEA and United Kingdom
Passive and prepared, not active acquisition, until territorial-scope and related controls are formally activated.

Changes remain versioned and reviewable

This notice displays its effective date and last updated date. Material changes should be communicated when appropriate, and changes to forms, vendors, purposes, tracking, markets or high-impact workflows require privacy review before release.

Privacy contact

Questions and rights requests have one accountable route.

Write to legal@oridiangroup.com. Oridian will classify the request, verify identity proportionately and determine which rights and response obligations apply.