Orien.

Privacy Policy

Last updated: 1 July 2025

1. Introduction

Orien(“Orien”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our lifestyle management services or visit our website.

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000and its associated rules, as applicable in India. Orien is the Data Fiduciary for the purposes of this policy.

Please read this policy carefully. If you have any questions, contact us using the details in Section 10.

2. What Data We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide

  • Identity data — your name, date of birth, and household composition.
  • Contact data — WhatsApp number, phone number, and email address.
  • Location data — your home address and any other addresses relevant to your tasks.
  • Financial data — billing information, payment method details (processed via our secure payment provider; we do not store card numbers).
  • Lifestyle & preferences — dietary requirements, interests, preferences, and other information you share to help us complete your tasks.
  • Task data — details of requests, instructions, and conversations via WhatsApp.

2.2 Information We Collect Automatically

  • Usage data — pages visited on our website, referring URLs, browser type, and device information.
  • Cookies — see Section 8 for our cookies policy.

2.3 Information from Third Parties

We may receive information from third-party service providers (e.g., restaurants, medical clinics, tradespeople) where needed to fulfil a task you have requested.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Service delivery — to fulfil tasks and manage your requests on your behalf. (Legal basis: performance of a contract.)
  • Account management — to manage your subscription, billing, and communication preferences. (Legal basis: performance of a contract.)
  • Customer support — to respond to enquiries, complaints, and feedback.(Legal basis: legitimate interests.)
  • Service improvement — to analyse usage patterns and improve our services. (Legal basis: legitimate interests.)
  • Legal compliance — to meet our legal and regulatory obligations.(Legal basis: legal obligation.)
  • Marketing — to send you service updates or offers that may interest you. We will only do this with your consent, which you can withdraw at any time.(Legal basis: consent.)

4. We Never Sell Your Data

We will never sell, rent, trade, or otherwise transfer your personal data to any third party for their own marketing or commercial purposes — ever. Your data exists solely to help us deliver a better service to you. It is not a product. This commitment applies regardless of any business changes or commercial pressures and is a core principle of how Orien operates.

5. How We Share Your Data

We share your data only when strictly necessary to fulfil your requests or meet legal obligations. We never share data for advertising or marketing by third parties. The limited circumstances under which we may share your data are:

  • Service providers — third parties we engage to carry out your tasks (e.g., restaurants, tradespeople, travel agents). We share only the minimum data necessary to fulfil your request.
  • Technology partners — our payment processor, CRM platform, and communication tools. All partners are bound by data processing agreements.
  • Legal requirements — where required by law, court order, or regulatory authority.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

6. Cross-Border Data Transfers

We primarily store and process your data within India. Where any data is transferred to or processed by third-party tools or platforms outside India (e.g., cloud infrastructure or communication services), we ensure such transfers are carried out in compliance with the DPDP Act, 2023 and any applicable government notifications regarding permitted geographies.

7. Data Retention

We retain your personal data only for as long as necessary to provide our services and meet our legal obligations:

  • Active subscriber data — held for the duration of your subscription plus 6 years (for legal and tax purposes).
  • Task and communication data — retained for 2 years after your last active task.
  • Website analytics data — retained for 13 months.

Once the retention period expires, we securely delete or anonymise your data.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

  • Access — request a summary of the personal data we hold about you and how it is being processed.
  • Correction & Completion — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to legal obligations.
  • Grievance Redressal — raise a complaint with our Grievance Officer (see Section 11). We will respond within the timelines prescribed under applicable law.
  • Nominate — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
  • Withdraw consent — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us via WhatsApp or email (details in Section 10). If your grievance is not resolved to your satisfaction, you may escalate your complaint to the Data Protection Board of India once it is constituted under the DPDP Act.

9. Cookies

Our website uses cookies to:

  • Ensure the site functions correctly (strictly necessary cookies).
  • Analyse traffic and improve user experience (analytics cookies — only with your consent).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect site functionality.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted communications, access controls, and regular security reviews.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the Data Protection Board of India as required by law.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

For formal data protection enquiries, please mark your message “Data Protection Request” so it can be handled promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via WhatsApp or email at least 14 days before they take effect. The “last updated” date at the top of this page will always reflect the most recent revision.