← Back to Home

Privacy Policy

Last Updated: October 24, 2025

1. Introduction

OrthoArc ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orthoarc.com and use our services.

We comply with the Protection of Personal Information Act (POPIA) of South Africa and the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Fill out our contact form (name, email, phone number, company name, message)
• Subscribe to our newsletter (email address)
• Use our interactive demos and calculators
• Communicate with us via email or other channels

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Date and time of visits

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Ensure website functionality
• Analyze website traffic and usage patterns
• Prevent fraud and spam (Google reCAPTCHA)
• Remember your preferences

For detailed information about cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the collected information for:

• Service Delivery: Responding to your inquiries, providing quotes, and delivering services
• Communication: Sending newsletters, updates, and marketing materials (with your consent)
• Improvement: Analyzing website performance and improving user experience
• Security: Protecting against fraud, spam, and security threats
• Legal Compliance: Meeting legal and regulatory requirements

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: You have given clear consent for us to process your data for specific purposes
• Contract: Processing is necessary to fulfill a contract with you
• Legal Obligation: Processing is necessary to comply with the law
• Legitimate Interest: Processing is necessary for our legitimate business interests

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who help us operate our website and provide services (e.g., email services, analytics, hosting)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Secure servers and databases
• Access controls and authentication
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary:

• Contact Form Data: 3 years after last contact
• Newsletter Subscribers: Until you unsubscribe
• Analytics Data: 26 months (anonymized after 14 months)
• Legal Requirements: As required by applicable laws

8. Your Rights

Under POPIA and GDPR, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service
• Object: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at: [email protected]

9. International Data Transfers

Your information may be transferred to and processed in countries outside South Africa. We ensure appropriate safeguards are in place to protect your data in accordance with POPIA and GDPR requirements.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Website: orthoarc.com
• Address: Johannesburg, Gauteng, South Africa

14. Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with:

• South Africa: Information Regulator (inforegulator.org.za)
• EU/EEA: Your local data protection authority

This Privacy Policy was last updated on October 24, 2025 and is effective immediately.