Privacy Policy
Last Updated: September 3, 2026
Ordina Labs ("Ordina Labs," "we," "us," or "our") respects your privacy and is committed to protecting the personal information and personal data you provide to us.
This Privacy Policy explains how we collect, use, disclose, store, protect and otherwise process personal information when you:
Visit our website at https://ordinalabs.com/
Submit a form or request information from us
Book a discovery, strategy, offboarding or other consultation call
Communicate with us
Become a client of Ordina Labs
Use services, systems or platforms that we build, configure, manage or support for you
Otherwise interact with us in connection with our services.
Ordina Labs provides GoHighLevel development and implementation, CRM systems, automation, AI systems, websites and funnels, integrations, APIs, and related digital services..
1. Who We Are
Ordina Labs is the organisation responsible for the processing of personal information described in this Privacy Policy.
If you have questions about this Privacy Policy or how we handle personal information, you can contact us using the details above.
2. Information We Collect
Depending on how you interact with us, we may collect the following categories of information.
Information You Provide Directly
This may include:
Name
Email address
Telephone number
Company name
Job title or role
Business website
Business requirements
Information submitted through discovery or consultation forms
Information about your current systems, software and technology
Project requirements and specifications
Communications and correspondence with our team
Information provided during meetings and consultations
Billing and payment information where applicable
Information necessary to deliver our services.
Information Collected Automatically
When you visit our website, we may automatically collect certain technical and usage information, including:
IP address
Browser type
Device type
Operating system
Approximate location
Pages viewed
Referring website
Date and time of visits
Interactions with our website
Other information collected through cookies and similar technologies
Information From Third Parties
We may receive information from third parties where appropriate, including:
Scheduling and booking platforms
CRM platforms
Payment providers
Analytics providers
Advertising platforms
Integration platforms
Communication platforms
Business partners
Publicly available business information.
We only use information obtained from third parties where we have a lawful basis or otherwise have permission to do so.
3. How We Use Your Information
We may use personal information for the following purposes:
Responding to enquiries
Scheduling and managing consultations
Understanding your business requirements
Preparing business strategies and proposals
Delivering and managing projects
Configuring GoHighLevel systems
Building websites, funnels, automations and integrations
Providing AI and automation services
Communicating with clients
Managing our client relationships
Processing payments
Providing customer support
Testing and quality assurance
Maintaining the security and reliability of our systems
Improving our services and website
Sending relevant business communications
Sending marketing communications where permitted by applicable law
Preventing fraud, abuse or security incidents
Complying with legal and regulatory obligations
Establishing, exercising or defending legal claims
Carrying out other purposes disclosed to you at the time information is collected.
We do not sell personal information as a business model.
4. Legal Bases for Processing
Where laws such as the UK GDPR apply, we process personal data only where we have an appropriate lawful basis.
Depending on the circumstances, this may include:
Contract
We may process information where it is necessary to provide services you have requested or to take steps before entering into a contract with you.
Legitimate Interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Examples may include operating our website, managing client relationships, improving our services, maintaining security and communicating with existing business contacts.
Consent
Where consent is required, we will request it before carrying out the relevant processing.
You may withdraw consent where processing is based on consent.
Legal Obligation
We may process information where necessary to comply with applicable laws, regulations, court orders or other legal obligations.
5. How We Share Personal Information
We may share personal information with carefully selected third parties where reasonably necessary to operate our business and provide our services.
These may include providers of:
CRM and customer management systems
GoHighLevel related services
Hosting and cloud infrastructure
Email and communication services
Appointment scheduling
Payment processing
Analytics
Website and funnel infrastructure
Automation and integration platforms
AI and technology services
Cybersecurity services
Professional, legal, accounting or financial services
These providers may process information on our behalf and may be located in countries other than the country where you live.
We may also disclose information:
Where required by law
To comply with legal proceedings
To protect our rights or property
To prevent fraud or security threats
Where necessary to protect the safety of individuals
In connection with a merger, acquisition, restructuring, financing or sale of some or all of our business.
We do not permit third parties to use personal information provided to us for their own unrelated purposes where we are acting as the controller or business responsible for that information, except where otherwise permitted or required by law.
6. Client Data and Customer Systems
An important distinction applies to our services.
In some projects, Ordina Labs may configure or operate systems containing information belonging to our clients or their customers.
For example, a client may provide us with access to a GoHighLevel account containing leads, customers, appointment information or other business data.
In these circumstances, the client may remain the organisation responsible for determining why and how that customer data is processed, while Ordina Labs may act as a service provider, processor or other contracted party depending on the applicable law and contractual arrangement.
Where required, we will enter into appropriate data processing or similar agreements with clients.
Clients remain responsible for ensuring that they have appropriate rights, notices, consents and lawful bases to provide personal information to Ordina Labs and to use the systems we build or configure.
7. Artificial Intelligence
Some of our services may involve artificial intelligence, conversational AI, automation or AI enabled systems.
Depending on the service, information may be processed through third party technology providers.
We will take reasonable steps to ensure that AI related processing is carried out in accordance with applicable contractual, privacy and security requirements.
Clients should not provide highly sensitive personal information to AI systems unless the relevant service has been specifically designed and approved for that purpose.
Where a project involves substantial AI processing of personal information, additional contractual terms or data processing arrangements may apply.
8. Cookies and Similar Technologies
Our website may use cookies, pixels, analytics tools and similar technologies.
These technologies may be used to:
Operate the website
Remember preferences
Understand website usage
Measure performance
Improve user experience
Understand marketing effectiveness
Support advertising where applicable.
Where applicable law requires consent for non essential cookies or similar technologies, we will request that consent before placing or using those technologies.
You may also be able to manage cookies through your browser or our cookie preference mechanism.
For UK users in particular, non essential cookies generally require appropriate user consent under applicable privacy and electronic communications rules.
9. Marketing Communications
We may send business and marketing communications where permitted by applicable law.
You can unsubscribe from marketing emails at any time by using the unsubscribe mechanism included in the communication or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending necessary transactional or service related communications, such as project updates, appointment information, invoices or other communications necessary to provide services.
Where applicable law requires prior consent for electronic marketing, we will obtain that consent before sending the relevant communications.
10. International Data Transfers
Ordina Labs operates internationally, and our service providers may be located in countries different from your own.
As a result, your personal information may be transferred to, stored in or accessed from countries including the United States and other jurisdictions.
Where applicable law requires safeguards for international transfers, we will use appropriate mechanisms, which may include contractual safeguards, adequacy decisions or other legally recognised transfer mechanisms.
For Australian individuals, our privacy practices recognise that personal information may be disclosed to overseas recipients. The Australian Privacy Principles require relevant privacy policies to address overseas disclosures and, where practicable, identify countries in which overseas recipients are likely to be located.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
Provide services
Maintain business and financial records
Resolve disputes
Enforce agreements
Comply with legal obligations
Protect our legitimate business interests.
Retention periods may vary depending on the nature of the information and the reason it was collected.
When information is no longer required, we will take reasonable steps to delete it, anonymise it or otherwise dispose of it securely, subject to applicable legal requirements.
12. Security
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.
Depending on the circumstances, these measures may include:
Access controls
Authentication mechanisms
Restricted administrative access
Secure cloud infrastructure
Encryption where appropriate
Backups
Security monitoring
Staff and contractor confidentiality obligations
Appropriate vendor controls.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
13. Your Privacy Rights
Depending on where you live and which privacy laws apply, you may have rights concerning your personal information.
These may include the right to:
Request access to personal information we hold about you
Request correction of inaccurate information
Request deletion of personal information
Request restriction of processing
Object to certain processing
Withdraw consent where processing is based on consent
Request portability of certain information
Opt out of certain marketing
Opt out of certain sale or sharing of personal information where applicable
Exercise additional rights provided by local privacy law.
We will respond to valid privacy requests in accordance with applicable law.
We may need to verify your identity before completing certain requests.
14. California Privacy Rights
If you are a California resident and the California Consumer Privacy Act applies to our processing, you may have additional rights concerning your personal information.
Depending on the circumstances, these may include rights to:
Know what personal information we collect, use and disclose
Request access to personal information
Request deletion
Request correction
Opt out of the sale or sharing of personal information
Limit certain uses of sensitive personal information
Receive equal treatment for exercising applicable privacy rights.
California law also requires certain businesses to provide information at or before the point personal information is collected and to provide mechanisms for exercising applicable rights.
We do not sell personal information for monetary consideration.
If our processing practices change in a way that constitutes "selling" or "sharing" under applicable California law, we will provide any legally required disclosures and opt out mechanisms.
To exercise applicable California privacy rights, contact:
15. United Kingdom Privacy Rights
If UK data protection law applies to you, you may have rights including access, correction, deletion, restriction, objection, portability and rights relating to automated decision making where applicable.
Where we rely on consent, you may withdraw that consent.
Our privacy information is intended to explain who we are, why we process personal data, how long we retain it and who we share it with, consistent with the transparency requirements under the UK GDPR framework.
If you believe your data protection rights have been infringed, you may also have the right to complain to the UK Information Commissioner's Office (ICO).
16. Canadian Privacy Rights
Where Canadian federal privacy law, including PIPEDA, applies to our activities, we will handle personal information in accordance with applicable requirements relating to meaningful consent, appropriate purposes, safeguards, access, correction and accountability.
Canadian privacy requirements can also depend on the province and nature of the business relationship.
Canadian individuals may contact us to request access to or correction of personal information or to raise a privacy concern.
17. Australian Privacy Rights
Where the Australian Privacy Act 1988 and Australian Privacy Principles apply to our activities, we will handle personal information in accordance with applicable requirements.
Australian individuals may have rights to request access to and correction of personal information and to make a privacy complaint.
Our privacy practices address the categories of information we collect, how we collect and hold it, purposes of use and disclosure, overseas disclosures, access and correction procedures, and complaint handling. These are among the matters required in an APP privacy policy.
18. Children's Privacy
Our services are intended for businesses and are not directed toward children.
We do not knowingly collect personal information from children where prohibited by applicable law.
If you believe that a child has provided personal information to us, please contact us so that we can assess and take appropriate action.
19. Third Party Websites
Our website and communications may contain links to third party websites, platforms or services.
We are not responsible for the privacy practices, security or content of third party websites.
We encourage you to review the privacy policies of third party services before providing them with personal information.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or business practices.
When we make material changes, we may update the "Last Updated" date and provide additional notice where required by law.
We encourage you to review this Privacy Policy periodically.
21. Contact Us
If you have questions about this Privacy Policy, want to exercise a privacy right, or wish to make a privacy complaint, contact us:
Entity: Ordina Labs
Email: [email protected]
Website: https://ordinalabs.com/
