Privacy Policy

16/05/2026

PRIVACY POLICY

Legal Entity: ServiceOrca, Inc.
Business Address: 651 N Broad St, Middletown, Delaware, USA
Contact: [email protected] | +44 74 1151 9320
Last Updated: 16 May 2026

IMPORTANT NOTICE

ServiceOrca, Inc. ("we," "our," "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have in relation to it. It applies to all visitors, registered users, and Service Providers who access or use the ServiceOrca platform at serviceorca.com (the "Platform").

Please read this policy carefully. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. WHO WE ARE

ServiceOrca, Inc. is a corporation incorporated in the State of Delaware, USA, operating an online promotional directory that connects Service Providers with Users worldwide. For the purposes of applicable data protection law, ServiceOrca, Inc. is the data controller in respect of your personal information.

Data Protection Officer (DPO) / Privacy Contact:
Email: [email protected]

For GDPR-related enquiries, please include "GDPR Request" in the subject line.
For LGPD-related enquiries, please include "LGPD Request" in the subject line.
For CCPA-related enquiries, please include "CCPA Request" in the subject line.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

For all registered Users and Service Providers:

Full name
Email address
Password (stored in encrypted form — we never store plain-text passwords)

For Service Providers (additional information):

Company name or individual professional name (displayed publicly)
Business contact information including phone number and email (displayed publicly)
Service addresses and locations
Service descriptions, titles, and pricing
Professional photographs and service images
Business hours and availability
Professional licences and certifications (where applicable)

2.2 Information Collected Automatically

When you use the Platform, we automatically collect certain technical information, including:

IP address
Browser type and version
Device type and operating system
Pages visited and time spent on the Platform
Access times and referring URLs

When you visit a Service Provider's page, we may log your IP address solely to detect abuse, such as repeated or fraudulent page views. This data is used exclusively for security and fraud prevention, is not linked to any personally identifiable profile, and is not shared with Service Providers or third parties.

IP addresses collected for fraud prevention may be retained for an extended period to detect and block abusive behaviour. These records are not linked to user accounts.

2.3 Location Information

We may request your approximate current location to show nearby Service Providers. Location sharing is entirely optional — you may manually select your location on the map instead. We do not collect precise device location without your explicit consent.

2.4 Third-Party Authentication

When you sign in using Google or Apple:

We receive only basic profile information (name and email address) from these services
We do not access any additional data from your Google or Apple accounts
Your use of these authentication services is subject to their respective privacy policies

2.5 Payment and Wallet Information

When you deposit funds to your Wallet to purchase Promotional Credits on the Platform, payments are processed exclusively by Stripe, Inc., our authorised third-party payment processor. We do not collect, store, or have access to your card number, CVV, or any raw payment card data.

We retain the following transaction records on our systems:

The amount deposited and the date of each transaction
Your current Credit balance
A record of Credits spent on Promotional Features

These records are retained for accounting, fraud prevention, and legal compliance purposes. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

3. HOW WE USE YOUR INFORMATION

3.1 Platform Functionality

To create and manage your Account
To display Service Provider Listings to Users
To enable location-based service discovery
To facilitate direct communication between Users and Service Providers
To process Credit deposits and Promotional Feature purchases
To maintain your Wallet balance and transaction history
To detect and prevent fraudulent or abusive activity on the Platform

3.2 Communications

To send account-related notifications and security alerts
To notify you about reviews and ratings on your Listing
To confirm promotional Credit purchases and Wallet transactions
To send occasional marketing communications about Platform features (with opt-out option — see Section 7)

3.3 Analytics and Platform Improvement

To analyse Platform usage and improve our services and user experience
To monitor Platform performance and security
To ensure accurate and fair view counts by detecting repeated or fraudulent visits using anonymised IP tracking

Important: All analytics tracking — including Google Analytics and Yandex Metrika — is activated only after you have accepted cookies via our cookie consent banner. If you reject cookies, no third-party analytics data is collected about your visit. See Section 9 for full details.

4. HOW WE SHARE YOUR INFORMATION

4.1 Publicly Visible Information

The following Service Provider information is publicly visible on the Platform to all visitors:

Company or professional name
Service descriptions and pricing
Business contact information
Business addresses and locations
Photos and service images
Business hours and availability
Reviews and ratings received

For Users, only the name associated with a posted review is publicly visible. All other User information remains private.

4.2 Third-Party Service Providers

We share limited information with trusted third-party service providers strictly for the purposes described in this policy:

Stripe, Inc. — payment processing for Credit deposits
Google Analytics — anonymised usage analytics (only after cookie consent)
Google Maps — location-based service discovery
Google Sign-In — optional authentication
Apple Sign-In — optional authentication
Yandex Metrika — anonymised usage analytics (only after cookie consent)
Email service providers — delivery of account notifications and marketing communications
DigitalOcean — secure cloud hosting of Platform data

4.3 What We Do Not Do

We do not sell your personal information to any third party
We do not share your information for third-party marketing purposes
We do not provide your information to data brokers
We do not share payment card data — this is handled exclusively by Stripe

4.4 Legal Disclosure

We may disclose your information where required to do so by law, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of ServiceOrca, our users, or the public.

5. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of sensitive data in transit and at rest
Encrypted storage of passwords (we never store plain-text passwords)
Secure cloud hosting infrastructure via DigitalOcean
Access controls and authentication requirements
Regular security assessments

However, no method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

6. YOUR PRIVACY RIGHTS

6.1 General Rights (All Users)

Regardless of where you are located, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of your account and associated personal data
Opt out of marketing communications at any time
Withdraw consent for location services

6.2 GDPR Rights (European Union and EEA Residents)

If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation (GDPR):

Right to Portability: Request a copy of your personal data in a structured, machine-readable format
Right to Restriction: Request that we restrict the processing of your data in certain circumstances
Right to Object: Object to processing based on our legitimate interests
Right to Withdraw Consent: Withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal
Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at [email protected] with "GDPR Request" in the subject line.

6.3 CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of the personal information we have collected, used, disclosed, or sold about you
Right to Delete: Request deletion of personal information we have collected from you
Right to Opt-Out of Sale: Opt out of the sale of your personal information. Note: We do not sell personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise these rights, contact us at [email protected] with "CCPA Request" in the subject line.

6.4 LGPD Rights (Brazilian Residents)

If you are located in Brazil, you have the following rights under the Lei Geral de Proteção de Dados (LGPD — Law No. 13,709/2018):

Right of Confirmation and Access: Confirm whether we process your personal data and request access to it
Right to Correction: Request correction of incomplete, inaccurate, or outdated data
Right to Anonymisation, Blocking, or Deletion: Request anonymisation, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD
Right to Portability: Request the transfer of your data to another service provider
Right to Deletion: Request deletion of personal data processed with your consent
Right to Information: Obtain information about public and private entities with which we have shared your data
Right to Object: Object to processing carried out on grounds other than your consent, where non-compliant with the LGPD
Right to Review Automated Decisions: Request review of decisions made solely on the basis of automated processing of personal data
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected] with "LGPD Request" in the subject line.

7. MARKETING COMMUNICATIONS

7.1 What We May Send

Account notifications and security alerts
Review and rating notifications
Wallet and Credit transaction confirmations
Occasional marketing emails about Platform features and updates

7.2 How to Opt Out

You may opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing email
Contacting us at [email protected]
Updating your preferences in your Account settings

Please note: You cannot opt out of essential service communications directly related to your Account, your Wallet, or your use of the Platform.

8. DATA RETENTION

8.1 Account Data

We retain your personal information for as long as your Account is active or as necessary to provide our services. When you request deletion of your Account:

We will delete your personal information promptly
Public content such as reviews may be anonymised rather than deleted, to maintain the integrity of the Platform
Some information may be retained for a limited period where required by law, for fraud prevention, or to resolve disputes

8.2 Payment and Transaction Records

Transaction records related to Credit deposits and Wallet activity are retained for as long as required by applicable accounting and tax laws, which may extend beyond Account closure.

8.3 Security Data

IP addresses collected for fraud prevention and security purposes may be retained for an extended period to detect and block abusive behaviour. These records are not linked to user accounts or personal profiles.

8.4 General Retention Principle

We retain personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements.

9. COOKIES AND TRACKING

9.1 Our Cookie Consent Approach

We operate a consent-first approach to cookies. When you first visit the Platform, you are presented with a cookie consent banner. Non-essential cookies and all third-party tracking tools — including Google Analytics and Yandex Metrika — are only activated after you explicitly accept cookies. If you reject cookies, only essential cookies necessary for the Platform to function are set, and no analytics or tracking data is collected about your visit.

9.2 Types of Cookies We Use

Essential Cookies (always active):

Login session management — to keep you logged in as you navigate the Platform
Account authentication — to verify your identity securely
Site preference cookies — to remember your language and location settings
Platform functionality — required for core features to work correctly

Analytics Cookies (only after cookie consent):

Google Analytics — tracks anonymised usage data such as pages visited, time on site, and traffic sources, to help us understand how the Platform is used and improve it
Yandex Metrika — tracks similar anonymised usage data for platform improvement purposes

9.3 Managing Cookies

You can control and manage cookies in the following ways:

Via our cookie consent banner when you first visit the Platform
Through your browser settings — most browsers allow you to refuse or delete cookies. Refer to your browser's help documentation for instructions.

Please be aware that disabling essential cookies will affect the functionality of the Platform and may prevent you from accessing certain features, including logging in.

For more information about the specific cookies we use, please refer to our Cookie Policy.

10. CHILDREN'S PRIVACY

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a person under 18, we will take immediate steps to delete that information. If you believe we may have collected information from a child under 18, please contact us at [email protected].

11. INTERNATIONAL DATA TRANSFERS

ServiceOrca, Inc. is based in the United States. If you are accessing the Platform from outside the United States — including from the European Union, United Kingdom, or Brazil — your personal information will be transferred to and processed in the United States and potentially other countries where our service providers operate.

We ensure that appropriate safeguards are in place for all international transfers of personal data, including:

Standard contractual clauses approved by the European Commission (for EU/EEA transfers)
Adequacy decisions by relevant data protection authorities where applicable
Other legally recognised transfer mechanisms under applicable data protection law

12. LEGAL BASIS FOR PROCESSING (GDPR AND LGPD)

Where the GDPR or LGPD applies, we process your personal information on the following legal grounds:

Consent: Where you have provided explicit consent, for example for analytics cookies or marketing communications. You may withdraw consent at any time.
Contract: Where processing is necessary to perform our contract with you, such as managing your Account, processing Credit deposits, and providing access to Promotional Features.
Legitimate Interests: Where processing is in our legitimate interests and not overridden by your rights, such as fraud prevention, platform security, and service improvement.
Legal Obligation: Where processing is necessary to comply with applicable laws and regulations, such as retaining transaction records for tax purposes.

13. THIRD-PARTY LINKS

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites before providing them with any personal information. This Privacy Policy applies solely to information collected by ServiceOrca, Inc. through the Platform.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Post the updated policy on the Platform with a new "Last Updated" date
Send email notification to registered users for significant changes

Your continued use of the Platform after any changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

15. CONTACT US

For any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

ServiceOrca, Inc.
651 N Broad St, Middletown, Delaware, USA
General enquiries: [email protected]
Privacy / DPO contact: [email protected]
WhatsApp: +44 74 1151 9320

By using ServiceOrca, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.