Privacy Policy

Anduryl Limited, operating under the brand name Outrich Pro ("we", "us", "our"), is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website outrich.pro and all associated subdomains and landing pages (collectively, the "Sites").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Sites. We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date. Your continued use of the Sites after such changes constitutes acceptance of the revised policy.

The data controller responsible for your personal data is:

Anduryl Limited Operating as: Outrich Pro Email: hello@outrich.pro Website: outrich.pro

For any privacy-related inquiries, data subject requests, or complaints, please contact us at hello@outrich.pro. We will respond to your request within 30 days of receipt.

We collect information you provide directly to us, including:

• Contact information (name, email address, company name, phone number) when you complete a contact form, book a call, or communicate with us. • Business information shared during the course of our services. • Communications content when you correspond with us via email or other channels.

We also collect certain information automatically when you visit our Sites:

• Log data (IP address, browser type and version, operating system, referring URLs, pages viewed, time spent on pages, and other diagnostic data). • Device information (device type, unique device identifiers). • Cookie data and similar tracking technologies (see Section 6 below). • Analytics data collected through Google Analytics 4 and Meta Pixel (see Section 7).

We use the information we collect for the following purposes:

• To respond to your inquiries and communicate with you about our services. • To provide, operate, and maintain our Sites and services. • To improve, personalise, and expand our Sites. • To understand and analyse how you use our Sites. • To develop new products, services, features, and functionality. • To send you marketing and promotional communications (where you have given consent or where we have a legitimate interest to do so). • To process your transactions and manage your orders. • To find and prevent fraud. • To comply with legal obligations.

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and using personal information depends on the data concerned and the context in which we collect it. We rely on the following legal bases:

• Contractual necessity: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract. • Legitimate interests: We process data to pursue our legitimate business interests, provided these are not overridden by your rights and interests. This includes site analytics, fraud prevention, and service improvement. • Consent: Where we rely on your consent (e.g., for marketing emails or analytics cookies), you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal. • Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Our Sites use cookies and similar tracking technologies to enhance your experience. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use the following types of cookies:

• Strictly Necessary Cookies: Required for the Sites to function correctly. These cannot be disabled. • Analytics Cookies: Used to understand how visitors interact with our Sites (e.g., Google Analytics 4). These are only placed with your consent where required by law. • Marketing Cookies: Used to track visitors across websites to display relevant advertising (e.g., Meta Pixel). These are only placed with your consent where required by law.

You can manage your cookie preferences through our cookie settings at any time. Please note that disabling certain cookies may affect the functionality of our Sites.

We use the following third-party services that may process your data:

• Google Analytics 4 (Google LLC): Web analytics service. Data may be transferred to the United States. Google LLC is certified under the EU-US Data Privacy Framework. You can opt out via Google's opt-out browser add-on: tools.google.com/dlpage/gaoptout

• Meta Pixel (Meta Platforms, Inc.): Advertising and analytics. Data may be transferred to the United States. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

• Brevo (Sendinblue SAS): Email communication and meeting booking. Brevo processes data in accordance with GDPR. Data may be stored in the EU and/or the United States.

Each of these third parties has its own privacy policy governing how they handle your data. We encourage you to review their policies.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Contact form and inquiry data: retained for up to 3 years from last interaction. • Client contractual data: retained for 7 years to comply with tax and financial record-keeping obligations. • Analytics data: retained in accordance with the respective third-party platform's retention settings (typically 14 months for Google Analytics). • Marketing communication records: retained until you unsubscribe or for 3 years, whichever is earlier.

When data is no longer required, we securely delete or anonymise it.

If you are located in the EEA or United Kingdom, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you. • Right to Rectification: You may request correction of inaccurate or incomplete data. • Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances. • Right to Restriction of Processing: You may request that we limit the processing of your data. • Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format. • Right to Object: You may object to our processing of your data where we rely on legitimate interests. • Rights in relation to automated decision-making: You have the right not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at hello@outrich.pro. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the Garante in Italy).

Your information may be transferred to — and processed in — countries other than the country in which you reside. Specifically, our third-party service providers may process data in the United States and other jurisdictions.

Where we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission. • Adequacy decisions made by the European Commission. • Certification under recognised data privacy frameworks (e.g., EU-US Data Privacy Framework).

By using our Sites, you consent to the transfer of your information to facilities located in these countries.

Our Sites are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 18, please contact us at hello@outrich.pro.

We implement appropriate technical and organisational security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no electronic transmission or storage system is completely secure, and we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the appropriate supervisory authority and, where required, affected individuals in accordance with applicable law.

Our Sites may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Anduryl Limited (Outrich Pro) Email: hello@outrich.pro Website: outrich.pro

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.