Privacy & cookies · Updated 14 September 2026
What happens to the information you send us
Your enquiry goes to the founders so we can understand what you need and respond. Here is what we collect, how we use it and the choices you have.
What the form asks for
Your name, email and a short message. Organisation, website, service selection and additional notes are optional. Do not include sensitive personal information or confidential employee or client material.
Why we use your information
We use your consent to review and respond to your enquiry, and where applicable take steps towards an engagement at your request. Necessary correspondence supports the relationship and legal obligations. Sending the form does not subscribe you to marketing or create a delivery commitment.
Who may handle it
Enquiries go to the existing OrdoState enquiry system and founder dashboard, operated from Indonesia. Authorised people and hosting, security and communications providers support the service. Cloudflare delivers and protects the website across its international network; Google processes analytics information only after consent and may process it internationally. Indonesia is our operating base, not a promise that all providers store everything there.
What must stay out of analytics
Names, email addresses, organisation names and free-text answers must not be sent to website analytics or advertising tools. Campaign attribution, consent choices and lead measurement may be used only under the approved privacy and consent design.
Privacy contacts and retention
OrdoState is operated by Andrei Lychou and Ali Kurtze as individuals based in Indonesia. Contact [email protected] and [email protected] for privacy questions or access, correction and deletion requests. Unsuccessful enquiries are retained for 12 months after the last contact, then deleted unless an active engagement or legal obligation requires retention. The founders review retention monthly. Client records follow their contract and applicable legal requirements.
Cookies and your choices
Essential storage remembers cookie preferences for up to 180 days and the service selected during your visit. Google Analytics and first-party advertising attribution are separately controlled and off until accepted. Google Analytics cookies are configured to expire after 180 days. Use Cookie settings at the bottom of any public page to change your choice. Rejecting optional storage does not prevent enquiries. With analytics consent, Microsoft Clarity records masked page views and interactions; enquiry forms are masked. Recordings are excluded when URL or referrer parameters could contain private details. Clarity cookies can last up to one year. Google Tag Manager manages consent-gated Clarity and advertising attribution. Google Ads attribution requires separate advertising consent. Changing or withdrawing consent restarts the page and removes cookies for the withdrawn category.
Indonesia and UK visitors
Applicable Indonesian data-protection requirements govern personal-information handling. Where UK law applies, rights may include access, correction, erasure, restriction, objection, portability and complaints to the ICO. Future UK incorporation does not determine whether those rights apply today.
Enquiries through AI assistants
Your assistant can send the contact details and short enquiry summary you approve. The submitted enquiry is stored in the founder dashboard and its details are emailed to both founders. We record the selected assistant, language, submission channel, contact consent and a request reference to prevent duplicates. We do not request full conversation history. The same enquiry purpose, access limits and retention schedule apply.