Orrindale

Privacy Policy

Effective date: June 4, 2026. Last updated: June 4, 2026.

Summary: We collect information you submit through our match-request form and basic technical data when you visit. We share your contact details with one matched buyer for your county and never sell, syndicate, or rent your information. You have rights to access, correct, and delete your data. Contact privacy@orrindale.com to exercise them.

1. Who we are

Orrindale ("Orrindale," "we," "us," "our") is an independent matching service. We operate this website at orrindale.com. We are an independent matching service that connects homeowners considering a sale with one local real-estate investor per county. We are not a real estate agent, broker, lender, mortgage servicer, or buyer. This policy describes how we collect, use, share, and protect personal information.

2. Information we collect

2.1 Information you give us directly

When you submit our match-request form, we collect:

  • Identifiers: name, phone number, email address.
  • Property information: street address, city, state, ZIP.
  • Situation context: the situation you select (foreclosure, probate, divorce, etc.), preferred timeline, optional notes.
  • Consent records: the TCPA consent text you agreed to, the timestamp of your submission, and the page URL where you submitted (preserved for compliance with 47 U.S.C. § 227 record-keeping requirements).

If you email us directly (e.g., at hello@orrindale.com) we receive whatever you choose to send.

2.2 Information collected automatically

When you visit our site, our hosting provider and analytics tools automatically collect:

  • IP address (anonymized by our analytics provider before storage).
  • Browser type, version, language, operating system.
  • Pages visited, time spent on pages, referring URL.
  • Device type (desktop, mobile, tablet).
  • General geographic location (country and region, not precise location).

We do not use cookies, fingerprinting, or cross-site tracking. We use Google Analytics (GA4) and Vercel Analytics to understand site traffic. Google Analytics sets cookies on your device; you can block or delete them in your browser settings.

2.3 Sensitive personal information

We do not knowingly collect any of the following: Social Security numbers, financial account numbers, login credentials, government identification numbers, precise geolocation, genetic or biometric data, racial or ethnic origin, religious beliefs, sexual orientation, citizenship status, union membership, or contents of private communications. Please do not include any of this in form submissions or emails.

3. How we use your information

We use your information only for the following purposes:

  • To match you with a vetted buyer. Your match-request information is forwarded to one investor in our network for your county, if one is available. Where no matched buyer is available, we retain your submission to follow up if one becomes available, or to refer you to a HUD-approved counselor.
  • To respond to your inquiries. If you email us directly, we use your contact information to reply.
  • To comply with the law. We may use your information to respond to lawful requests, subpoenas, or court orders, or to enforce our Terms of Service.
  • To improve our service. We use aggregated, anonymized analytics to understand which pages help homeowners most and where the site needs improvement.

We do NOT use your information for advertising targeting, marketing list rental, profile-building, or any purpose unrelated to those above.

4. How we share your information

4.1 With one matched buyer

If a county-licensed investor exists for your area, we forward your submission to that one investor. The matched investor is the exclusive investor we have onboarded for your county. The matched investor is contractually obligated to (a) use your information only to contact you about the property you submitted, (b) not share your information with any third party, (c) honor any opt-out request you make, and (d) comply with TCPA, MARS Rule, FTC, and all applicable consumer protection laws. The investor's own privacy practices are covered by their own privacy policy, which you may request.

4.2 With service providers we use to operate the site

We use trusted third-party processors. Each processes only the minimum data necessary and is bound by their own privacy policy and a data processing arrangement with us:

4.3 For legal compliance

We may disclose your information when required by law — for example, in response to a subpoena, court order, government investigation, or to enforce our legal rights.

4.4 In a business transfer

If Orrindale is acquired, merged, or sells substantially all of its assets, your information may be transferred to the acquiring entity. We will notify you by email (to the address you provided) before any such transfer, and you will have the opportunity to opt out and request deletion.

4.5 What we never do

  • We never sell your personal information to outside parties. (Under California law, "sell" includes exchange for any valuable consideration; we do not do this.)
  • We never rent or lease your information to marketers.
  • We never share with multiple investors. The county-exclusive structure of our affiliated service guarantees one matched investor per county at a time.
  • We never add you to general marketing lists without explicit opt-in consent.
  • We never use your data for cross-context behavioral advertising.

5. How long we keep your information

  • Match-request submissions and TCPA consent records: 4 years from the date of submission (matches the federal TCPA statute of limitations) plus 6 months for transition. After this period, we delete or anonymize.
  • Email correspondence: 3 years from the last interaction unless required to retain longer.
  • Website analytics (anonymized): 24 months.
  • Server logs: 90 days.
  • Backups: rotated out within 90 days of the underlying data being deleted.

You may request deletion at any time (see Section 7). Where we are legally required to retain data (e.g., a pending dispute or government inquiry), we will retain only the minimum necessary and isolate it from active use.

6. How we protect your information

We implement reasonable administrative, technical, and physical safeguards including: encryption in transit (TLS 1.2+ everywhere on the site), encryption at rest at our processors, access controls (only personnel with a legitimate business need can access submission data), minimum-necessary collection, and regular security review of our service providers. No system is perfectly secure; if a breach occurs that compromises your personal information, we will notify you in accordance with applicable state breach-notification laws.

7. Your rights

7.1 Rights for all visitors

Regardless of where you live, you may:

  • Access — request a copy of any personal information we have about you.
  • Correct — request that we correct inaccurate information.
  • Delete — request that we delete your information, subject to legal retention requirements.
  • Opt out of further contact — tell us (and the matched buyer) to stop contacting you. They are required to comply.
  • Lodge a complaint with the FTC or your state attorney general.

7.2 California residents (CCPA / CPRA rights)

If you live in California, you additionally have:

  • The right to know what categories of personal information we collect, sources, purposes, and recipients.
  • The right to delete personal information we collected from you.
  • The right to correct inaccurate personal information.
  • The right to opt out of the sale or sharing of personal information. (We do not sell or share personal information as defined under CCPA.)
  • The right to limit use of sensitive personal information. (We do not collect sensitive personal information as defined under CCPA.)
  • The right to non-discrimination for exercising any of these rights.
  • The right to designate an authorized agent to act on your behalf.

We do not have actual knowledge of selling or sharing the personal information of minors under 16.

7.3 EU/UK/EEA visitors (GDPR)

We do not target our services to the EU/UK/EEA and have no physical presence there. If you visit our site from those regions, our legal basis for processing your information under GDPR is (a) your explicit consent (form submission), (b) our legitimate interest in operating the site (analytics), and (c) compliance with legal obligation (record-keeping). You have the same rights listed above, plus the right to data portability and the right to lodge a complaint with your local supervisory authority.

7.4 How to exercise your rights

Email privacy@orrindale.com with your request. We will verify your identity (by matching your email to the one on file, or by confirming details only you would know about your submission), then respond within 45 days (we may extend by an additional 45 days for complex requests, with notice). There is no charge for the first request in any 12-month period.

8. Children's privacy

Orrindale is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected information from a minor, contact us at privacy@orrindale.com and we will delete it promptly.

9. Do Not Track

Some browsers send a "Do Not Track" signal. We do not currently respond to DNT because our site does not track users for advertising in the first place — there is nothing to opt out of. We use Google Analytics (which sets cookies) and Vercel Analytics; analytics data is reviewed in aggregate.

10. International data transfers

Orrindale is based in the United States. Some of our service providers may process data in other countries. By using our site, you understand that your information may be transferred to and stored in the United States and other jurisdictions with different data protection laws than your own.

11. Updates to this policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top and, where appropriate, by emailing you (if you have submitted a match request). We will not retroactively change how we handle previously-collected data without your consent in a way that materially reduces your rights.

12. Contact

For any privacy question, request, or complaint:

If you are not satisfied with our response, you may lodge a complaint with the FTC, your state attorney general, or (for California) the California Attorney General's Privacy Enforcement office.