Privacy policy

Last updated: 2026-10-31

This policy explains what information OrderChase collects on orderchase.com, why, who processes it and how you can control it. OrderChase is in early access: the website collects requests to join the early-access list and, only with your consent, Google Analytics data.

Who is responsible

The data controller is OrderChase. For anything related to your data, including deleting it or withdrawing consent, write to privacy@orderchase.com.

What we collect and why

When you request early access we store:

• your email address;
• your answers about your store: approximate monthly orders, how often you chase suppliers, your biggest challenges and, if you add them, your store’s web address and any extra comments;
• whether you’re happy to have a short call;
• when you gave consent and which version of the consent text you agreed to;
• how you found us, if it was part of a campaign link (UTM tags) or another website (only that site’s name, never the full address).

We use this to contact you about early access and, if you agree, for a short research conversation about how you handle supplier follow-ups. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to privacy@orderchase.com; this doesn’t affect anything done before you withdrew.

We don’t sell your data, use it for advertising or share it with anyone except the service providers listed below.

Cookieless statistics

To understand whether the site works, we count anonymous events: page views, clicks on the “Request early access” buttons, starting the form and whether a submission succeeded. Each event records only its name, the page, which button was clicked, the referring site’s name and campaign tags. These statistics don’t use cookies or similar technologies, don’t store your IP address or browser details, and never include anything you type into the form. If your browser sends a Global Privacy Control or Do Not Track signal, no events are recorded.

Google Analytics (only if you accept)

If you click “Accept” in the cookie banner, we also use Google Analytics 4 to see how visitors find and use the site: which pages are viewed, where visits come from (referring site and campaign tags), clicks on the “Request early access” buttons, starting the form, and whether a submission succeeded or failed. Google Analytics is not loaded at all until you accept, and never if your browser sends a Global Privacy Control or Do Not Track signal. We never send Google your email address, store address, form answers or anything else you type.

Google Analytics sets the cookies _ga and _ga_<id> to recognise repeat visits; we set them to expire after 13 months. Google also receives your IP address and browser details in order to provide the service; Google Analytics 4 does not store IP addresses. We keep Google Analytics data for no longer than 14 months, and we have turned off Google signals, advertising features and ad personalisation. The provider is Google Ireland Limited, acting as our processor; Google may process data in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses.

The legal basis is your consent (Article 6(1)(a) GDPR). You can change your choice or withdraw consent at any time with “Cookie settings” at the bottom of every page: rejecting stops Google Analytics and deletes its cookies. We remember your choice for six months in a cookie called oc_consent, which only says whether you accepted or rejected.

Technical data

Like any website, our server sees your IP address and browser information when you visit. Our web server logs these with each request for security and troubleshooting; the logs are rotated automatically and kept only for a short period. Your IP address is also used, in memory and for a few minutes, to limit repeated form submissions. It is never stored with your early-access request.

Service providers

These providers process data on our behalf, under data-processing terms:

• Hetzner Online GmbH (Germany): hosting of the website and its database.
• Backblaze: storage of encrypted database backups.
• Sentry: error monitoring, configured not to collect personal data such as form contents, IP addresses or cookies.
• Resend: sends us an internal notification when someone joins the list. The notification does not include your email address or answers.
• IONOS: domain name and our email.
• Google Ireland Limited: Google Analytics, only for visitors who accept analytics cookies.

Some of these providers are based outside the European Economic Area. Where they process personal data, the transfer is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep your early-access request until you ask us to delete it or withdraw consent, and for no longer than 24 months. Encrypted backups that may contain it are deleted on a rolling basis within three months after that.

Your rights

You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, or withdraw your consent, by writing to privacy@orderchase.com. We’ll reply within one month. You also have the right to complain to the data protection authority of the country where you live or work, or where you believe your rights were infringed.

Children

This website is meant for businesses and is not directed at children under 16.

Changes

If we change how we handle your data, we’ll update this page and the date above. Significant changes will be communicated to people on the early-access list.