Privacy policy

Last updated September 28, 2026.

About this policy

Orcosa Inc. (Orcosa, we, or us) is responsible for the personal information described in this policy. This policy covers our corporate website and information you send us through the contact details listed on it. It does not describe the handling of clinical trial participants’ information.

Information we receive

Information you provide. If you email us, we receive your email address and any name, contact details, correspondence, or attachments you choose to include. A career inquiry may include your résumé, education, and work history. Email links open your own email application; the website does not submit a message for you. Please avoid sending personal medical information through general inquiries.

Technical information. Our hosting provider, Netlify, processes information needed to deliver and protect the website. This can include your IP address, browser information, requested pages or files, request time, and related security and diagnostic records. Technical information is generated when your browser requests website content, even when you do not contact us.

Cookies and analytics

This website does not use Google Analytics, advertising pixels, or cookies for advertising or visitor profiling. Our website code does not place cookies or save personal information in your browser’s local storage. Hosting and security systems may still process the technical information described above. Our photographs and videos are served as website files, rather than embedded social-media or video-player services.

How we use information

We use information to answer inquiries, consider career submissions, manage business communications, operate and secure the website, investigate technical problems, and meet legal obligations. We do not use this website to make decisions about you based solely on automated profiling.

Where a legal basis is required, we rely on our legitimate interests in maintaining a secure corporate website and responding to communications, steps requested before entering a contract, applicable legal obligations, or consent when required. You may withdraw consent by contacting us; this does not affect processing that occurred before withdrawal.

When information is shared

We may provide information to service providers supporting hosting, email, information technology, and professional advice, as needed for those services. Netlify supplies our website hosting and content delivery. Its Data Processing Agreement describes its obligations when processing customer personal data.

We may also disclose information when legally required, to protect rights or security, or in connection with a corporate transaction, subject to appropriate protections. We do not sell personal information collected through this website or share it for cross-context behavioral advertising. We do not track visitors across unrelated websites for advertising, including when an opt-out signal such as Global Privacy Control is enabled.

Retention, security, and international processing

We keep information for the time needed for the purposes described here, taking account of legal obligations, the nature of a request, and legitimate recordkeeping needs. Retention of hosting records also depends on the provider’s services and practices. We use safeguards appropriate to the information we hold; no website or email system can guarantee complete security.

Orcosa operates in the United States. Our providers may process information in the United States and other countries, where privacy laws may differ from those where you live. Where required, international transfers are covered by safeguards such as approved contractual terms.

Your choices and requests

Wherever you live, you may ask us about our use of your personal information and request access, correction, deletion, a portable copy, or a restriction on or objection to processing. These requests are subject to applicable limitations, including legal retention requirements and our ability to verify the request. We will not penalize you for exercising privacy rights.

Send requests to privacy@orcosa.com. Tell us what you are requesting and how you interacted with Orcosa. We may ask for information needed to verify your identity or an authorized representative’s authority. You do not need an account. If you disagree with our response, you may ask us to review it and, where applicable, contact your data protection authority.

Children and external websites

Our corporate website is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us so we can address it.

External links open in a new tab and lead to websites with their own privacy practices. This policy does not cover those websites.

Changes and contact

We will revise this policy when our practices change, update the date above, and provide additional notice when required. For privacy questions, contact Orcosa Inc. at privacy@orcosa.com. You can also reach us at info@orcosa.com.