Privacy Notice
Last updated: 5/13/2026
1. Who we are
Orchidist (the "Service") is operated by Gamechangers Consulting LLC ("we", "us", "our"). We act as the data controller for personal data we collect about you through the Service.
2. Data we collect
- Account data — email address, login credentials, and authentication tokens.
- Profile and collection data — orchids you save to your collection, nicknames, notes, and acquisition dates.
- Uploaded content — photos you submit for AI identification.
- Support communications — messages you send us.
- Usage and device data — IP address, browser type, device identifiers, pages visited, and basic telemetry used to operate and improve the Service.
Payment information (card details, billing address) is collected and processed directly by Paddle, our payment provider — we do not store it.
3. How we use your data
- To create and operate your account (legal basis: contract performance).
- To provide identification, library, care, and collection features (contract performance).
- To prevent fraud, abuse, and secure the Service (legitimate interests).
- To improve the Service and develop new features (legitimate interests).
- To respond to support requests (contract performance / legitimate interests).
- To send service-related emails (contract performance) and, with your consent, marketing emails.
- To comply with legal obligations (legal obligation).
4. Who we share data with
- Service providers / subprocessors — hosting, database, AI model providers, and analytics tools that help us run the Service. These parties only process data on our instructions.
- Paddle — our Merchant of Record, which processes payments, manages subscriptions, handles tax compliance, and issues invoices.
- Professional advisers — legal, accounting, and similar advisers when needed.
- Authorities — where we are legally required to disclose.
5. International transfers
Some of our service providers operate outside your country. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep account and collection data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations. Uploaded photos used for identification may be retained briefly to operate and improve the Service.
7. Your rights
Depending on your jurisdiction, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- request a copy of your data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with your local data protection authority.
We respond to verified requests within one month.
8. Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular review of our security practices. No system is perfectly secure, but we work to keep your data safe.
9. Cookies
We use essential cookies to keep you signed in and to operate the Service. We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; disabling essential cookies may break parts of the Service.
10. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.
11. Changes
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service.
12. Contact
For privacy questions or to exercise your rights, contact Gamechangers Consulting LLC through the Service.