Legal
Privacy Policy
Last updated 21 August 2026
This policy covers this website, www.hrorigin.tech. If you are an employee of a company that uses the Origin platform, your data there is handled under a separate agreement with your employer, who decides what is collected and why. This page does not govern that.
Who we are
HR Origin and HRMate are trading names of Memento Originem Limited, a company registered in England and Wales, company number 17399903. Our registered office is 167-169 Great Portland Street, London, W1W 5PF.
For anything on this page we are the data controller, and we are registered with the Information Commissioner's Office. You can reach us about any of it at privacy@hrorigin.tech.
Cookies, and why you have not been asked about them
This site sets no cookies. It writes nothing to your browser storage. There is no advertising pixel, no third party tracker and no cross-site profiling.
That is the reason you have not been shown a consent banner. The law that produces those banners governs storing or reading information on your device, and we do neither, so there is nothing to ask you to agree to. We would rather remove the tracking than interrupt you for permission to do it.
What we collect when you browse
We count page views so we know which pages are worth keeping. For each one we record the page address, the site that referred you, your browser and device description, and the time.
We also generate a random identifier that groups the pages you view in a single visit. It is held in memory only, it is never written to your device, and it is gone the moment you close the tab. We cannot use it to recognise you when you come back, and that is deliberate: it means we measure visits, not people.
We do not store your IP address alongside these records.
Lawful basis: our legitimate interest in understanding whether our own website works. Given how little is collected and that it cannot be linked back to you, the impact on your privacy is minimal.
What we collect when you get in touch
If you book a demo, we collect your name, work email, company name, company size and the areas you told us you are interested in.
If you request a bespoke walkthrough, we collect the above plus the details you volunteer about your organisation: industry, headcount, location, how your HR function is currently set up, the tools you use, whether you hold a handbook, contracts and policies, and the problems you want solved.
If you ask about advisory support, we collect your name, work email, which kind of support you are asking about, and optionally your company name, how many people you employ, and whatever you write in the box describing your situation. We ask you not to name anyone in that box, and we would rather you told us about the problem than about the person.
If you use the chat, we process whatever you type into it. Please do not put anything confidential, or any details about a named employee, into that box. It is there to answer questions about our product, and it is not a secure channel.
If you asked for one of our free tools, that happens on our Memento Originem site rather than this one, and it is described in the notice there. We collect your name, work email, company and headcount, and we send you the tool by hand. The tools themselves run inside your browser, so your spreadsheet never reaches us.
Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in responding to enquiries about our own services.
Who else sees it
We do not sell your data, and we do not share it for anyone else's marketing.
These providers process it on our behalf, under contract:
- Supabase, which hosts the database and the serverless functions that receive form submissions.
- Vercel, which hosts and serves this website.
- Resend, which delivers the confirmation email we send you and the notification we send ourselves.
- Anthropic, whose Claude model generates the chat replies. Your message is sent to them to produce the answer.
Some of these operate outside the UK. Where that happens we rely on the transfer safeguards permitted under UK data protection law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
If you reached us through an employer's HR Origin system
Most personal data that passes through HR Origin is not ours. Employers use the platform to run their own HR: employee records, recruitment, cases, pay, attendance and workplace incident reports. For all of that, that employer decides what is held and why, and we only hold it for them under contract. In data protection terms they are the controller and we are the processor.
So if you want a copy of what is held about you, want something corrected, or want to know how long it is kept, ask that organisation first. They are the ones who can answer. Write to us if you cannot reach them and we will help them respond, but we cannot make that decision on their behalf.
Incident and accident reports deserve saying out loud, because they are the one place where the platform records health information about people who may never have worked for the organisation at all: agency and subcontracted workers, delivery drivers, customers and visitors. If you filled in an incident form from a link on your phone, the record belongs to the business named on that form. It is deliberately impossible for anyone, including us, to edit or delete it once sent, because an accident book that can be revised is not an accident book. A correction is added as a new entry alongside the original.
The full detail is in our platform privacy notice and in the data processing agreement we sign with every client. Ask us at privacy@hrorigin.tech and we will send you a copy.
How long we keep it
- Page view records: 24 months, then deleted.
- Demo, walkthrough and advisory enquiries: 24 months from our last contact with you, unless you become a client, in which case they move under our client agreement.
- Chat conversations: 12 months.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it or delete it, ask us to restrict how we use it, and object to us relying on legitimate interests. Where we rely on your consent you can withdraw it at any time.
Email privacy@hrorigin.tech and we will respond within one month. We will not charge you, and we will not ask you to justify the request.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you came to us first, but that is your right and not a favour we grant.
Changes
If we change what we collect, we change this page in the same breath and move the date at the top. We will not quietly widen it.