Overview
This Privacy Policy explains how OriginSpan handles information collected through the public OriginSpan website, approved campaign landing pages, and the Design Partner request form. The website is intended for business and professional audiences.
Where optional marketing measurement is allowed
Optional marketing measurement is limited to the public website at originspan.com, www.originspan.com, and approved public campaign pages. It is not installed in the authenticated OriginSpan portal, tenant workspaces, customer lifecycle or evidence workflows, billing administration, restricted passport views, trust-operator workflows, or public product-passport resolver pages.
Information you provide
When you submit the Design Partner form, we collect the information you provide, which may include:
- Name and work email address
- Company, job title, and industry
- Product types, approximate product or SKU scale, and project goals
- Your consent to receive follow-up communication
Form field values are processed for the business request. They are not copied into Google Analytics events.
Technical and security information
Our hosting and security systems may process technical data such as IP address, browser and device information, request timestamps, referring pages, and diagnostic logs. A short-lived identifier based on the submitting IP address may be used to rate-limit abusive traffic. This operational data is separate from the approved marketing-event model.
Optional Google Analytics 4
OriginSpan uses Google Analytics 4 on approved public marketing pages only after a visitor accepts website analytics through the OriginSpan privacy choices dialog. The Google tag is not loaded before analytics consent. Analytics storage defaults to denied. Advertising storage, advertising user data, and advertising personalization remain denied, and Google Signals and advertising-personalization signals are disabled in the website configuration.
Approved analytics events may include:
- Public marketing page views and Pricing page views
- Design Partner request starts and successful submissions
- Sales contact clicks
- Demonstration video starts and completions
- Explicit Digital Product Passport demonstration openings
- Signup starts and completions when a public signup is available
- Approved outbound social-link clicks
Approved event dimensions may include campaign source, campaign medium, campaign name, landing-page path, referral category, coarse device category, country or region derived by the analytics provider, selected page language, and content category. OriginSpan removes query parameters before loading Google Analytics and sends a sanitized public origin and path rather than a full campaign URL.
Campaign attribution
OriginSpan may read approved UTM parameters—utm_source,
utm_medium, utm_campaign,
utm_content, and utm_term—to distinguish an
original campaign touch from a latest campaign touch. Before analytics
consent, attribution is limited to the current browser tab. After analytics
consent, approved attribution may be stored in the browser for up to 90 days.
The current browser implementation does not add this attribution to a Design
Partner submission unless a separately reviewed server-side integration is
activated.
Information excluded from third-party marketing tools
OriginSpan does not intentionally send the following data to Google Analytics or other third-party marketing tools:
- Names, email addresses, form values, tenant IDs, or membership IDs
- Customer names or user email addresses
- GTINs, lot numbers, serial numbers, asset identifiers, or custodian information
- Lifecycle notes, evidence metadata, restricted passport values, or signed assertions
- Authentication tokens, portal session data, or billing data
How we use information
- Evaluate and respond to Design Partner and sales inquiries
- Preserve approved campaign attribution for aggregate marketing analysis
- Understand public website engagement and improve accessibility and usability
- Operate, secure, troubleshoot, and protect the website
- Comply with legal obligations and protect our rights
Service providers and disclosure
We use service providers to host the website, process form requests, maintain business records, deliver notifications, provide optional analytics, and support security and operational infrastructure. Google Analytics 4 processes approved analytics data after consent. Other providers process information on our behalf under their own contractual, privacy, and security obligations. We do not sell personal information.
Retention
We retain inquiry information for as long as reasonably necessary to evaluate the request, communicate with you, maintain business records, meet legal obligations, and protect the service. Short-lived abuse-prevention records are configured to expire automatically. Browser campaign attribution retained after analytics consent is limited by the configured 90-day OriginSpan retention period. Google Analytics data is retained according to the active property settings and applicable Google policies.
Your privacy choices
Necessary website and security functions continue when optional analytics is declined. You can choose Necessary only, accept optional analytics, or customize your choice in the OriginSpan privacy dialog. You can later select Privacy choices in the website footer to revise or revoke that consent.
You may also request access, correction, or deletion of information you submitted. Use the Design Partner form on the home page and begin the goals field with “Privacy request” so the request can be routed appropriately.
Security
We use administrative and technical safeguards intended to protect information. No internet transmission or storage system can be guaranteed to be completely secure.
Children
This website and the Design Partner program are not directed to children under 13.
Changes to this policy
We may update this policy as the website and OriginSpan services evolve. The “Last updated” date identifies the current version.