For a complete explanation of your choices and rights, read our privacy notice and cookies and storage page.
Service providers
A.M.E.X. Internet Marketing ltd operates OrderWorth from Cyprus. GoDaddy hosts our website and purchase, customer, licence and support records in the United States, and provides our mailbox and outgoing email services. Cloudflare provides website delivery, security and the separate performance measurement described in our privacy notice. OpenAI Sites and Cloudflare also process requests to a legacy service address and may retain historical service records. Stripe handles hosted payments, billing details and automatic tax. Authorised staff and necessary professional advisers access information only for their work. Purchase and subscription confirmations go to the billing email supplied at checkout. Purchases do not subscribe you to marketing.
International transfers
Our GoDaddy VPS is in the United States. OpenAI, Cloudflare, Stripe and Google operate internationally; processing is not restricted to Cyprus or the EEA. Their applicable data-processing terms describe safeguards for covered transfers, including the European Commission’s standard contractual clauses and, where the recipient and processing qualify, an adequacy decision. The EU–US Data Privacy Framework covers participating organisations and covered processing, not every US service. Contact Show email for information about the safeguards applicable to your data or a copy. Provider terms and scope must be reviewed when the service or recipient changes.
Financial and licence records
Paid purchase and licence records are retained while needed to provide purchased access, reconcile payments, handle refunds or disputes, and meet applicable accounting and legal obligations. We review these purposes at least monthly and delete or anonymise records when they no longer apply. A legal hold is reviewed while it remains necessary. Removing a site slot removes its active registration; it does not erase the purchase or payment provider records. Contact Show email about the period and basis applicable to a particular record.
Correspondence and backup retention
Closed purchase-support messages are eligible for deletion after 730 days and closed privacy requests after 1,095 days, unless an unresolved request or a documented legal hold requires longer retention. We review retention needs at least monthly; eligibility does not mean immediate deletion. Other correspondence and security records are kept only while needed for support, security, disputes or legal obligations. Deleting a live record does not immediately remove backup copies. Local and provider backups rotate separately, are restricted to recovery, and remain subject to applicable erasure or restriction decisions when restored. We do not promise one fixed maximum age for every provider or backup copy.
Cookies and storage
The purchase service uses a browser-recovery cookie for up to 24 hours. Staff sign-in uses essential cookies for requested access to the private workspace. Cloudflare may set necessary security cookies, including __cf_bm and cf_clearance; their lifetime depends on the active challenge and provider settings. Stripe uses its own payment and security storage on hosted checkout. Optional first-party measurement requires consent and can be rejected or withdrawn through Privacy choices. A newsletter invitation preference remembers an explicit dismissal or accepted confirmation request in this browser for up to 365 days. This does not subscribe you or enable analytics. No advertising trackers are used by the application.