Privacy Policy (Orenna Wellness)
Effective date: 26/01/2026
Orenna Wellness (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect and use personal data when you visit our website or contact us.
1) Who we are
Website: orennawellness.com
Business name: Orenna Wellness
Contact email (privacy enquiries): hello@orennawellness.com
We are the “controller” for personal data we collect through this website.
2) What personal data we collect
We aim to collect the minimum necessary.
a) When you contact us (Enquiry form or email)
We may collect: your name, email address, and the message you send us (and any information you choose to include).
Important: Please do not include sensitive personal information (for example medical details) in your message.
b) Basic website/technical data
Our website and security tools may process limited technical information such as IP address, device/browser details, and security logs to protect the site from spam and misuse.
3) How we use your data (and our lawful bases)
We use your personal data only for the purposes below:
To reply to your enquiry and communicate with you
Lawful basis: Legitimate interests (to respond to requests) or Contract (if you ask to book a service).
To keep the website secure and prevent spam
Lawful basis: Legitimate interests (site security and abuse prevention).
We do not use your details for marketing, and we do not operate a newsletter at this time.
4) Cookies and tracking
We keep the site simple and aim to avoid unnecessary tracking.
We may use essential cookies required for site functionality and security. If we add non-essential cookies in future, we will update this policy and provide appropriate choices where required.
5) Who we share your data with (service providers)
We use trusted service providers to run the website and deliver emails. These providers act as “processors” and only handle data on our instructions.
This may include:
- Website hosting / WordPress services
- WPForms (enquiry form processing)
- Cloudflare Turnstile (spam prevention)
- WP Mail SMTP + Zoho Mail (email delivery)
6) International transfers
Some of our service providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as international data transfer agreements/standard contractual clauses) to protect your information.
7) How long we keep your data
We keep enquiry messages only as long as needed to respond and manage our records.
Typical retention: up to 12 months after the last contact, unless we need to keep something longer for legal, accounting, or security reasons.
Security logs may be retained for shorter periods where possible.
8) Your rights
Depending on your location, you may have rights to:
- access your data
- correct inaccurate data
- delete your data
- restrict or object to processing
- data portability (where applicable)
To make a request, contact us at: [add your email].
9) Complaints (UK)
If you are in the UK and are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO). We’d appreciate the chance to address your concerns first.
10) Children
Our services are intended for adults. If you believe a child has submitted personal data to us, please contact us so we can delete it.
11) Updates to this policy
We may update this policy from time to time. The latest version will always be posted on this page.