Privacy Policy
Your privacy is important to us.
Orenna Wellness’s policy is to respect your privacy regarding any information we may collect from you across our website, www.orennawellness.com, and other sites we own and operate.
This Privacy Policy explains why we keep information about you, what we do with it, and who we might share it with. It also describes your rights under current legislation. Orenna Wellness aims to meet current best practices in the Privacy Policy.
1.a Information we collect when you visit our website.
Log data
When you visit our website, our server providers and ISPs may automatically log the standard data provided by your web browser. This data may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details. Therefore, this protects our website and any information we store on our server.
Device data
We may also collect data about your device to access our website. This data may include the device type, operating system, unique identifiers, device settings, and geo-location data. What we collect can depend on your device and software’s individual settings. We recommend checking your device manufacturer’s or software provider’s policies to learn what information they make available to us.
We use Google Analytics to monitor website traffic. All collected information (like IP address) is anonymous in this respect and does not allow your identification. (Anonymous IP settings ) The use of Google Analytics services involves the implementation of the tracking code provided by Google into our website’s code. This code is based on cookies but may also use other tracking technologies. Details related to the use of information collected by Google as part of our use of Google Analytics as part of our site can be found here: https://policies.google.com/technologies/partner-sites
Personal Information
On our contact form, we ask for personal information, such as your:
- Name
- Telephone number (optional)
- Location (optional)
1. b Information we collect when you login and use our external booking system
We use a secure third-party booking system, QuanticaLabs (Timetable Booking Schedule for WordPress).
We also use Stripe, an external secure payment provider.
2. Legal bases for processing
We will process your personal information lawfully, fairly, and transparently. We only collect and process information about you where we have legal bases.
These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:
- It’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us);
- it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our services, and to protect our legal rights and interests;
- you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter) or
- we need to process your data to comply with a legal obligation.
Where you consent to our use of information about you for a specific purpose, you have the right to change your mind at any time (but this will not affect any processing already taking place).
We don’t keep personal information for longer than is necessary. While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no electronic transmission or storage method is 100% secure and cannot guarantee absolute data security. If necessary, we may retain your personal information to comply with a legal obligation or to protect your vital interests or the vital interests of another natural person.
3. Collection and use of information
We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes:
- to contact and communicate with you
4. Disclosure of personal information to third parties
We do not share or disclose personal information to third parties.
5. International transfers of personal information
The personal information we collect is stored and processed in the United Kingdom, where our partners, affiliates, and third-party providers maintain facilities. By providing us with your personal information, you consent to its disclosure to these overseas third parties.
We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA is protected by appropriate safeguards, for example, by using standard data protection clauses approved by the European Commission or binding corporate rules or other legally accepted means.
Where we transfer personal information from a non-EEA country to another country, you acknowledge that third parties in other jurisdictions may not be subject to data protection laws similar to those in our jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in our jurisdiction. Therefore, this might mean you may not seek redress under our jurisdiction’s privacy laws.
6. Your rights and controlling your personal information
Choice and consent: By providing personal information, you consent to us collecting, holding, using and disclosing your personal information under this privacy policy. Suppose you are under 16 years of age. In that case, you must have, and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website, and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us; however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.
Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person’s consent to provide the personal information to us.
Restrict: You may restrict the collection or use of your personal information. If you have previously agreed to use your personal information for direct marketing purposes, you may change your mind by contacting us using the details below. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.
Access and data portability: You may request details of the personal information that we hold about you. You may request a copy of the personal information we hold about you. Where possible, we will provide this information in easily readable machine format. You may request that we erase the personal data we hold about you at any time. You may also request that we transfer this personal information to another third party.
Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please get in touch with us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or outdated.
Notification of data breaches: We will comply with laws applicable to us regarding any data breach.
Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, don’t hesitate to contact us using the details below and provide full details of the alleged breach. We will promptly investigate your complaint and respond to you in writing, setting out the outcome of our investigation and the steps we will take to deal with it. You also have the right to contact a regulatory body or data protection authority concerning your complaint.
7. Cookies
We use “cookies” to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer and accesses each time you visit so we can understand how you use our site. This helps us serve you content based on your preferences. Please refer to our Cookie Policy for more information.
8. Limits of our policy
Our website may link to external sites that we do not operate. Please be aware that we have no control over the content and policies of those sites and cannot accept responsibility or liability for their respective privacy practices.
9. Changes to this policy
We may change our privacy policy to reflect acceptable practices at our discretion. We will take reasonable steps to inform users about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices regarding privacy and personal information.
If we significantly change this privacy policy, for example, changing the lawful basis on which we process your personal information, we will ask you to re-consent to the amended policy.
This policy is effective as of 16 November 2024.
