Orlune Privacy Policy

Last updated: [11th August 2026]

This policy explains what personal information Orlune collects, why we collect it, who we share it with, and the rights you have over it. We have written it in plain English so you can actually understand it.

It covers the Orlune app and anything we do with your data as a company. Our website, orluneuk.com, has its own cookie settings, which we mention near the end.

 

---

 

The short version

• We collect the information you give us when you sign up, plus a small amount of technical data so the app runs and we know when it breaks.

• We use it to run Orlune, keep it safe, and (only if you say yes) send you our newsletter.

• We never sell your data.

• Your data is stored in the UK and the EEA. A few of the services we use are based in the US, and where that happens we have legal safeguards in place.

• You can see, correct or delete your data at any time. Just ask.

 

---

 

1. Who we are

Orlune is run by ORLUNEUK LTD, the "data controller" for your information. That means we are the ones responsible for it.

• Registered in England and Wales, company number 16254968

• Registered office: 7 Cloverleaf Court, Rhodesia, Worksop, S80 3GU

• Registered with the Information Commissioner's Office (ICO), reference ZC025709

For anything about your data or this policy, email [harriet@orluneuk.com].

 

---

 

2. The information we collect

Information you give us:

• Your name

• Your email address

• Your business name

• Your profile photo

• If you apply to be an expert: the services you offer and the details you add to your listing

• Anything you post in the app: your posts, comments, likes and any images you share

Information we collect automatically:

• Basic technical data when the app has a problem, such as your device model, operating system, app version and error details, so we can fix it

• Analytics about how the app is used, so we can improve it (only if you agree, see section 8)

Information handled by our payment provider:

• If you pay the expert fee, your name, email and payment details are collected and processed by Stripe. Those card details do not touch the Orlune app. We only see that a payment succeeded.

What we do not collect:

• We do not collect your location.

• We do not collect special category data such as health, ethnicity, religion or sexual orientation. Membership is for women, but your sex is not treated as sensitive data under UK data protection law.

 

---

 

3. How we use your information, and our legal reasons

Under data protection law we need a "lawful basis" for using your data. Here is what we do and why.

You can withdraw consent at any time. It will not affect anything we did before you withdrew it.

 

---

 

4. Who we share your information with

We do not sell your data and we never will. We share it only with the services we need to run Orlune, and only for that purpose. Each of these acts as our "processor", handling data on our instructions under a written agreement.

We may also share your information if the law requires it, to protect someone's safety, or if our business is ever sold or restructured (in which case your data stays protected under this policy).

Experts: if you contact or book an expert through Orlune, the information you choose to share goes to them directly. From that point they are responsible for it as their own data controller. We are only the introducer.

 

---

 

5. Where your data is stored, and sending it abroad

Your core data (your profile, posts, images and our backups) is stored in the UK, in London. The app itself is served from the Netherlands, in the EEA. Transfers between the UK and the EEA are covered by the UK's adequacy decision, so your data is protected to the same standard.

Some of the services we use are based in the United States, specifically Stripe, Firebase and [Sentry]. When your data is transferred there, we make sure it is protected by an approved legal safeguard, such as:

• the UK International Data Transfer Agreement, or

• the UK Addendum to the EU Standard Contractual Clauses, or

• the UK Extension to the EU-US Data Privacy Framework, where the provider is certified under it.

You can ask us for more detail on any of these at any time.

 

---

 

6. How long we keep your information

We keep your data only as long as we need it.

 

---

 

7. Marketing

We only send you marketing, like the Orlune newsletter, if you have ticked the box to say you want it. That box is separate from signing up and is never pre-ticked.

Every marketing email has an unsubscribe link, and you can opt out any time. We will still send you essential messages about your account, such as sign-in details and important service updates, because those are part of using Orlune.

 

---

 

8. Analytics and error reporting

Analytics. We use Firebase to understand how the app is used so we can improve it. This is optional. [We ask for your choice when you first open the app, and you can change it any time in your settings.] If you decline, we do not collect analytics and the app works exactly the same.

Error reporting. We use Sentry to tell us when something in the app breaks, so we can fix it. This collects technical information such as your device model, operating system, app version and the error itself[, and your IP address]. It does not tell us what you post or who you talk to. Error reporting is part of keeping the app working safely and is always on.

Both services are provided by companies based outside the UK, as set out in sections 4 and 5.

 

---

 

9. Camera, photos and app permissions

The app asks permission to use your camera and photo library so you can add a profile photo and share images in the community. You choose what to upload, and we only access what you choose. You can allow or refuse this when asked, and change it any time in your device settings.

 

---

 

10. Push notifications

We do not send push notifications yet. If we add them in future, we will ask for your permission through your device first, and you will be able to turn them off at any time in your settings.

 

---

 

11. How we keep your information safe

We take security seriously.

• Your data is encrypted when it travels and when it is stored, including our backups.

• Access to the live database is limited to two named individuals, protected by multi-factor authentication, with no shared logins. Access is granted only when needed and removed the same day it is not.

• Sign-ins to our systems are logged.

No system is ever completely secure, but we work to protect your data and to deal quickly with anything that goes wrong. If a data breach ever put your rights at risk, we would tell you and the ICO as the law requires.

 

---

 

12. Your rights

You have the right to:

• Be told how your data is used (this policy)

• See the data we hold about you

• Correct anything that is wrong

• Delete your data ("right to be forgotten")

• Restrict how we use it

• Object to us using it

• Move your data elsewhere ("portability")

• Withdraw consent at any time, where we relied on it

We do not make any decisions about you by automated means alone.

To use any of these rights, email [harriet@orluneuk.com]. We will respond within one month. It is free, though we may charge a reasonable fee or decline if a request is clearly unfounded or excessive. We may need to confirm your identity first.

 

---

 

13. If you are in the EU or EEA

The rights above apply to you too, under the EU GDPR. You can also complain to your local data protection authority if you are not happy with how we have handled your data. You can find yours at edpb.europa.eu.

 

---

 

14. If you are in California

If you live in California, you have the right to:

• Know what personal information we collect and how we use it

• Request a copy of it

• Request that we delete it

• Correct inaccurate information

• Not be discriminated against for exercising these rights

We do not sell or share your personal information as those terms are defined under California law, and we have not in the past 12 months.

To make a request, email [harriet@orluneuk.com].

 

---

 

15. Children

Orlune is for adults. You must be 18 or over to use it. We do not knowingly collect data about anyone under 18. If you believe a child has given us their information, tell us and we will delete it.

 

---

 

16. Cookies and our website

The Orlune app does not use cookies the way websites do, but it does use device identifiers through the services described above.

Our website, orluneuk.com, uses cookies and has its own cookie banner where you can manage your choices. This policy focuses on the app and on how we handle your data as a company.

 

---

 

17. Changes to this policy

We may update this policy from time to time. If we make a significant change, we will let you know by email or in the app before it takes effect. The date at the top shows when it was last updated.

 

---

 

18. How to complain

If you are unhappy with how we have handled your data, please tell us first at [harriet@orluneuk.com] so we can try to put it right.

You also have the right to complain to the ICO:

• Website: ico.org.uk

• Helpline: 0303 123 1113

 

---

 

19. Contact us

ORLUNEUK LTD 7 Cloverleaf Court, Rhodesia, Worksop, S80 3GU Company number 16254968

Data and privacy: harriet@orluneuk.com

 

---