Privacy

Who we are

ORA Retreat House is a wellness house in St John's Wood, London. This website is operated byKylee Group Ltd, a private limited company registered in England and Wales, company number 16522628, registered office 37 Common Road, Redhill, England, RH1 6HG. Kylee Group Ltd is the data controller for the personal data described here.

Write to booking@orawellness.uk with any question about your data, including a request to see, correct or delete it.

What we collect

Browsing this site does not require you to give us anything, and we do not ask you to create an account. Three things are nevertheless recorded or transmitted, and you should know about each.

• Server logs. Our web server records each request: the IP address it came from, the time, the page requested, the referring page and the browser's user-agent string. These logs are how the site is kept available and secure.
• The map, if you ask for it. The About page can show a Google map of the neighbourhood. It is not loaded until you press the button, and the page says so before you do. Press it and Google receives your IP address and may set its own cookies.
• Requests to Google Fonts. The typefaces this site uses are served by Google. Loading a page therefore sends your IP address and browser details to Google, in the same way as visiting any site that uses their font service.
• What you type into the booking form. The form on this site asks for what you would like to book, your name and your email address, and optionally a telephone number, when suits you, and anything we should know before your visit. It reaches the house as an email and is also stored so that a request cannot be lost between mailboxes. You receive a copy of what you sent.
• Anything else you send us. If you write to us, we hold what you tell us, including anything you choose to share about your health so that a treatment can be provided safely.

There is no payment step on this website: nothing is charged here, and we hold no card details. A booking request is a request — a person reads it and replies to agree a time.

Cookies

Reading this site sets no cookies. You will not see a cookie banner, because there is nothing to consent to until you choose something that needs one.

• Analytics. Measurement is switched off entirely at the moment. If we turn it on, it will ask first, and only your answer — a single analytics_consentcookie — is stored until you change it.
• Staff sign-in. The private areas of this site set a session cookie for the person signing in. It is not set for visitors and cannot be read by the pages you see.
• The map. Loading the map on the About page lets Google set its own cookies. Not loading it means it cannot.
• Security. Our network provider may set a short-lived cookie to tell a person from an automated request. It carries no profile of you.

Who else is involved

We keep the number of other parties small, and each one is here for a reason you can see.

• Our hosting provider, which runs the server this site is served from.
• Cloudflare, which sits in front of that server to deliver pages quickly and absorb malicious traffic. Your request passes through it.
• Google Fonts, which serves the typefaces, as described above.
• Resend, which delivers the email a booking request becomes, and the copy sent to you.
• Google Maps, but only after you press the button that loads the map. Until then the map is a plate of our own with the address on it.

We do not sell personal data, we do not share it for advertising, and nothing on this site profiles you or makes an automated decision about you.

Why we may use your data

• To run the site safely. Server and security logs exist so the site stays available and abuse can be investigated. This is our legitimate interest in operating a working, secure site.
• To answer you and to provide a treatment. When you send a booking request we use what you tell us to reply and to prepare your visit. That is what you asked us to do, and it is the whole purpose of the form.
• To keep you safe during treatment. Health information you choose to share is used only to decide whether a treatment is suitable and how it should be adjusted.
• To measure the site, if you allow it. Analytics only ever runs on your consent, and you can withdraw it.

How long we keep it

Server logs are kept for a short operational period and then rotated away. Anything you send us is kept while we are in contact with you and for as long afterwards as our records and any legal obligations require.

We are confirming exact retention periods for treatment records and will state them here.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our using it, and ask for it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting what was done before you did.

We will answer within one month. We may ask you to confirm who you are first, so that we do not hand your data to somebody else.

Complaints

If you think we have handled your data badly, please tell us first — most things are quicker to put right directly. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.ukor on 0303 123 1113.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. If a change materially affects how your data is used, we will say so here rather than only in the date.

Contact

Kylee Group Ltd, 37 Common Road, Redhill, England, RH1 6HG.

booking@orawellness.uk. A telephone number is being confirmed and will be published here.