Privacy notice
How Orli Health uses personal information on this website: what we collect, why, who helps us, and what you can ask us to do.
Our data lead hasn’t signed this notice off yet. Anything in square brackets is still to be confirmed.
Who we are
Orli Health Ltd runs this website and decides how your information is used. That makes us the data controller.
- Company number: [to be confirmed]
- Registered office: [to be confirmed]
- ICO registration number: [to be confirmed]
- Contact: hello@orli.health
This notice covers the website, orli.health. Orli Schools, the app school staff sign in to, has its own notice [link to be confirmed]. The website is written for adults: we don’t knowingly collect children’s information here, and our forms ask you to leave children’s names out.
What we collect and why
Only what you send us, and a count of visits that can’t identify you. Each row says what we use it for and the lawful basis we rely on.
-
A trial request
Your school’s name and, if you give it, its URN; your name, role and work email; the year group and size of the trial group; how and when you’d like to use Orli; the school address for the box; anything you add in the notes; and your contact choices.
We use it to set up your trial, send the box and talk to you about it. Basis: our legitimate interest in replying to a school that has asked to try Orli.
-
Trial feedback
Your answers. Your work email only if you say we can contact you about them. The link in our trial email may also tell us which trial, school and role the answers are about.
We use it to improve Orli, and we report it as what adults noticed, never as results for children. Basis: our legitimate interest in improving Orli.
-
Our news
Your email address, once you confirm it from the email we send.
We use it to send occasional news. Basis: your consent. Every email has an unsubscribe link.
-
Emails and calls
What you send us by email, and, if you book a call, the name, email and time you give TidyCal, our booking service.
We use it to reply and hold the call. Basis: our legitimate interest in talking to people who ask to speak with us.
-
Visiting the website
Cloudflare, which runs the site, handles your IP address and the details of each request to deliver pages and keep the site secure.
We count page views and a few actions, like a trial request or a game started, with no cookies, IDs or IP addresses. You can turn this off on the Cookies page, and it’s off if your browser sends Global Privacy Control. Basis: our legitimate interest in knowing which pages help schools.
-
Things that stay on your device
The Orli you make, your Accessibility choices and your form drafts stay in your browser and never reach us. The Cookies page lists each one.
Who helps us
These companies run parts of the website for us. They use your information only as we tell them to. We don’t sell it, and we don’t use it for advertising.
Cloudflare
Hosting, security, bot checks on our forms, and the anonymous statistics.
Resend
Sends our emails: the news, and the confirmation when you request a trial.
Google Workspace
Our email. Trial requests, feedback and messages arrive in the Orli team’s inbox.
TidyCal
Call bookings. Its calendar loads only when you ask to see available times.
jsDelivr
Delivers the code for our 3D scenes and games. Your browser asks it for those files, so it sees your IP address, as any website does.
Google
Only if you choose “Play with your hand” in Heart pop: the hand-tracking model comes from Google’s servers (storage.googleapis.com). The camera picture stays on your device.
Some of them store or handle information outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations or the ICO’s International Data Transfer Agreement or Addendum [to be confirmed for each].
How long we keep it
Only as long as we need it. These periods are proposals for our data lead to confirm.
Trial requests
[2 years after the trial ends], unless your school goes on to use Orli.
Trial feedback
The answers, without your email once we’ve followed up.
Messages and call bookings
[2 years after the last reply].
News
While you’re signed up. If you unsubscribe, we keep only your address and that you said no, so we never add you again. Sign-ups that are never confirmed go after [30 days].
Statistics
Three months.
Security logs
As set by Cloudflare, usually a few days.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of the information we hold about you
- correct it, or delete it
- limit how we use it, or stop using it
- give it to you in a format you can take elsewhere
- stop sending you news, at any time
Email hello@orli.health. We’ll reply within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO). We’d like the chance to put it right first.
If a child has sent us their details, tell us and we’ll delete them.
We’ll update this page if anything changes, and show the date at the top. More on Orli Schools: Data protection.