Who we are
Orelian Ltd is a data science consultancy registered in England and Wales. We are the data controller for personal data collected through this website.
If you have any questions about how we handle your data, contact us at [email protected].
What personal data we collect
When you submit our contact form, we collect your name, email address, and the content of your message. You may also optionally provide your company name.
We do not use analytics tools, advertising networks, or tracking cookies. We do not collect any personal data from visitors who do not submit the contact form.
When you use the contact form, Cloudflare Turnstile (a bot-detection service) processes certain browser signals — including your IP address, TLS fingerprint, and User-Agent — to verify that you are a human. This processing is performed by Cloudflare on our behalf and does not involve cookies.
How we use your data
We use the information you submit through the contact form solely to respond to your enquiry. We do not use your data for marketing, profiling, or any automated decision-making.
Lawful basis for processing
We process contact form data on the basis of legitimate interests (Article 6(1)(f) UK GDPR) — specifically, our legitimate interest in responding to business enquiries made to us. We process bot-detection signals on the same basis, as we have a legitimate interest in protecting our website from automated abuse.
Third parties
Cloudflare, Inc. (USA) — We use Cloudflare Turnstile for bot detection on our contact form. Cloudflare acts as a data processor on our behalf. Data is transferred to the USA under Standard Contractual Clauses. See Cloudflare's Turnstile Privacy Policy.
All fonts used on this site are self-hosted. No data is transmitted to Google or any font CDN when you visit. We do not share your personal data with any other third parties.
International transfers
Cloudflare is a US-based company. Data transferred to Cloudflare is protected by Standard Contractual Clauses approved under UK GDPR.
How long we keep your data
We retain contact form enquiries for up to 12 months from the date of last contact, or until the matter they relate to is resolved — whichever is longer. We then securely delete them.
Your rights
Under UK GDPR, you have the right to access, correct, or erase your personal data; to restrict or object to its processing; and to request a portable copy of data you have provided to us. To exercise any of these rights, contact us at [email protected]. We will respond within one month.
Right to complain
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We will update the "last updated" date at the top of this page when we make changes. We recommend checking back periodically.