Privacy Policy

Last updated: 5 June 2026

1. Who We Are

ORIN is operated by Orin City Services, a UK-based service marketplace connecting customers with local home service experts, healthcare professionals, accountants, restaurants, and transport providers.

Contact: hello@or-in.co.uk

2. Information We Collect

Account information — name, email address, phone number, profile photo
Location data — device GPS coordinates used to show nearby service providers (only while using the app)
Photos & documents — images uploaded for service requests, job listings, and professional profiles
Payment information — billing details processed and stored securely by Stripe; we do not store raw card numbers
Messages — in-app chat messages between users and service providers
Health information — for SmartClinic users only: appointment notes, consultation details, and symptoms shared voluntarily during virtual consultations
Device & usage data — app version, device type, and crash reports for diagnostics

3. How We Use Your Information

To connect you with service providers near your location
To process bookings, orders, and payments
To facilitate virtual healthcare consultations via SmartClinic
To send appointment reminders and notifications via SMS and push notifications
To provide AI-powered features (cost estimates, health information)
To improve app performance, detect fraud, and ensure platform safety

4. Health Data

ORIN's SmartClinic feature enables users to book virtual consultations with healthcare professionals. Health-related information you share (symptoms, consultation notes) is used solely to facilitate your care and is never sold or shared with third parties for marketing purposes. Healthcare providers on ORIN are independent professionals responsible for their own clinical decisions.

5. Data Sharing

We do not sell your personal data. We share data only as follows:

Recipient	Purpose
Service providers you book	To fulfil your booking or order
Stripe	Secure payment processing
Twilio / Vonage	SMS appointment reminders
OpenAI	AI-powered in-app features
Resend / SendGrid	Transactional emails (receipts, verification)
Law enforcement	Only when required by law

6. How We Store Your Data

Your data is stored on PostgreSQL databases hosted in the United Kingdom / European Economic Area. All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256 encryption. Payment credentials are handled entirely by Stripe and never stored on our servers. Sensitive credentials (such as biometric login tokens) are stored exclusively on your device using the platform's secure enclave (iOS Keychain / Android Keystore) and never transmitted to our servers.

7. How Long We Keep Your Data

We retain your personal data for as long as your account remains active. Specific retention periods:

Data type	Retention period
Account profile data	Until account deletion, then deleted within 30 days
Booking & transaction records	7 years (UK financial records requirement)
Chat messages	2 years from last activity, then auto-deleted
Health consultation notes	Until account deletion or user request
Device / crash logs	90 days
Payment records	7 years (retained by Stripe per their policy)

8. How to Delete Your Data

You can delete your account and all associated personal data at any time using one of the following methods:

In the app: Go to Profile → Settings → Delete Account. Your account and personal data will be permanently removed within 30 days.
By email: Send a deletion request to hello@or-in.co.uk with the subject line "Data Deletion Request". We will confirm and complete deletion within 30 days.

Note: Some transaction records may be retained for up to 7 years to comply with UK financial regulations, but these will be anonymised where possible.

9. Your Rights (UK GDPR)

Access Request a copy of the data we hold about you
Rectification Ask us to correct inaccurate data
Erasure Request deletion of your personal data ("right to be forgotten")
Portability Receive your data in a machine-readable format
Objection Object to processing based on legitimate interests
Restriction Request that we limit how we process your data

To exercise any of these rights, email hello@or-in.co.uk. We will respond within 30 days.

10. Cookies & Tracking

Our website does not use advertising or tracking cookies. The mobile app uses device-local secure storage for session tokens only. No data is shared with advertising networks.

11. Children's Privacy

ORIN is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email. Continued use of ORIN after changes constitutes acceptance of the updated policy.

13. Contact & Complaints

For privacy enquiries: hello@or-in.co.uk

If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint