Legal

Privacy Policy

Last updated: September 2026

ORA Events is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share information about you when you visit our website or enquire about our services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

ORA Events is a luxury event catering business operating across Hertfordshire, Bedfordshire, Cambridgeshire and London.

For the purposes of data protection law, ORA Events is the data controller of your personal data. You can contact us at hellooraevents@gmail.com with any data protection queries.

2. What Personal Data We Collect

We may collect and process the following personal data about you:

Identity and contact data: your name, email address, telephone number and event details you provide when submitting an enquiry through our contact form.

Usage data: information about how you use our website, including pages visited, time spent on pages, and referring URLs, collected via Google Analytics 4 (only with your consent).

Communications data: the content of any messages or correspondence you send us.

3. How We Collect Your Data

Directly from you: when you complete our enquiry form, email us, or contact us via social media.

Automatically: through cookies and similar tracking technologies when you browse our website (only where you have given consent via our cookie banner).

4. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

To respond to your enquiry and provide our catering services — Legal basis: Legitimate interests / performance of a contract.

To send you information about our services where you have requested it — Legal basis: Legitimate interests or consent.

To analyse website usage and improve our site — Legal basis: Consent (via cookie banner).

To comply with legal obligations — Legal basis: Legal obligation.

5. Cookies

Our website uses cookies. We only place non-essential cookies (such as Google Analytics) after you have given your consent via our cookie consent banner.

Essential cookies necessary for the website to function are placed without consent. You can withdraw your consent at any time by clearing your browser cookies and declining consent on your next visit.

6. Sharing Your Data

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and business, including:

Google LLC (Google Analytics) — for website analytics, subject to your consent. Google may transfer data outside the UK; they are certified under appropriate safeguards.

Email service providers — to deliver enquiry notifications to us.

All third parties are required to process your data securely and only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting or reporting requirements.

Enquiry data is typically retained for up to 2 years. You may request deletion at any time (see Your Rights below).

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you.

Right to rectification — to ask us to correct inaccurate or incomplete data.

Right to erasure — to request that we delete your personal data in certain circumstances.

Right to restrict processing — to ask us to limit how we use your data.

Right to data portability — to receive your data in a structured, machine-readable format.

Right to object — to object to processing based on legitimate interests.

Rights related to automated decision-making — we do not carry out solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at hellooraevents@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. However, no internet transmission is completely secure, and we cannot guarantee the security of data transmitted to our website.

10. Third-Party Links

Our website may contain links to third-party websites (such as Instagram and TikTok). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hellooraevents@gmail.com.

Last updated: September 2026