Privacy Policy
Opal & Ora Ltd
125 Sunnyside Parc, Illogan, Redruth, TR15 3LY
Last Updated: May 2026
1. Introduction
Opal & Ora Ltd (“we”, “us”, “our”) provides professional virtual assistance services to individuals, legal professionals, expert witnesses and small businesses.
We understand that the work we support often involves sensitive and confidential information. Protecting your data is not an afterthought for us. It is part of how we work.
This Privacy Policy explains how we collect, use, and protect your personal data when you interact with us, whether through our website, by email, or as part of our services.
2. The information we collect
We only collect information that is necessary to provide our services or respond to enquiries.
This may include:
- Your name and contact details (email address, phone number);
- Information you provide when making an enquiry;
- Information required to deliver our services (which may vary depending on your instructions);
- Billing and payment information;
- Basic website usage data (such as cookies and analytics).
We do not collect more information than we need, and we do not use your data for unrelated purposes.
3. How we use your information
We use your information to:
- Respond to enquiries and communicate with you;
- Provide and manage our services;
- Maintain records of work carried out;
- Issue invoices and manage payments;
- Improve how our website and services operate.
We do not sell your data, and we do not use it for unsolicited marketing.
4. Our legal basis for processing
Under UK data protection law, we rely on the following lawful bases:
- Contract – where processing is necessary to provide our services to you;
- Legitimate interests – for running and improving our business in a reasonable and proportionate way;
- Legal obligation – where we are required to retain or disclose information;
- Consent – where you have chosen to provide information (for example, via a contact form).
5. Confidentiality and professional standards
Many of our clients work in legal, clinical, or professional environments where confidentiality is essential.
We handle all information in line with the standards expected in those settings. This includes:
- Restricting access to your information to named individuals only;
- Using secure, professional systems for storage and communication;
- Maintaining discretion in all aspects of our work.
Non-disclosure agreements can be put in place where required.
6. How your data is stored
We use trusted, professional-grade systems including Microsoft 365, Outlook, Teams, and Dropbox Business.
Your data is:
- Stored securely using encrypted systems;
- Protected both in storage and during transfer;
- Hosted on secure UK or EU-based servers wherever this is supported by our service providers.
We take reasonable technical and organisational measures to safeguard your information at all times.
7. Sharing your information
We only share your personal data where necessary to provide our services or meet legal obligations.
This may include:
- Service providers who support our systems (such as secure cloud storage providers);
- Professional contacts where required to carry out your instructions (and only with your knowledge or authority);
- Legal or regulatory bodies where we are required to do so.
We do not pass your data to third parties for marketing purposes.
8. How long we keep your data
We retain information only for as long as necessary to:
- Provide our services;
- Maintain appropriate records;
- Meet legal, tax, or regulatory requirements.
When information is no longer required, it is securely deleted.
You may also request deletion of your data at any time, subject to any legal obligations we must meet.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate information;
- Request deletion of your data;
- Restrict or object to certain types of processing;
- Request transfer of your data to another provider.
To exercise any of these rights, please contact us using the details below.
10. Cookies
Our website uses cookies to ensure it functions properly and to understand how it is used.
Cookies are small files stored on your device that help improve your browsing experience.
You can choose to accept or reject non-essential cookies through your browser settings or our website banner.
For more information, please see our Cookie Policy.
11. Third-party links
Our website may contain links to other websites. We are not responsible for the privacy practices of those sites.
12. Contact details
If you have any questions about this Privacy Policy or how your data is handled, please contact us:
Opal & Ora Ltd
Email: hello@opalandora.co.uk
125 Sunnyside Parc
Illogan
Redruth
England
TR15 3LY
13. Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.
The most current version will always be available on our website.
