Privacy Policy

Orenza is a school-readiness app for parents and guardians in Ireland. It helps you record what each child needs for school, track how ready each child is for the term, and buy or pass on good-quality second-hand school items from other parents.

When you create an account we hold your email address, authentication records, and the display or family name you choose. If you sign in with a third-party provider we receive the basic account identifiers that provider returns.

You may add a child profile containing a first name or nickname, school year or class level, school, and optional sizes. We do not ask for a child's date of birth, address, photograph, or contact details, and children do not hold their own accounts.

All child information is supplied and managed by the parent or guardian who holds the account. You can edit or delete a child profile in the app at any time.

We store the school you select, the items you record as needed, their status (needed, already owned, sorted), and any sizes you enter. This is what generates readiness scores and matches to other parents' listings.

If you list an item we hold its description, condition, size, price, school association and any photographs you upload. Listings and their photographs are visible to other users of the app.

Messages sent through the app are stored so that both people in a conversation can read them. Our team may review specific conversations where a report is made or where we need to investigate safety, fraud or misuse.

For each order we hold the item, the buyer and seller, amounts (item price, buyer fee, any school credit applied), order status, timestamps, handover confirmation, and any cancellation or refund record.

Card details are never entered into or stored by Orenza. Payments are handled by our payment provider, Stripe, which processes card data on its own systems. We receive confirmation of payment status and provider references, not card numbers.

Where an item is handed over in person, we hold the confirmation record (including the handover code or scan event and its time) so that both parents and our team can see that the item changed hands. If postage is used we hold the delivery address you provide.

Sign-in is provided through our backend authentication service, and optionally through a third-party sign-in provider you choose. Those providers receive the information needed to authenticate you.

We create in-app notifications and match alerts about your needs, orders and messages. You can turn off match alerts for a specific item in the app.

Our systems keep technical records such as error reports, request logs, and security and moderation events. These help us keep the service working and protect users from misuse.

• to run your account and keep you signed in;
• to show each child's needs and readiness;
• to match needs with listings from other parents;
• to enable messaging, orders, handover and refunds;
• to prevent fraud, abuse and unsafe listings;
• to keep the service secure, reliable and supportable.

Requires legal confirmation: the lawful basis assigned to each purpose has not yet been legally confirmed.

Other users see what you choose to publish: your listings, your public display name, and the messages you send them. Beyond that we share information with the service providers that operate Orenza on our behalf — our hosting and database provider, our payment provider, and error-reporting infrastructure. We do not sell your information.

Requires legal confirmation: the full processor list, contract terms and any transfer of data outside the EU/EEA have not yet been legally confirmed and must not be assumed either way.

We keep account, listing and order records for as long as your account is active and for as long as we need them for financial, safety and dispute-handling reasons.

Our approved pilot retention schedule sets a period for each category of information. The most significant periods are: account, family and child information is deleted or anonymised within 30 days of a validated account-closure request; listing photographs are deleted within 90 days of a completed or cancelled transaction, and immediately when an unsold listing is deleted; notifications are deleted after 90 days; messages are deleted or anonymised 24 months after the last message or the related transaction, whichever is later; safety reports and moderation records are kept for 24 months after the case is closed; first-party product-usage events are kept in identifiable or pseudonymous form for no more than 13 months; and the minimum accounting and transaction records — orders, payment references, audit events and credit records — are kept for 6 years where a legal or accounting obligation applies. Retention is extended only for information genuinely needed for a specific dispute, investigation or legal hold. Backups and platform logs are held on our providers’ own cycles.

Requires legal confirmation: these periods come from our internal pilot data-protection assessment and have not yet been reviewed by a qualified adviser.

You can request deletion of your Orenza account through your account settings or by contacting us at support@orenza.ie.

When your account is deleted, we will delete or anonymise personal information that we no longer need, including information associated with your profile and, where applicable, family and child profiles, saved preferences and other marketplace activity.

Some information may need to be retained after account deletion. This can include limited records relating to purchases, sales, payments, refunds, cancellations, disputes, seller payments, account credits, fraud prevention, security and audit history. We retain this information only where we have an appropriate legal or operational basis to do so, and only for the period set for that category in our retention schedule — it is not kept indefinitely.

Where records must be retained, we aim to minimise the personal information associated with them. For example, Orenza may retain a transaction record while removing or anonymising profile and family information that is no longer required.

Messages forming part of a conversation with another Orenza user may need to remain as part of that user's transaction or communication history. Where appropriate, content associated with a deleted account is removed or anonymised instead. Remaining message records are deleted or anonymised 24 months after the last message or the related transaction, whichever is later.

If there is an unresolved transaction, payment, refund, cancellation, dispute or seller payment associated with your account, completion of an account-deletion request may be delayed until the outstanding matter has been resolved. We will retain only the information necessary for that purpose.

Deleting your Orenza account does not necessarily result in the immediate deletion of records held independently by payment service providers such as Stripe. Payment providers process and retain information in accordance with their own legal obligations and privacy policies.

You may contact support@orenza.ie if you have questions about account deletion or the handling of your personal data.

Requires legal confirmation: this wording, and the retention periods it summarises, have not yet been reviewed by a qualified adviser.

You have rights over your personal information, including access, correction, deletion, restriction, objection and portability, subject to law.

You can edit your children, needs, listings and messages directly in the app, and you can delete your account from your account settings. There is currently no self-service data export. To make an access, correction or export request, email support@orenza.ie and we will handle it manually.

Access to data is controlled at the database level so that parents can only reach their own family's records. Administrative actions are restricted to authorised staff accounts. Payment card data never reaches our systems. No service can promise perfect security, so please use a strong, unique password.

We will update this page when the app changes and will change the effective date above. If a change materially affects how we use your information, we will tell you in the app.

Questions or requests about this policy: support@orenza.ie.

Requires legal confirmation: the legal entity name, registered address and any data-protection representative details still need to be added once confirmed.