SORELIA — Privacy Policy

1. Who we are

SORELIA EDITIONS LTD, trading as SORELIA, is the controller responsible for the activities described in this notice.

Company number: 17536322. Registered in England and Wales.

Registered office: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.

Website: https://sorelia.co.uk

For privacy questions or rights requests: [email protected].

Our registered office is our statutory company address, not our customer correspondence, parcels or returns address. Please contact us by email instead.

2. What information we receive

When you join our email updates list, we collect the email address you enter and your affirmative consent choice. We may retain a record of the date and time you joined and the wording or version of the notice you saw, so we can respect and demonstrate your choice.

When you contact us, we receive your email address and the information you include in your message.

When you use our website, our hosting and security provider may process technical information such as IP address, browser information, request details and security events in order to deliver and protect the site. We do not ask visitors to upload personal photographs, video or audio through our public marketing registration form.

3. Why we use it and our lawful bases

We use email-list information to send occasional SORELIA news, product and launch updates only when you have actively agreed to receive them. Our lawful basis is your consent; electronic-marketing rules also apply.

We use enquiry correspondence to respond to questions and deal with issues. Our basis is our legitimate interest in operating the business and responding to contacts, or taking steps relating to a contract where appropriate.

We use necessary website request and security information to deliver the website, prevent misuse and investigate problems. Our basis is our legitimate interest in providing and protecting a reliable service, subject to applicable safeguards.

Where we must keep or disclose information to comply with the law, our basis is the relevant legal obligation.

4. Marketing choice and how to unsubscribe

Joining the email list is optional. The registration form asks you to tick an initially unchecked box: “I agree to receive occasional SORELIA news and product updates by email.”

We use that permission only for the updates described at sign-up. We do not assume that emailing us, placing an order in future or subscribing to an older MORE list automatically gives us permission to send new SORELIA marketing.

You can withdraw consent at any time. Each marketing email will offer a simple way to unsubscribe, and you can also ask us to stop by emailing [email protected] with “Unsubscribe” in the subject. We will stop using your address for marketing as soon as we process your request and keep only any minimal record necessary to prevent accidental further contact. Withdrawing consent does not affect earlier lawful processing.

You have an unconditional right to object to the use of your personal information for direct marketing.

5. Who handles information for us

Cloudflare supports website delivery, availability and security. monday.com is used for managing our website interest-list registrations. Google Workspace supports our business email correspondence. These providers process information on our behalf for the relevant service, subject to appropriate contractual and security arrangements.

We may share information when reasonably necessary to comply with the law or protect rights. We do not sell personal information to advertisers. We do not use your personal family media or correspondence in advertising without a separate appropriate permission.

Some service providers may process information outside the UK. Where personal information is transferred internationally, the relevant legal protection must apply, such as an adequacy arrangement or UK-approved contractual safeguards. You can request details of the applicable safeguard from [email protected].

6. How long we keep information

We keep active email-list and consent information while you remain subscribed and the updates are relevant. We review whether continued retention is necessary regularly and at least annually. When you unsubscribe, we remove your details from active marketing use and may retain a limited suppression record for as long as necessary to honour your choice.

We keep enquiries and related correspondence only for as long as needed to answer the question, handle related follow-ups or meet legal obligations, reviewing continued need periodically. Website technical and security logs are held only as long as justified for service operation, security and applicable legal requirements, subject to the hosting provider's settings.

We delete, anonymise or securely dispose of information when we no longer need it for a lawful purpose.

7. Your rights

Depending on the circumstances, you can ask to access, correct, erase, restrict or transfer personal information we hold about you, or object to certain uses. If we rely on consent, you can withdraw it at any time. Some rights are subject to legal limits.

Email [email protected] to make a request. We may need to verify that the information relates to you.

If you have concerns about our handling of your information, please contact us. You can also complain to the Information Commissioner's Office at https://ico.org.uk.

8. Cookies and other website technology

Our public marketing pages do not currently use advertising or analytics cookies. Our hosting provider may use technical measures to deliver and protect the site, including necessary security functions and request logs. Those activities are distinct from optional advertising tracking.

If we introduce non-essential cookies or other storage/access technologies, we will explain their purpose and offer any consent or other choices required by law. The Christmas flyer QR request counter is not an active visitor-profiling service.

Christmas flyer statistics

When someone opens the QR link on our Christmas flyer, we use Cloudflare Analytics Engine to record a simple statistical event so we can understand how often the link is used.

The event contains a fixed campaign label, event type and timestamp. We do not include IP addresses, device identifiers, cookies, email addresses, referrers or information about individual visitors in these events.

These figures count requests, including repeat visits and automated requests. They do not identify individual people or measure purchases.

Cloudflare retains these statistical events for three months. Separate website hosting and security processing is explained elsewhere in this Privacy Policy.

9. Changes and future Christmas services

We may update this notice when the website or our services change; the latest version will be available from our website. Before customers pay for Christmas cards or upload media into private QR-linked Moments, we will provide accurate additional privacy information about those services, including media access, suppliers and retention.

Contact: [email protected]