How Oria Group handles personal information, including information sent through this website.
Oria Group Ltd is the parent company of Oria CM Ltd, Oria Care Ltd and Oria One Ltd. It is registered in England and Wales, Company No. 16209392, with its registered office at 3 Brindley Place, Birmingham, B1 2JB.
For the information described on this page, Oria Group Ltd is the controller. That means we decide how and why it is used, and we are responsible for it.
This policy covers this website, enquiries sent to Oria Group, people who register interest in a role or apply to work for Oria Group, and the people we deal with in running the group, such as partners, suppliers, investors and journalists.
It does not cover case management or care. Oria CM Ltd and Oria Care Ltd are separate controllers for the people they support and the people who work with them, and each has its own privacy policy on oria.cm and oria.care. Information about a case held in Oria One, the system they run on, is handled by Oria CM or Oria Care under those policies.
Please do not send health or case information through this website. To refer someone or discuss a case, contact Oria CM or Oria Care directly.
Enquiries. When you use the contact form, we collect your name, email address, organisation, role, organisation type, phone number if you give it, your message and the topic you chose. When you email one of our addresses, we collect what you send.
Careers. When you register interest, we collect your name, email address, the area you are interested in, your LinkedIn profile if you give it and anything else you add. When you apply for a role, we collect your CV and what you send with it, and notes from our conversations with you. If we offer you a role, we also check your right to work in the UK and take up references.
Business contacts. Names, roles, work contact details and correspondence for the people we work with.
Visiting this website. To show you the pages, our hosting providers receive your IP address and browser details. This website does not use cookies, analytics or tracking. Our cookie policy has the detail.
To reply to you and run our working relationships. Our legitimate interest in answering enquiries and running the group.
To keep you in mind for future roles. Your consent, given when you register interest. You can withdraw it at any time.
To consider your application. Taking steps at your request before entering into a contract with you, and our legitimate interest in hiring the right people. Right to work checks are a legal obligation.
To keep this website and our systems secure. Our legitimate interest, including the recognised legitimate interests set out in the Data (Use and Access) Act 2025.
To meet legal duties and deal with legal claims. Legal obligation, and our legitimate interest in establishing or defending claims.
We do not sell personal information, we do not send marketing unless you ask for it, and we do not make decisions about you by automated means.
Oria companies. If your enquiry or application is for Oria CM, Oria Care or Oria One, we pass it to that company so it can reply. Sharing between Oria companies follows the group's written data sharing protocol and is limited to what each company needs.
Service providers. Webflow hosts this website and receives form submissions. Google provides our email and documents through Google Workspace, and serves the fonts this website uses through Google Fonts. They act on our instructions under contracts that protect your information.
Others, where required. Professional advisers, and regulators, courts or the police where the law requires it.
Webflow and Google may process information outside the UK, including in the United States. Where they do, the transfer is covered by UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or by the ICO's International Data Transfer Agreement or Addendum.
Enquiries and business correspondence. Up to 24 months after our last contact, or longer where we need it for a contract or a legal claim.
Registered interest. 12 months, then deleted unless you ask us to keep it longer.
Applications. Six months after the role is filled if you are not appointed. If you join us, your application becomes part of your employment record.
Financial records. Six years, as the law requires.
Information sent through this website is encrypted in transit. Access to personal information is limited to the people who need it, and we require our providers to protect what they handle for us.
You can ask us for a copy of your information, and ask us to correct it, delete it, restrict how we use it or send it to you in a portable form. You can object to how we use it, and where we rely on your consent you can withdraw it at any time.
To use any of these rights, email hello@oriagroup.co.uk with 'Data protection' in the subject. There is no charge, and we reply within one month.
At its current scale Oria does not need a statutory data protection officer. Dejan Kojic, co-founder and chief executive, is the data protection lead for the group and reviews that position at least once a year. Oria CM Ltd (ZB863752) and Oria Care Ltd (ZB624539) are registered with the Information Commissioner's Office.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
This website is not aimed at children, and we do not knowingly collect information from children through it.
We update this policy when what we do changes. The date at the top shows when it last changed.
