Last updated: September 27, 2026

Introduction

This Privacy Policy explains how Orianne Smith (“Orianne,” “I,” “me,” or “my”) collects, uses, and protects your information when you visit orianne.xyod.com (the “Site”), contact me, book a discovery call, purchase products or services, or otherwise interact with my brand.

By using the Site, you agree to this Policy. If you do not agree, please do not use the Site.

Who I am

Controller: Orianne Smith
Contact: hello@yourdomain.com
Location / applicable law: [[your city / country — e.g. [City], [Country]]]

Information I collect

Information you provide

• Name, email address, phone number, and message content when you use contact or booking forms
• Business or brand details you share for discovery calls, audits, or projects
• Billing and shipping details if you purchase through the shop (processed by my payment provider)
• Newsletter or waitlist details if you subscribe

Information collected automatically

• IP address, browser type, device type, and general location
• Pages viewed, time on site, and referral source
• Cookies and similar technologies (see Cookies below)

Information from third parties

• Payment confirmation and limited transaction data from processors such as [[Stripe / PayPal / WooCommerce payment gateway]]
• Analytics data from tools such as [[Google Analytics / other, if used]]

I do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact me and I will delete it.

How I use your information

I use your information to:

• Respond to inquiries and schedule discovery calls
• Deliver brand strategy, guidance, and related services
• Process orders, payments, and customer support
• Improve the Site, content, and user experience
• Send service-related messages (booking confirmations, invoices, project updates)
• Send marketing emails only if you have opted in (you can unsubscribe anytime)
• Comply with legal obligations and protect against misuse or fraud

Legal bases (where required, e.g. GDPR)

I process personal data where one or more of the following apply:

• Contract — to provide services or fulfill an order you requested
• Consent — for optional marketing and non-essential cookies
• Legitimate interests — to operate, secure, and improve the Site and business, in ways that do not override your rights
• Legal obligation — where the law requires it (e.g. tax records)

Sharing your information

I do not sell your personal data.

I may share information with trusted providers who help me run the business, such as:

• Website and hosting providers
• Email and form tools
• Payment and e-commerce platforms
• Analytics or marketing tools (if enabled)
• Professional advisors (accountant, lawyer) when needed

These parties may only process data as needed to provide their services. I may also disclose information if required by law, or to protect rights, safety, or the integrity of the Site.

International transfers

If you access the Site from outside [[your country]], your information may be processed in [[your country]] or other countries where my providers operate. Where required, I use appropriate safeguards for such transfers.

Cookies

The Site may use:

• Essential cookies — needed for basic function (e.g. cart, security, login)
• Analytics cookies — to understand how the Site is used
• Marketing cookies — only if enabled and, where required, with your consent

You can control cookies through your browser settings. Blocking some cookies may affect Site features.

Data retention

I keep personal data only as long as needed for the purposes above:

• Inquiry and project correspondence: typically up to [[2–3 years]] after last contact, unless a longer period is needed for ongoing work or legal reasons
• Orders and invoices: as required by tax and accounting law
• Marketing lists: until you unsubscribe or ask for deletion

Your rights

Depending on your location, you may have the right to:

• Access the personal data I hold about you
• Correct inaccurate data
• Request deletion
• Restrict or object to certain processing
• Request data portability
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with your local data protection authority

To exercise these rights, email [[your privacy email]]. I may need to verify your identity before responding.

Security

I take reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure; I cannot guarantee absolute security.

Third-party links

The Site may link to other websites. I am not responsible for their privacy practices. Review their policies before sharing information.

Changes

I may update this Policy from time to time. The “Last updated” date will change when I do. Continued use of the Site after changes means you accept the updated Policy.

Contact

Questions about this Privacy Policy:
Email: hello@yourdomain.com
Website: orianne.xyod.com