Legal
Privacy Notice
How ORVIA Oversight Ltd collects, uses, stores and protects personal data, your rights over it, and how to contact us. ICO registration ZC152311.
Version 1.0 · effective 20 August 2026 · ORVIA Oversight Ltd, company 16123685. We review this document every twelve months, and sooner if the law or our practice changes.
Who we are
ORVIA Oversight Ltd is the data controller for the information described here. We are registered in England and Wales, company number 16123685, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE. We are registered with the Information Commissioner's Office under reference ZC152311. You can reach us at hello@orvia.org.uk or 0114 399 8231.
What this notice covers
It covers personal data we handle when you browse this site, make an enquiry, book a conversation, become a client, or appear in material a client sends us. It does not cover other organisations' websites we link to.
Information you give us directly
When you enquire or book, we collect your name, the organisation you act for if any, your email address, your telephone number if you give it, and whatever you choose to tell us about your situation. You control how much of that last part you share at first contact.
Information inside client material
Delivering an evidence review means reading documents you already hold. Those documents routinely contain personal data about other people, and often special category data such as health, and information about criminal allegations. We process it only to carry out the work you have instructed, we do not use it to build any wider profile, and we never use client material to train an artificial intelligence model.
Why we can lawfully hold it
For enquiries and client work our lawful basis is contract, or our legitimate interest in responding to someone who has approached us. For special category data our condition is usually the establishment, exercise or defence of legal claims, or your explicit consent where that is the more appropriate route. For safeguarding disclosures we rely on the substantial public interest condition for safeguarding of children and of individuals at risk. We will tell you which basis applies to your matter if you ask.
Who else sees it
Only the people who need to. Inside ORVIA that is the reviewer assigned to your matter and the named person who checks their work. Outside ORVIA we use a small number of processors for hosting, email and file storage, each under a written contract that forbids them using your data for their own purposes. We do not sell data and we do not share it for marketing. We will disclose information where the law requires it, or where there is a safeguarding duty to do so, and we will tell you unless telling you would itself create a risk.
Where it is held
Our systems are hosted in the United Kingdom and the European Economic Area. Where a supplier processes data outside that area, the transfer is covered by the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
Enquiries that do not become work are deleted after twelve months. Client files are kept for six years from the end of the matter, which matches the ordinary limitation period, then deleted. If you ask us to delete a file sooner and no legal duty requires us to keep it, we will.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interest, and ask for it in a portable format. Write to us and we will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
A note on requests about client material
If you appear in documents a client sent us, we hold that material on their instruction. Ask us and we will tell you who the controller is so your request reaches the right organisation, and we will handle any part of the request that is properly ours.
Cookies and analytics
This site sets no advertising cookies and runs no third-party advertising trackers. Any cookie present is strictly necessary to serve the page. If we later add analytics we will ask for consent first and update this notice.
Complaints
If something has gone wrong, tell us first at hello@orvia.org.uk and we will look at it properly. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113, and you do not have to come to us first.
Something here unclear?
Ask us plainly and we will answer plainly. hello@orvia.org.uk · 0114 399 8231