Privacy Policy

Last updated: please refer to the date shown on this page when you visit it.

This Privacy Policy explains how Xoruwu ("we", "us", "our") collects and uses personal data when you visit our website and use the contact form on it. We are based in the United Kingdom and we process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to handling your information fairly, lawfully and transparently.

1. Who we are

Xoruwu provides a mobile app for tracking expenses on household pets. For the purposes of data protection law, Xoruwu is the controller of the personal data described in this policy.

Company name: Xoruwu
Address: 125D Cotham Hill, Bristol, BS7 2YF, United Kingdom
Email: [email protected]
Phone: +44 117 342 1775

2. What personal data we collect and why

The only way this website collects personal data directly from you is through the form on the site. When you submit the form, we may collect:

your name;
your email address;
any other details you choose to include in the form or in your message, such as a telephone number or information about your enquiry.

We use this information only to:

read and respond to your enquiry or request;
provide information you have asked for about our app;
keep a record of our correspondence with you in case of follow-up questions or disputes.

Please do not include sensitive information, such as health or financial account details, in the form. We do not need it to answer your enquiry.

3. Legal basis for processing

Under Article 6 of the UK GDPR, we must have a lawful basis for using your personal data. We rely on the following:

Purpose	Lawful basis
Responding to your enquiry submitted through the form	Our legitimate interests in answering the people who contact us (Article 6(1)(f)), or, where you are asking about entering into a service with us, steps taken at your request before entering into a contract (Article 6(1)(b))
Keeping a record of correspondence	Our legitimate interests in maintaining accurate records and handling any later queries or disputes (Article 6(1)(f))
Storing your cookie consent choice and running advertising measurement after you consent	Your consent (Article 6(1)(a)), and, for the cookie itself, the Privacy and Electronic Communications Regulations (PECR)

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and freedoms and concluded that they are not, given the limited and expected nature of the processing.

4. Cookies

This website sets one cookie only.

Cookie name	Purpose	Duration
privacy_state	Stores your cookie and privacy consent choice so that we do not ask you again on every visit	One year

We do not use analytics on this website. We do not set session cookies or other tracking cookies.

Advertising measurement runs only after you have given consent, and only on the confirmation page. If you do not consent, it does not run. You can change or withdraw your choice at any time by clearing the "privacy_state" cookie in your browser settings, after which you will be asked for your choice again.

5. How long we keep your data

Form submissions and related correspondence: we keep these only for as long as needed to deal with your enquiry and for a reasonable period afterwards in case of follow-up questions. Unless a longer period is required to establish, exercise or defend legal claims, we delete them within 12 months of the last contact.
The "privacy_state" cookie: stored in your browser for one year, after which it expires.

6. Who we share your data with

We do not sell your personal data. We share it only where necessary:

with service providers that help us run this website and our email, acting on our instructions and under appropriate contractual safeguards;
with professional advisers, such as lawyers or accountants, where needed for legitimate business purposes;
with public authorities or other parties where we are legally required to do so.

If we ever transfer personal data outside the United Kingdom, we will make sure an appropriate safeguard is in place, such as a UK adequacy regulation or the UK International Data Transfer Agreement or Addendum.

7. Your rights

Under the UK GDPR you have the following rights regarding your personal data:

Right of access: to ask for a copy of the personal data we hold about you.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to ask us to delete your data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
Right to data portability: to receive certain data in a structured, commonly used format.
Right to object: to object to processing based on our legitimate interests.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

How to exercise your rights

To exercise any of these rights, email us at [email protected], or write to us at 125D Cotham Hill, Bristol, BS7 2YF. We may need to verify your identity before acting on a request. We will respond within one month of receiving your request, and we do not normally charge a fee. If a request is particularly complex, we may extend this period by up to two further months and will tell you why.

8. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can find its contact details at ico.org.uk.

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, but we work to keep your information safe and limit access to those who need it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The current version will always be available on this page, and we encourage you to review it periodically.

11. Contact us

For any question about this policy or about how we handle personal data, please contact us:

Xoruwu
125D Cotham Hill, Bristol, BS7 2YF, United Kingdom
Email: [email protected]
Phone: +44 117 342 1775