Privacy and cookies

Last updated: 13 August 2026

Who we are

Rora Studio is a coaching and education practice run by Rosanna Ranford, trading as Rora Studio. For any question about your information, contact us at hello@rorastudio.co.uk.

What information we collect

Information you give us:

Through the enquiry form: your first name, last name, email address, what you're enquiring about, and your message.
When you book a free introductory call: your name, email address, and anything you add to the booking.
If you email us directly: whatever you include.
If you become a client: whatever's needed to arrange and deliver your sessions.

Technical information involved in running the site:

If you accept analytics cookies, information about how you use the site, through Google Analytics.
A small amount of connection information is exchanged with the third-party services listed below simply by loading certain pages, whether or not you actively use those services. This is explained provider by provider below.

How we use it, and our lawful basis

We use your enquiry, booking, and email details to reply to you, to take the steps you've asked for towards a service, and, once you're a client, to arrange and deliver sessions and keep appropriate records of our work together. This is necessary to take steps at your request before we work together, and to perform that work once we do.

Where you've accepted analytics cookies, we use Google Analytics to understand how people use the site, so we can improve it. This is based on your consent, which you can withdraw at any time, see "Cookies and similar technology" below.

We rely on our legitimate interest in running a working website to load fonts correctly and keep the site secure and functional; where we do, we've limited this to what's needed for those purposes. We don't use Google Ads or any other advertising or ad-measurement tool, and we don't sell your data or use it for third-party advertising or retargeting.

If you mention health or diagnosis-related information

Rora Coaching offers ADHD coaching for adults, so people sometimes mention a diagnosis or other health information when they get in touch. Information like this is "special category data" under UK GDPR, which gets extra protection.

You don't need to include detailed medical or diagnostic information in your first message, a general outline of what you're looking for is enough, and there's space to go into more detail once we're speaking directly. If you do mention health or diagnosis-related information in an enquiry, we treat it with particular care and use it only to understand your enquiry and reply to you.

If you become a client, how we handle any ongoing health-related information as part of your sessions is something we'll agree with you directly as part of that relationship, rather than something this enquiry-stage notice can cover in advance.

The tools we use

We use a small number of third-party services to run the website and provide bookings and enquiries. Some process personal information on our behalf; others receive limited technical information in order to provide their service.

Tally powers our enquiry form, embedded directly on our Contact page. Loading that page connects to Tally so the form can display, this happens as soon as the page loads, not only if you choose to open the form separately. Tally is based in the EU (Belgium); information you submit through the form is processed by Tally as our processor, and we remain in control of that data. Sending information to Tally is a restricted transfer under UK data protection law, but the UK's adequacy regulations cover the whole EEA, so no extra safeguard is needed for it.
Calendly powers our intro-call booking. When you click "Book a free intro call," you leave our website and book directly on Calendly's own site; nothing from Calendly loads on our pages before that point. Calendly processes the booking details you provide (name, email, and anything you add) as our processor. Calendly is a US company; its data processing agreement relies primarily on its self-certification under the UK Extension to the EU-US Data Privacy Framework for this transfer, with Standard Contractual Clauses and the UK Addendum as a fallback if that framework ever stops being available.
Krystal hosts our website and our email, under its own data processing agreement with us. Krystal is a UK-registered hosting provider.
Google Fonts supplies the site's typefaces (Sansita and DM Sans). Loading any page sends a request directly to Google's servers, which may log your IP address, the font requested, and basic browser information, purely to serve the right font. This doesn't set cookies. Where this involves data leaving the UK, Google applies its own standard contractual safeguards for that transfer.
Google Analytics helps us understand how visitors use the site, only if you accept analytics cookies. The same international-transfer point applies if you accept.

Cookies and similar technology

Your cookie choice is remembered in your browser's local storage rather than a cookie. This is necessary for the banner to work as intended, so it doesn't need separate consent.

If you click Accept, Google Analytics sets cookies (typically named _ga and _ga_<an id>) to help us understand how visitors use the site. These are only set if you choose to accept them, and we don't use any advertising or ad-measurement cookies alongside them.

Loading the Contact page connects to Tally so the enquiry form can display. Booking opens on Calendly's own website, so nothing from Calendly runs on our site itself.

You can change your mind at any time using "Cookie settings" in the footer, which reopens the banner so you can accept or reject again. If you reject, or withdraw consent after previously accepting, we stop using Google Analytics and remove its cookies from your browser. You can also block or delete cookies in your browser settings at any time.

How long we keep it

We keep enquiry details for up to two years after our last contact with you.

If you become a client, we keep the records we need for as long as they're needed for the service, and for any relevant legal, insurance, professional, or safeguarding requirements. Different types of record, for example session notes, contracts, or invoices, may therefore be kept for different periods rather than one fixed rule for everything.

Your rights

What rights apply to you depends partly on why we're using your information. In general, you can ask us for access to, or a copy of, the information we hold about you; ask us to correct it; ask us to delete it or restrict how we use it; and object to our use of it. Where we rely on a contract or your consent, you can also ask for a copy of your data in a portable format.

Where we rely on your consent, currently just analytics cookies, you can withdraw it at any time (see "Cookies and similar technology" above), which won't affect anything we did before you withdrew it.

Email hello@rorastudio.co.uk and we will respond. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Automated decision-making

We don't use automated decision-making or profiling that has a legal or similarly significant effect on you.

Changes

We may update this notice from time to time. The date above shows when it last changed.