Privacy Policy

This privacy policy describes how ORVIA ("we", "us", or "our") collects, uses, and protects your personal information when you use our AC installation marketplace platform.

Who We Are

The data controller for the platform is REINA GROUP VENTURES LTD, a company registered in England and Wales (company number 15889328), Door 1b, First Floor, Nags Corner Wiston Road, Nayland, Colchester, England, CO6 4LT. For any privacy matter you can reach us at support@orvia.mk.

Information We Collect

We collect information you provide directly, including your name, email address, phone number, and WhatsApp contact details when you create an account. For installers and stores, we additionally collect business names, service areas, pricing information, and professional credentials such as license numbers.

How We Use Your Information

• To facilitate bookings between clients, installers, and stores
• To display public profiles for installers and stores
• To notify you about booking and order updates through in-app alerts and, if you enable them, push notifications
• To improve our platform and user experience

Cookies & Consent

The platform uses a small number of strictly necessary cookies and similar browser storage: a secure session cookie that keeps you signed in, a security cookie that protects forms, a cookie that remembers your language preference, and local settings such as your theme and your cookie choices themselves. These are required for the platform to work and are always active.

For anything beyond that, we ask first. When you first visit, a consent banner lets you accept or reject optional cookies by category:

• Necessary — sign-in, security, language, and booking features. Always active.
• Analytics — would help us understand how the site is used, for example through a consented analytics tool. Set only with your permission. Not currently in use.
• Marketing — advertising tools (such as Meta) that measure our campaigns and show more relevant ads. Set only with your permission.

Your choice is stored in your browser, not on our servers, and applies until you change it or until our cookie practices materially change, in which case we ask again. You can change or withdraw your consent at any time via "Cookie settings" in the page footer; withdrawal stops the affected tools.

If you consent to Marketing cookies, the Meta Pixel may store the "_fbp" cookie on our site (and "_fbc" if you arrive from a Meta ad). Meta uses these to measure our campaigns and improve ad relevance; they typically expire after about 90 days. Without your consent the pixel does not run and these cookies are not set. If you withdraw consent, we stop the pixel and delete these cookies from our site; information Meta has already collected is governed by Meta’s own privacy policy.

For personal data collected through the Meta Pixel, we and Meta Platforms Ireland Limited act as joint controllers. We are jointly responsible for collecting this data on our site and transmitting it to Meta. Within that arrangement, we are responsible for obtaining your consent before the pixel runs and for providing you with this information; Meta is responsible for all subsequent processing of the data — including how it is stored, used, and shared — and for responding to your privacy requests in relation to that processing. How Meta processes this data, and the rights you have with Meta, are described in Meta’s Privacy Policy. The allocation of data-protection responsibilities between us is set out in the Meta Page Controller Addendum and the Meta Business Tools Terms.

Analytics & Error Monitoring

We use Vercel Analytics and Speed Insights to understand aggregate usage and performance of the platform. We use Sentry to detect and diagnose errors; when an error occurs, Sentry may record a masked replay of the affected screen with text, inputs, and media hidden, and personal details are scrubbed before sending. We also record product usage events (such as pages viewed and bookings started) linked to your account to understand how the platform is used. We rely on these as necessary operational telemetry for running and securing the service; they are not advertising tools and do not build advertising profiles.

The platform also includes Google Tag Manager, which loads only on the production site. Marketing or analytics tags inside it run only in line with the consent you give through the cookie banner — with no consent, no such tags run at all.

Push Notifications

If you enable push notifications, we store the subscription details your browser provides so we can deliver notifications to your device. You can disable push notifications at any time in your browser or device settings.

Emails

We send account emails such as address verification and password reset. We may also send occasional reminder emails if your account has been inactive; every such email includes a one-click unsubscribe link, and you can opt out at any time.

Technical Data

We use your IP address to protect the platform against abuse, such as rate limiting. For this purpose it is processed by our infrastructure provider Upstash, including short-lived request counters and abuse-protection analytics. Administrative actions on the platform are also recorded in an audit log, which may include the IP address of the administrator performing the action.

Data Sharing

Contact details (phone and WhatsApp) are shared between booking participants to enable coordination. Public installer and store profiles are visible to all platform visitors; installer contact details are shown only to signed-in users.

Service Providers

We rely on a small number of service providers to run the platform, each processing data on our behalf: Supabase (database, authentication, and file storage), Vercel (hosting and analytics), Sentry (error monitoring), Resend (email delivery), Upstash (abuse protection), and Railway (notification delivery).

Data Security

We use industry-standard security measures, including encrypted connections and secure authentication, to protect your data. Access to your data is protected by strict access controls.

Data Retention

We keep your data while your account is active. When an account is deactivated, the profile is hidden from the platform and access is disabled, but booking, order, and review records may be retained to preserve the integrity of the platform and to meet legal obligations.

Your Rights

You can update your profile information at any time through your account settings. You may request access to, correction, or deletion of your personal data by emailing support@orvia.mk. Deletion requests are honored by deactivating the account and removing it from public view; certain records may be retained where we are legally required or have a legitimate need to keep them.

Contact

For privacy-related inquiries, contact us at support@orvia.mk.