Last updated 4 September 2026.
Individual Entrepreneur Rustam Alibekov, registration number 304766386, Nino and Ilia Nakashidze Street N1, Building N3, Flat N3, Krtsanisi District, Tbilisi, Georgia. We are the controller of the data described here. Write to support@example-orna.test about any of it.
EU representative (GDPR Article 27) and UK representative (UK GDPR Article 27) must be appointed and named here before ORNA is offered in the EEA or the UK. They are not appointed yet, which is one reason this build is not for sale.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Your quiz answers – eye, hair and skin colour, jewellery preference, contrast, body outline, height, style preferences, budget band | To work out your palette, your outline and your direction. This is the product. | Performance of a contract | Until you delete your account |
| Photographs you upload of yourself in an outfit | To write notes on the colour, cut and proportion of what you are wearing | Consent, given each time you upload | Deleted once the notes are written, and in any case within 30 days |
| Email address, if you give one | To send your palette, and receipts | Contract, and consent for anything else | Until you delete it |
| Payment record – amount, date, last four digits, provider reference | To bill you, to refund you, and to answer “what was this charge?” | Contract and legal obligation | 7 years, as tax law requires |
A photograph you upload is read for what you are wearing: the colours in the garments, where the lines fall, how the proportions sit. The output is written notes.
Our payment provider, for payments. Our hosting provider, because the files sit on their disks. Nobody else. There is no analytics on this site. No Google Analytics, no Meta pixel, no advertising tag, no session recorder. If that ever changes, this section changes first and we will tell you before it does.
Access, correction, deletion, portability, restriction, objection, and withdrawal of consent at any time. Use this page, which does it immediately, or write to us. We answer within 30 days. If we get it wrong you can complain to your national data protection authority.
If we change this policy in a way that affects you, we email you before it takes effect and keep the previous version linked at the bottom of this page. We will not change it silently, and “continued use” will not be treated as agreement to something you were never shown.