Privacy

Who we are

Camilla Anderson, of Calle Doctor Castelo 44, 28009 Madrid, Spain, operating as ORELA, is responsible for the personal data described here. You can reach us about anything on this page at studio@orelahome.com.

ORELA is currently run by its founder as an individual. When it is incorporated as a company in Spain we will update this section to name the company and its registration number. How we handle your data will not change because of it.

We process personal data under the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 (LOPDGDD), and the Spanish Law on Information Society Services (LSSI-CE, Law 34/2002).

What we collect, and why

Your answers about your taste

When you answer our questions we store what you chose — tone, era, how full you like a room to feel, and so on — along with the room type, its rough size, who lives there and how hard the room needs to work. We use it to match you to a room design and to decide which rooms to design next. We ask because you asked us to design something for you.

Your email address

Only if you give it to us, at the end, to join the waiting list. We use it to write to you about your room. We do not sell it, and we do not send anything you did not ask for.

Your Pinterest board, if you connect one

Covered in full in the section below. Optional, and everything on the site works without it.

How you use the site

Pages visited, actions taken, roughly where you are (from your IP address), your browser and device, and the site you came from. Our analytics can also record how you move through a page, including session replay. None of this runs unless you have allowed it — see 'Cookies and tracking, plainly' below.

Which piece you clicked

If you click through to a retailer, we record that an outbound click happened, as an anonymous event, so we know which pieces people want. You then land on the retailer's own site, with its own privacy policy and its own cookies.

Anything you write to us

If you email us we keep your message and your contact details so we can reply and keep a record of the exchange.

Partner and supplier enquiries

If you apply to work with us we store what you submit on that form, including your consent to us keeping it, so we can reply.

Why we are allowed to

Under the GDPR we need a lawful basis for each use of your data. Ours are set out below. Where the basis is your consent you can withdraw it at any time, and withdrawing does not undo what we did before you asked.

Your answers, your taste profile, your email

Your consent, given when you start the quiz or hand over an address. You choose to start, you choose whether to leave an address, and you can withdraw either by writing to us.

Connecting a Pinterest board

Your explicit consent, given at the moment you connect.

Analytics, session replay, and the advertising tag

Your consent, asked for before anything loads and withdrawable at any time from 'Cookie settings' at the foot of any page.

Essential cookies, and keeping the site working and secure

Our legitimate interest in running a service that functions and is not overrun by spam.

Replying to you

Our legitimate interest in answering you, or steps taken at your own request.

Professional contact details for suppliers and partners

Our legitimate interest in building a supplier network. See 'Suppliers, brands and partners' below.

Tax, accounting, and lawful requests

Our legal obligations.

Cookies and tracking, plainly

Nothing that measures or tracks you runs until you allow it. When you first arrive we ask, and until you answer, neither our analytics nor the Pinterest advertising tag loads at all — they are not switched on and silenced, they are simply not there.

There are three groups. Essential covers remembering your cookie choice and keeping spam out of our forms; it is always on and it does not track you. Analytics and performance covers PostHog, on EU servers, including session replay. Advertising and social covers the Pinterest tag. The last two are off unless you turn them on.

Refusing is exactly as easy as agreeing — one button, in the same place, no maze. You can change your mind whenever you like through 'Cookie settings' at the foot of any page. Turning something off stops it immediately; the Pinterest tag, once loaded in a page, cannot be recalled from that page, so it stops from your next one.

You can also block all of it with any standard content blocker or your browser's tracking protection, and the site will work normally. Nothing about designing your room depends on them.

Affiliate links

Some of our links to retailers are affiliate links, through networks such as Awin. If you click one and buy something, we may earn a small commission from the retailer at no extra cost to you — the price you pay is the retailer's, never more. To make that work the affiliate network may set a cookie and record the referral.

Commission never decides what we show you. We recommend pieces we believe in, and we would rather tell you the arrangement exists than have you find it out.

Who else sees it

We do not sell your data and we do not share it for anyone else's marketing. These are the companies that process it on our behalf, under contracts that require them to protect it and use it only as we specify, and what each one gets:

Supabase

Our database, hosted in the EU (Frankfurt). Stores your answers, your email if you gave it, and the taste profile we build.

Vercel

Hosts the website and runs the code that serves it to you.

Anthropic

If you connect Pinterest, the images on the board you chose are sent to Anthropic's AI service so it can describe them — the colours, materials and style it sees. This is how we read your taste. We do not store the images, and neither we nor Anthropic use them to train any model.

PostHog

Website analytics and session replay, hosted in the EU.

Pinterest

Receives advertising-tag data about visits, if you allowed the advertising category. Separately, if you connect your account, Pinterest is where we read your chosen board from.

Awin

Affiliate-link tracking, when you click through to a retailer.

How long we keep it

Your taste profile and the product links we found are kept until you ask us to delete them. We are a young company designing our first rooms, and the answers people give us are what tell us which room to design next — so we keep them while that is still true, rather than setting an arbitrary clock we would only reset. We review what we hold periodically and remove what we no longer need.

If you join the waiting list, we keep your email until you unsubscribe or ask us to remove it.

Analytics data is kept for a limited period in a form that shows us trends, then deleted or aggregated. Correspondence is kept for as long as it takes to deal with your query and a reasonable period after.

We never keep the images from your Pinterest board. They are read, turned into a description of your taste, and let go.

Suppliers, brands and partners

As part of building ORELA's network we keep a list of brands and makers we might feature or work with. For those businesses we hold limited professional details — typically a business name, a publicly listed contact name, a business email and a website — either from public sources or from a partner application.

Our basis is our legitimate interest in building the right supplier network, and we keep it to the minimum. If you are a business contact and would rather we did not hold your details, or you want to see or remove what we hold, write to studio@orelahome.com and we will action it.

Where your data goes

Some of the companies above may process data outside the European Economic Area, including in the United States. Where that happens we rely on the safeguards the GDPR provides for it — the European Commission's Standard Contractual Clauses, or an adequacy decision — so that your data keeps an equivalent level of protection.

Children

ORELA is not aimed at children and we do not knowingly collect data from anyone under 14, the minimum age for valid consent under Spanish law. If you think a child has given us their data, tell us and we will delete it.

How we look after it

We take appropriate technical and organisational measures to protect your data: access controls on the database, encrypted connections, and measures against spam and abuse. No online service can promise to be completely secure, but we work to protect what you give us and to deal with any problem quickly.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop or restrict using it, or ask for it in a portable form. You can withdraw your consent at any time. You also have the right not to be subject to a decision made purely by automated processing that significantly affects you — our quiz personalises what we suggest, but it makes no such decision about you.

There is no form and no process — write to studio@orelahome.com and a person will answer, within one month, normally at no charge.

We do not yet have a button that does this for you. Until we do, email is the way. The quickest way off the waiting list is the unsubscribe link in any email we send you.

If you think we have handled your data badly you can complain to the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan, 6, 28001 Madrid, Spain (www.aepd.es). We would rather you told us first and gave us the chance to put it right, but it is your right either way.

Our relationship with Pinterest

ORELA uses the Pinterest API to read the board you choose. We are an independent company: not endorsed by, affiliated with, or sponsored by Pinterest. Pinterest is their trademark, not ours, and your use of Pinterest itself is governed by Pinterest's own privacy policy.

You can disconnect at any time from your Pinterest settings, by removing ORELA's access. That stops us reading anything further the moment you do it — the permission we hold simply stops working. Write to studio@orelahome.com and we will delete the taste profile and the saved links we derived from your board within 30 days. Disconnecting on its own stops the reading; the deletion is the part you have to ask us for, and we would rather say so than imply a button that does not exist.

We never sell, resell, or redistribute anything that came from Pinterest, or anything we derived from it. We never share it with another advertising service or a data broker. And we never use what we learned from your board to target you with advertising anywhere outside Pinterest.

Changes to this page

If we change what we collect or what we do with it, we will change this page and update the date at the top. If the change is significant and we have your email, we will tell you.

Connecting your Pinterest

If you connect Pinterest, here's exactly what happens.

You pick the board.

We only read the pins on the board (or boards) you choose. We don't read the rest of your account — the connection would technically allow it, and we choose not to.

What we do with it.

We look at the images to understand your taste, and we note the links behind the pins so we can find the pieces you've saved, or ones like them.

What we keep.

We keep the taste profile we build and the product links we find. We don't keep your pictures — we read them and let them go.

Who this is.

While we're reading, we don't know who you are — there's no account and no sign-in, just a temporary reference for your visit. If you join the waitlist, we connect what we read to your email so we can write to you when your room exists. That is the only thing that ever ties a taste profile to a person.

What we never do.

We never post to your Pinterest, never change anything on it, and never sell or share what we read.

Changing your mind.

You can disconnect Pinterest whenever you like, and ask us to delete the profile we built.