Your privacy matters here.

Rerein is operated by Andie Butler, trading as Rerein. For UK data protection law, Andie Butler is the data controller for the personal information described in this policy.

Website: www.rerein.co.uk
Email: support@rerein.co.uk

Account and subscription information

• The account holder’s name, email address, phone number if supplied, login and membership details.
• The subscription selected, payment status, transaction references and billing history.
• A child’s first name or nickname, date of birth or age, and approved topics where an adult supplies these during set up.

Messages and enquiries

• Information you include when you email us, use a contact form, request support or work with Rerein.
• Please avoid including health information unless it is necessary for us to respond. Rerein is an educational service, not a medical or emergency service.

Website and device information

• Technical information such as IP address, browser type, device type, pages visited and cookie choices may be collected by Squarespace, MemberSpace and other services used to run the website.

Marketing preferences

• Your email address and preferences if you choose to receive news, resources or offers from Rerein.

Body OS uses your browser’s local storage to remember information such as a name or nickname, age, cycle entries, saved progress and the last talk opened. Those entries remain in that browser. They are not sent anywhere by the Body OS code.

Local storage is different from a Rerein account. It may remain after you log out, it will not automatically move to a new device, and it may disappear if you clear browser data, use private browsing or reset the browser.

Squarespace and MemberSpace may still process technical and account information at page level, including through cookies. See the cookies section below.

Where we rely on legitimate interests, those interests are running, securing and improving Rerein in a proportionate way. We consider the possible effect on you, with extra care where children may use the service.

Rerein and Body OS are designed to be useful to girls and young people, so children’s privacy is not treated as an afterthought. We aim to use the minimum information needed and put the child’s best interests first.

• A parent, carer or other authorised adult creates and pays for a Body OS subscription.
• We do not ask a child using Body OS to provide her own email address, phone number or payment details.
• Body OS personalisation and tracking entries stay in local browser storage as explained above.
• We do not use a child’s Body OS entries for advertising or profiling.
• If we learn that information was provided inappropriately, a parent, carer or child can contact us and ask us to review or delete information Rerein holds.

If a young person does contact us directly, we will handle the message carefully and may encourage them to involve a trusted adult where appropriate. We may need to act if there is a serious and immediate safeguarding concern or the law requires it.

We share only what is necessary with service providers that help Rerein operate, including:

• Squarespace, which hosts and operates the website and may support forms, site analytics and payments.
• MemberSpace, which manages membership access, account details and subscription status.
• Stripe and applicable payment services, which securely process payments. Rerein does not receive or store your full card number.
• Email, workspace, accounting and professional service providers where needed to communicate, maintain records or obtain advice.

These providers process information under their own terms and privacy information, or as processors acting for Rerein. We may also disclose information if required by law, to protect someone’s vital interests, to respond to a serious safeguarding concern, or in connection with a business reorganisation.

We do not sell or rent personal information.

Card payments are handled by our payment providers, including Stripe and payment services connected to Squarespace or MemberSpace. They collect and secure card details under their own privacy policies and payment security standards.

Rerein may receive limited transaction information, such as the payer’s name, billing contact details, amount, date, subscription status and a payment reference. We do not see or store the full card number or security code.

Cookies are small files a website places on a device. Some are necessary for the website, account login, security, checkout and cookie preferences to work. Other cookies may help measure website use or support marketing.

Where the law requires it, non-essential cookies should only be used after you choose to accept them through the website’s cookie banner. You can change your choice through the cookie settings on the website or in your browser.

Body OS also uses local storage for on-device preferences and entries. Local storage is explained in section 3 and can be removed through Body OS settings or your browser’s site-data controls.

We keep personal information only for as long as it is needed for the reason it was collected, and then delete or anonymise it where appropriate.

• Account and membership records: while the account is active and for a limited period afterwards to handle queries, disputes and legal responsibilities.
• Payment and accounting records: normally six years after the relevant financial year, where needed for UK tax and accounting obligations.
• General enquiries: normally up to 12 months after the enquiry is resolved, unless there is a reason to keep it longer.
• Marketing records: until you unsubscribe or withdraw consent, with a minimal suppression record kept so we remember not to contact you.
• Body OS local data: until it is removed in Body OS settings, the browser’s site data is cleared, or the browser removes it.

We may keep information longer if required by law, needed to establish or defend legal claims, or connected to an unresolved safeguarding issue.

Some technology providers may process information outside the UK. Where this happens, we require an appropriate legal safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with appropriate security measures.

We use proportionate technical and organisational measures to protect personal information. These include limiting access, using reputable service providers, account controls and secure payment processing.

No online system can be guaranteed completely secure. If a personal data breach creates a risk to people, we will assess it and notify the ICO and affected people where the law requires.

Depending on the circumstances, UK data protection law may give you the right to:

• ask for a copy of your personal information;
• correct information that is wrong or incomplete;
• ask us to delete information;
• ask us to restrict how information is used;
• receive certain information in a portable format;
• object to certain uses of information; and
• withdraw consent at any time where consent is our lawful basis.

These rights are not all absolute and the lawful basis can affect which rights apply. We may ask for enough information to verify identity before acting on a request. There is normally no fee.

Please contact us first at support@rerein.co.uk so we can try to put things right.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

We may update this policy when Rerein’s services, providers or legal responsibilities change. The latest version will appear on this page with its updated date. If a change significantly affects how we use personal information, we will provide a more prominent notice where appropriate.