Legal

Privacy Policy

Effective September 21, 2026 · Last updated September 21, 2026

1. Who we are

ORENIDUS, LLC is a California limited liability company. It is the entity responsible for the personal information described in this policy.

ORENIDUS, LLC operates under several trade names, also called fictitious business names or “DBAs.” Each one is a brand, not a separate company. They are: ORENCORE, LUXBERG, HEFE GROUP, ORENID GROUP, ORENTRA ACADEMY, ORENVIA GROUP, and 888 SOCIETY.

When you do business with any of those brands, you are doing business with ORENIDUS, LLC. We tell you this plainly because you have a right to know which legal entity holds your information and who is accountable for it.

2. What this policy covers

This policy covers personal information that ORENIDUS, LLC collects through:

• this website, orenidus.com;
• our internal business platform at app.orenidus.com, which is used by our own personnel;
• email, telephone, and text message correspondence with us; and
• the ordinary course of providing services under any of our brands.

Each brand may publish its own privacy notice describing practices specific to that service. Where a brand notice and this policy both apply, the brand notice governs that service, and this policy governs everything else. Neither notice reduces the rights described in Section 10.

This policy does not cover websites or services operated by other companies, even if we link to them or use them as vendors. Their own policies apply to what they do.

3. This website

We want to be specific rather than vague, because most privacy policies describe tracking that this site does not do.

orenidus.com is a single informational page. It contains no forms, no login, no shopping cart, and no comment section. It does not run analytics, advertising pixels, session recording, or behavioral tracking of any kind. It sets no cookies. It ships a Content Security Policy that blocks all JavaScript from executing, including scripts we did not write. There is nothing on this page that follows you anywhere.

The only personal information this page can produce is what you choose to send us when you click the contact address and write to us yourself.

Hosting and server logs

The site is hosted and protected by Cloudflare, Inc. Like any web host, Cloudflare processes technical request data — IP address, approximate region, browser type, requested page, timestamp — in order to deliver the page and to defend against attacks, bots, and abuse. We use this for security and reliability. We do not use it to build a profile of you, and we do not combine it with anything else.

Fonts

The page loads typefaces from Google Fonts. Loading a font means your browser makes a request to Google's font servers, which discloses your IP address to Google. If you prefer to avoid this, most browsers and privacy extensions can block third-party font requests; the page remains fully readable without them.

4. Information we collect

Information you give us

• Contact details — name, email address, telephone number, mailing address, and business name.
• Correspondence — the content of emails, text messages, voicemails, and form submissions you send us, including anything you choose to attach.
• Client, member, and student records — the information needed to provide a service you engaged us for, such as the service selected, your agreement, scheduling, and our notes about your matter.
• Documents you provide — files you send us in connection with a service.

Information we generate

• Service records — what we did, when, and for whom; invoices, receipts, and payment status.
• Communication records — a log of our correspondence so that whoever helps you next knows what has already happened.

Information we do not want

Please do not send us government identification numbers, full financial account numbers, or health information unless we have specifically asked you for them for a stated purpose. If you send us something we did not ask for, we may delete it.

Payment information

When you pay us, the payment is processed by an independent payment processor. We do not receive or store your full card number. We receive confirmation that a payment succeeded or failed, the amount, and limited identifying detail such as the last four digits and card brand.

5. How we use it

• To answer you when you contact us.
• To provide, schedule, and deliver the services you engaged us for.
• To prepare agreements, invoices, and receipts, and to collect payment.
• To keep the business records we are required to keep, including tax and accounting records.
• To communicate about your account, your matter, or a service you are receiving.
• To send information about our services, where you have asked for it or where the law otherwise permits it. You can stop these at any time (Section 12).
• To protect our systems, detect and prevent fraud and abuse, and enforce our agreements.
• To comply with the law and to respond to valid legal process.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

6. Who we share it with

We share personal information only in these circumstances:

We do not give your information to data brokers, advertising networks, or list vendors.

7. We do not sell your information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in California law. We have not done so in the twelve months before the date of this policy.

We also do not sell or share the personal information of anyone we know to be under 16 years of age.

8. How long we keep it

We keep personal information only as long as we have a reason to:

• Inquiries that do not become business — generally up to two years, then deleted.
• Client, member, and student records — for the length of the relationship and afterward for as long as we may need them to resolve a dispute, enforce an agreement, or meet a legal or tax obligation. In most cases that is at least four years after the relationship ends, and longer where a law, an insurer, or an unresolved matter requires it.
• Financial and tax records — for the period required by federal and California law.
• Server and security logs — short-term only, as set by our hosting provider.

When a record reaches the end of its period and we have no remaining reason to keep it, we delete it or render it unreadable.

9. How we protect it

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include encrypted connections, access limited to personnel who need it, separate credentials for each person, and vendors selected in part for their own security practices.

No method of transmission or storage is perfectly secure, and we will not tell you otherwise. If a breach affecting your personal information occurs, we will notify you as required by California law.

10. Your California privacy rights

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. We honor these requests from California residents regardless of whether we are legally required to in a given year.

• Right to know — what categories of personal information we have collected about you, where we got it, why we collected it, and who we disclosed it to.
• Right to access — a copy of the specific pieces of personal information we hold about you.
• Right to delete — ask us to delete personal information we collected from you, subject to the exceptions the law allows, such as records we must keep for tax, legal, or security reasons.
• Right to correct — ask us to fix personal information about you that is inaccurate.
• Right to opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. The right stands if that ever changes.
• Right to limit use of sensitive personal information — we do not use sensitive personal information to infer characteristics about you.
• Right to non-discrimination — we will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.

Categories collected in the past twelve months

Identifiers (such as name, email address, telephone number, mailing address, and IP address); commercial information (services purchased or considered); internet or network activity limited to server request logs; professional or employment information where you provide it; and the content of your communications with us. We collect these from you directly, from your device when you visit the site, and from our own records of serving you.

11. How to exercise your rights

Email corp@orenidus.com with the words “Privacy Request” in the subject line, or write to us at the address in Section 1. Tell us which right you are exercising and give us enough detail to find your records.

We will verify your identity before acting, because we are not going to hand your information to someone who is not you. Verification usually means confirming details already in our records or replying from the email address we have on file. For a deletion request we may ask for a second confirmation.

We respond within 45 days. If we need more time we will tell you within that period and may take up to 45 additional days. There is no charge unless a request is manifestly unfounded or excessive, in which case we will tell you before doing anything.

You may use an authorized agent. We will ask for written permission signed by you and will still verify your identity directly.

12. Email and text messages

We send two kinds of messages. Transactional messages relate to a service you are receiving — appointment confirmations, invoices, account notices — and you cannot opt out of these while the relationship is active, because they are part of the service. Promotional messages are everything else.

You can stop promotional email at any time using the unsubscribe link in any such message, or by emailing us. You can stop text messages by replying STOP to any message from us. We honor these promptly. Message and data rates may apply. We do not require you to consent to marketing messages as a condition of purchasing anything.

13. Children

Our services are for adults. This website and our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email corp@orenidus.com and we will delete it.

14. Visitors outside the United States

We operate in the United States and our service providers are located there. If you access this website or contact us from another country, your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

15. Changes to this policy

We may update this policy. When we do, we will change the “last updated” date above. If a change materially reduces your rights or materially changes how we use your information, we will give notice by a clear statement on this page and, where we have your address and the change affects you, by email.

16. How to reach us

If you are dissatisfied with our response, you may contact the California Attorney General's office.