Privacy Policy

Last updated: 13 June 2026

This Privacy Policy explains how Renyu (“Renyu”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit our website, enquire about our programmes, or take part in a Renyu programme through our app. We are committed to handling your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Renyu is a trading name. Our registered company name and number will be added here on incorporation. Until then, enquiries can be sent to the contact address below.

1. Who we are

Renyu provides four-week team engagement programmes for organisations, delivered through a mobile and web app, that reward everyday environmental actions and end with a guaranteed donation to a verified environmental partner. For the personal data described in this policy, Renyu is the data controller, except where we act as a processor on behalf of an employer (see section 9).

2. The data we collect

We collect the following categories of personal data:

• Enquiry data. When you complete our booking or contact form, we collect your name, work email address, and any details you choose to share about your team or organisation.
• Account and participation data. If you take part in a programme, we collect your name, email, the team or organisation you belong to, the actions you log, points and levels earned, streaks, badges, and your position on leaderboards.
• Content you submit. Photos, captions, comments and other content you upload as part of an action or a social feed.
• Marketing preferences. Whether you have asked to hear about the Renyu consumer app or other updates.
• Technical data. Device type, browser, IP address, and usage data collected through cookies and similar technologies (see section 8).

We do not intentionally collect special category data (such as health, religious or political data). Please do not submit such data through free-text fields or uploaded content.

3. How we use your data and our legal basis

• To respond to enquiries and arrange intro calls. Legal basis: our legitimate interests in responding to people who contact us, and taking steps to enter into a contract.
• To deliver a programme (run competitions, calculate points and leaderboards, administer the donation). Legal basis: performance of a contract, or our legitimate interests in operating the programme.
• To send you updates about the Renyu app where you have asked us to. Legal basis: consent, which you can withdraw at any time.
• To improve and secure our services. Legal basis: our legitimate interests in maintaining and improving a safe, working product.
• To meet legal and regulatory obligations. Legal basis: compliance with a legal obligation.

4. The guaranteed donation

Donations made through a Renyu programme are committed by the participating organisation and directed to one of our vetted environmental partners. We share only the information necessary to administer and acknowledge the donation. We do not sell personal data to partners, and partners may not use any data we share for their own marketing without a separate lawful basis and your awareness.

5. Who we share data with

• Service providers who help us run Renyu (for example hosting, database, email delivery and analytics providers), acting as our processors under contract.
• Your employer or programme organiser, who will see team-level and, where relevant, individual participation data as part of running the programme.
• Environmental partners, limited to what is needed to administer the donation.
• Authorities or advisers where required by law, or to establish, exercise or defend legal claims.

6. International transfers

Some of our service providers may process data outside the UK. Where they do, we rely on an adequacy decision or appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses).

7. How long we keep data

We keep enquiry data for up to 24 months after our last contact, unless you become a customer. We keep participation data for the duration of a programme and for a reasonable period afterwards to support reporting and the consumer app where you have opted in. We keep records needed for legal, tax or accounting purposes for as long as the law requires.

8. Cookies

Our website uses strictly necessary cookies to function, and may use analytics cookies to understand how the site is used. You can control non-essential cookies through your browser settings. A full cookie notice will be provided as our use of analytics expands.

9. When we act for your employer

Where an organisation runs a Renyu programme for its staff, that organisation is the controller for participation data and Renyu acts as a processor under a data processing agreement. In that case, your employer’s privacy notice also applies, and requests about your data may be directed to them.

10. Your rights

Under UK data protection law you have the right to access your data, correct it, erase it, restrict or object to processing, port it, and withdraw consent. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concern first.

11. Changes to this policy

We may update this policy from time to time. We will change the date at the top and, for material changes, take reasonable steps to let you know.

12. Contact

For any privacy question or to exercise your rights, contact us via the contact form on our website. A dedicated contact email will be added here on incorporation.