Your information, handled plainly.

This notice explains how Orbiting Online (“we”, “us”) handles personal information. We are the controller of the information described here. You can reach us about anything in this notice at sales@orbiting.online.

We collect only what you choose to send us, and what is needed to run this website:

• Enquiries. Your name, your business, what you need, your email address and your phone number.
• The questionnaire. Your answers about your business, its customers and the site you want, together with your name, email address and phone number.
• Correspondence. Anything you send us by email, and our replies.
• Clients. If you work with us: the details needed to invoice you and take payment, and the materials you provide for your site.
• Technical information. Like any website, the servers that deliver this one receive your IP address and basic details of your browser and device. When you send a form, your IP address is also held briefly to limit spam (see below).

• To reply to you and discuss a possible project. This is at your request, before any agreement, and in our legitimate interest in answering people who contact us.
• To carry out your project: designing, writing, building and handing over your site. This is necessary to perform our agreement with you.
• To keep financial records, such as invoices and payments. This is necessary to meet our legal obligations.
• To protect this website and its forms from abuse and spam. This is in our legitimate interest in keeping the site working and secure.

We share your information only with the service providers we rely on to run this website and our business, and only as much as each one needs:

• Cloudflare, which hosts this website and processes the forms when you send them.
• Resend, which delivers form submissions to our inbox by email.
• Our email hosting provider, where our mailboxes, and so your messages, are held.
• Google Fonts, which serves some of the typefaces on this website and receives your IP address when they load.
• Our bank, payment provider and accountant, for clients, to handle payments and keep our accounts.

We may also disclose information where the law requires us to. We do not sell your information.

Some of these providers process information outside the United Kingdom, including in the United States. Where they do, the transfer relies on UK adequacy regulations or on appropriate safeguards recognised under UK data protection law, such as the International Data Transfer Agreement or Addendum.

• Enquiries and questionnaires that do not lead to a project: up to 12 months from our last contact with you, then deleted.
• Client records: for as long as UK tax and accounting law requires, normally six years after the end of the financial year in which the project finished.
• The spam-limiting record of your IP address: one hour.

This website does not use analytics or advertising cookies, and does not track you across other sites. Our hosting provider may set cookies that are strictly necessary to protect the website from attacks and abuse; these do not need your consent.

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Some of these rights apply only in certain circumstances.

To use any of them, email sales@orbiting.online. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

We take reasonable technical and organisational measures to protect your information, and our providers do the same. No method of sending or storing information over the internet is completely secure, so we cannot guarantee its absolute security.

While we build your site, we use any personal information in the materials you give us only to build it. Once your site is handed over, you are the controller of any personal information it collects, and responsible for your own privacy notice. Our terms cover this in more detail.

We may update this notice when what we do changes. The date at the top of this page shows when it was last updated.