Privacy Policy

This Privacy Policy explains how Orbit Group Advisory Ltd(“Orbit Group”, “we”, “us”) collects, uses and protects your personal data when you visit our website or contact us. We are committed to handling your information with the same discretion we apply to our clients.

For the purposes of the UK GDPR and the Data Protection Act 2018, Orbit Group Advisory Ltdis the data controller. Company number 17293435, registered in England & Wales, registered office 95 Wilton Road, London, England, SW1V 1BZ.

1. Information we collect

We only collect the personal data you choose to provide, and minimal technical data:

• Enquiry data — when you use our contact form we collect your full name, email address, and (optionally) your company, country and the service you are interested in, together with the content of your message.
• Technical data — our hosting provider automatically logs standard server information (such as IP address and browser type) for security and reliability.

2. How we use your data and legal basis

We use your personal data to:

• respond to your enquiry and correspond with you;
• provide the services you request;
• maintain the security and integrity of our website.

Our legal basis is our legitimate interests in responding to enquiries and operating our business, and, where applicable, taking steps at your request prior to entering into a contract. We do not use your data for automated decision-making or profiling, and we do not sell your data.

3. Sharing your data

We do not share your personal data with third parties for their own purposes. We use carefully selected service providers (data processors) to operate our website and communications, including:

• Brevo — transactional email delivery for enquiry notifications;
• Vercel — website hosting and infrastructure.

These providers process data on our instructions and under appropriate contractual safeguards. We may also disclose data where required by law.

4. International transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place (such as UK adequacy regulations or Standard Contractual Clauses) to protect your data.

5. Data retention

We keep enquiry data only for as long as necessary to respond to and follow up on your enquiry, and to comply with our legal obligations, after which it is securely deleted.

6. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data;
• restrict or object to our processing;
• request data portability;
• withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at orbitgroupsecurity@proton.me.

7. Cookies

Our website does not use tracking or advertising cookies. Only essential technical functionality required to display and operate the site is used. If we introduce analytics or other non-essential cookies in future, we will update this policy and request your consent where required.

8. Complaints

If you have concerns about how we handle your data, please contact us first at orbitgroupsecurity@proton.me. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.