LEGAL
Privacy Policy
Last updated 31 August 2026. Orbitrock respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how Orbitrock collects, uses, stores and protects information when you visit our website, create an account, purchase or download datasets, contact us, or otherwise use our services.
1. Information we collect
We may collect information that you provide directly to us, including:
- Name
- Email address
- Account information
- Billing information
- Purchase and transaction history
- Dataset downloads
- Messages or enquiries you send to us
- Information submitted when creating or managing an account
We may also automatically collect certain technical information when you use Orbitrock, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Referring website
- Date and time of visits
- Website usage and interaction information
2. Payment information
Payments made through Orbitrock may be processed by third-party payment providers such as Stripe.
Orbitrock does not normally store your complete debit or credit card details. Payment providers process this information according to their own privacy and security policies.
We may receive transaction information such as your payment status, transaction reference, amount paid and the product or dataset purchased.
3. How we use your information
We may use personal information to:
- Create and manage your Orbitrock account
- Process purchases and payments
- Provide access to purchased datasets
- Maintain records of your purchases and downloads
- Provide customer support
- Respond to enquiries
- Operate and improve the Orbitrock website
- Understand how visitors use our services
- Prevent fraud, misuse and security incidents
- Maintain the security of our systems
- Comply with legal and regulatory requirements
- Send service-related communications
- Send marketing communications where you have consented or where otherwise permitted by law
4. Legal bases for processing
Where UK data protection law applies, we process personal information under one or more appropriate legal bases. These may include:
- Contract — where processing is necessary to provide products or services you have requested, such as processing a dataset purchase.
- Legal obligation — where we are required to retain or process information to comply with applicable laws, accounting requirements or regulatory obligations.
- Legitimate interests — where processing is necessary for the operation, security and improvement of Orbitrock, provided those interests are not overridden by your rights.
- Consent — where you have specifically agreed to certain processing, such as some forms of marketing or non-essential cookies.
5. Dataset purchases and downloads
When you purchase or download a dataset, we may record information relating to that transaction, including the dataset purchased, date of purchase, payment status and download activity.
This information may be used to provide access to your purchases, assist with customer support, prevent unauthorised distribution or misuse, and maintain business and accounting records.
6. Cookies
Orbitrock may use cookies and similar technologies to operate the website, remember preferences, maintain sessions, understand website usage and improve our services.
Some cookies are necessary for the website to function.
Where required, non-essential cookies, including certain analytics or advertising cookies, will only be used after obtaining your consent.
You can manage cookies through the cookie controls provided on Orbitrock or through your browser settings.
7. Analytics
We may use analytics services to understand how visitors interact with Orbitrock.
These services may collect information such as pages visited, approximate location, device information, browser information and interactions with the website.
Analytics information helps us understand website performance and improve the Orbitrock experience.
8. How we share information
We do not sell your personal information.
We may share information with trusted service providers where necessary to operate Orbitrock, including providers of:
- Payment processing
- Website hosting
- Cloud infrastructure
- Email services
- Analytics
- Customer support
- Security and fraud prevention
- Database and storage services
These providers may only process information as necessary to provide their services and subject to applicable contractual and legal requirements.
We may also disclose information where required by law, regulation, court order or another valid legal process.
9. International data transfers
Some of our service providers may process information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the information receives an appropriate level of protection in accordance with applicable data protection law.
10. Data retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may vary depending on the type of information and may be influenced by:
- Account requirements
- Customer support requirements
- Transaction and accounting records
- Fraud prevention
- Security requirements
- Legal and regulatory obligations
When personal information is no longer required, we may delete, anonymise or securely dispose of it.
11. Data security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.
However, no internet-based system or electronic storage system can be guaranteed to be completely secure.
12. Your data protection rights
Depending on applicable law and your circumstances, you may have rights relating to your personal information, including the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of your information
- Request restriction of processing
- Object to certain processing
- Request transfer of your information
- Withdraw consent where processing is based on consent
- Make a complaint to the relevant data protection authority
Some of these rights are subject to legal limitations and exemptions.
13. Marketing communications
Where you have agreed to receive marketing communications from Orbitrock, you can unsubscribe at any time using the unsubscribe option included in our communications or by contacting us.
You may still receive essential service communications relating to your account, transactions, security or changes to our services.
14. Third-party websites
Orbitrock may contain links to third-party websites or services.
We are not responsible for the privacy practices, security or content of third-party websites. We encourage you to review their privacy policies before providing personal information.
15. Children's privacy
Orbitrock is not specifically directed at children.
We do not knowingly collect personal information from children where doing so would require parental or guardian consent under applicable law.
If we become aware that personal information has been collected from a child contrary to applicable requirements, we will take reasonable steps to remove it.
16. Dataset content
Datasets available through Orbitrock may originate from different sources and cover a wide range of subjects.
Where datasets contain information relating to individuals, appropriate legal, privacy, licensing and data protection requirements may apply.
Users of Orbitrock are responsible for ensuring that their use of downloaded datasets complies with applicable laws, licences and usage restrictions.
17. Changes to this policy
We may update this Privacy Policy periodically to reflect changes to Orbitrock, our services, technology or applicable legal requirements.
When changes are made, the updated version will be published on this page with a revised "Last updated" date.
We encourage users to review this policy periodically.
18. Contact us
If you have questions about this Privacy Policy, your personal information or your data protection rights, please contact us at support@orbitrock.com.
Website: Orbitrock.com
If you are located in the United Kingdom and believe your data protection rights have been infringed, you may also have the right to complain to the Information Commissioner's Office (ICO).