Privacy Policy

Last updated: 22 April 2026

This policy explains what personal data Orbit2 collects when you visit orbit2.co.uk, why we collect it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Orbit2, 1 Primrose Mews, London, United Kingdom. If you have any questions about this policy or want to exercise your rights, email us at info@orbit2.co.uk.

2. What data we collect

Analytics data (only with your consent)

If you accept analytics cookies, Google Analytics 4 collects standard usage statistics: pages viewed, referring URL, approximate location (city level), device and browser type, and an anonymised user identifier. IP addresses are anonymised before being stored. If you reject analytics, no analytics data is collected about your visit.

Contact data

When you email us via the info@orbit2.co.uk address, we receive your email address and anything you choose to include in your message. We do not operate contact forms, mailing lists, or marketing automation.

Consent record

Your cookie choice is stored in your browser's local storage under the key orbit2_consent so we don't ask you again on every page. This is stored on your device only — we do not receive or read it.

3. Legal bases for processing

• Consent (UK GDPR Art. 6(1)(a)) — for analytics cookies.
• Legitimate interests (UK GDPR Art. 6(1)(f)) — for responding to business enquiries you send us by email, and for basic server logs required to operate the site securely.

4. How long we keep data

• Google Analytics data: retained for 14 months, then automatically deleted.
• Email correspondence: kept for 24 months, or for the duration of an ongoing client engagement plus 6 years thereafter for tax/contract records, whichever is longer.
• Your consent choice: until you clear your browser storage or click "Cookie settings" and change it.

5. Who we share data with

We use two data processors. Both transfer data to the United States under the UK Extension to the EU-US Data Privacy Framework and Standard Contractual Clauses:

• Google LLC — Google Analytics 4 (analytics processing).
• Vercel Inc. — website hosting and CDN. Vercel processes your IP address and request metadata to route traffic and serve pages.

We do not sell your personal data. We do not use it for advertising, profiling, or automated decision-making.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time (for analytics, click "Cookie settings" in the footer)
• Lodge a complaint with the UK Information Commissioner's Office at ico.org.uk/make-a-complaint

To exercise any of these rights, email info@orbit2.co.uk. We will respond within one month.

7. Cookies

For a full list of the cookies and similar technologies we use, see our Cookie Policy.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, by re-prompting for consent.