This policy explains how Orbis Digital Ltd (“we”, “us”), Company No. 17116737, registered in England and Wales, uses personal data in Orbis Link (orbislink.co.uk). We are the data controller for our customers’ account information and website enquiries, and a data processor for the click data we collect on our customers’ behalf.

Information we collect

Customers and team members

Name, email address and password (stored as a one-way hash).
Workspace details, links you create, branded domains and settings.
Billing details handled by Stripe. We receive your billing name, email, the last four digits of your card and payment status; we never see your full card number.
Sign-in records (time and IP address) and an audit log of important actions, for security.

People who click short links

When someone opens an Orbis Link short link we record the time, the short link, an anonymised IP address (with the last part removed), approximate location (country, region and city), device type, browser, operating system, language and the referring website. We also create a one-way code from these details that changes every day, so we can count unique visitors without identifying anyone. We do not set cookies or use advertising trackers on redirects.

Website visitors and enquiries

If you use our contact, demo or report forms we keep the details you send. Our marketing website uses only cookies that are needed for it to work (for example, keeping you signed in and protecting forms).

How we use it

To provide Orbis Link and show you analytics (contract).
To keep the service secure and stop misuse, including reviewing reported links (legitimate interests).
To take payments and keep accounting records (contract and legal obligation).
To reply to enquiries and send service emails such as receipts, security notices and important changes (contract and legitimate interests). We only send marketing emails if you agree.

Who we share it with

We use carefully chosen suppliers to run Orbis Link: our UK hosting provider (20i), Stripe for payments, our email provider, and optional services for location lookup (ipinfo.io), bot protection (Cloudflare Turnstile) and harmful-link checks (Google Safe Browsing). They only use data to provide their service to us. We do not sell personal data.

How long we keep it

Account data is kept while your account is open and for up to 6 years afterwards for accounting. Detailed click records are kept for up to 25 months (3 months on the Free plan); total click counts are kept with each link. Enquiries are kept for up to 2 years.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask to move it to another provider. Customers can export their links and click data from their account at any time. To make a request, contact us using the details on our contact page. You can also complain to the Information Commissioner’s Office (ico.org.uk).

International transfers

Our main data is stored in the UK. Where a supplier processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement.

Changes

We will post any changes here and, if they are significant, tell customers by email.

Privacy Policy