Privacy Policy

Last updated: 27 March 2026

1. Who We Are

Orbital Void LTD (Company No. 17100398) is the data controller responsible for your personal data. Registered in England and Wales.

Contact:hello@orbitalvoid.com

2. Data Protection Law

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we send electronic marketing communications, we comply with the Privacy and Electronic Communications Regulations 2003 (PECR).

3. What Data We Collect

We may collect the following categories of personal data:

  • Identity data: name, job title, company name.
  • Contact data: email address, phone number.
  • Technical data: IP address, browser type and version, time zone, operating system, and platform.
  • Usage data: pages visited, time spent on pages, and navigation paths.
  • Communications data: any information you include when you contact us by email or through the website.

4. How We Collect Your Data

  • Direct interactions: when you email us or submit an enquiry.
  • Automated technologies: as you navigate the website we may automatically collect technical and usage data through cookies and similar technologies. See Section 9 below.

5. Lawful Basis for Processing

We rely on the following lawful bases under the UK GDPR:

  • Legitimate interests (Article 6(1)(f)): to respond to enquiries, improve our website, and administer our business.
  • Consent (Article 6(1)(a)): where you have opted in to receive marketing communications. You may withdraw consent at any time.
  • Contract (Article 6(1)(b)): where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

6. How We Use Your Data

  • To respond to your enquiries and provide the services you request.
  • To administer and improve our website.
  • To send you information you have requested or that we believe may be relevant to you, where you have consented or where we have a legitimate interest to do so.
  • To comply with legal obligations.

7. Data Sharing

We do not sell your personal data. We may share data with the following categories of third parties, only to the extent necessary:

  • Hosting and analytics: Vercel Inc. (USA) provides website hosting and privacy-friendly analytics. Vercel Analytics collects anonymised usage data (page views, web vitals) without using cookies for tracking purposes.
  • Email services: Resend Inc. (USA) processes transactional emails sent on our behalf, such as responses to enquiries.
  • Professional advisers: including lawyers, auditors, and insurers where reasonably necessary.
  • Law enforcement or regulators: where required by law.

8. International Transfers

Some of our third-party service providers (including Vercel and Resend) are based in the United States. Where we transfer personal data outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with the UK GDPR. This includes reliance on the UK-US Data Bridge where applicable, transfers to countries with an adequacy decision from the Secretary of State, or the use of the International Data Transfer Agreement (IDTA) or standard contractual clauses approved by the Information Commissioner's Office (ICO).

9. Cookies and Tracking Technologies

Our website uses Vercel Analytics, a privacy-friendly analytics service that does not use cookies or collect personally identifiable information. It collects anonymised data such as page views, referrer information, and web performance metrics.

We may also use strictly necessary cookies to ensure the proper functioning of the website (e.g. security tokens, session management). These do not require consent under PECR as they are essential for the service you have requested.

We do not use any third-party advertising or tracking cookies. If this changes in the future, we will update this policy and seek your consent where required.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact and communications data related to project enquiries is typically retained for up to 24 months after our last interaction.

11. Your Rights

Under the UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data in certain circumstances.
  • Restrict the processing of your data.
  • Object to processing based on legitimate interests or for direct marketing purposes.
  • Data portability: receive your data in a structured, commonly used, and machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@orbitalvoid.com. We will respond within one month, as required by law.

12. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.