legal

Privacy policy

Last updated 17 July 2026

Orbit-360 provides evidence-based SEO and AI-search audits, delivered through a client portal at portal.orbit-360.co.uk. This policy explains what information we collect when you use our website and portal, how we use it, and the choices you have. We keep it short and in plain English.

Who we are

Orbit-360 is operated from the United Kingdom. We are the data controller for the information described in this policy. You can reach us about anything privacy-related at admin@orbit-360.co.uk.

What we collect

• Account details. When we set up your portal access we hold your name, work email address, and sign-in credentials. Passwords are stored only in securely hashed form by our sign-in service.
• Audit data. To produce your reports we analyse the publicly available pages of the website you ask us to audit. Audit results, scores, and action plans are stored so your portal can show them to you.
• Usage information. Our servers keep standard technical logs (IP address, browser type, pages requested, timestamps) for security and troubleshooting.
• Correspondence. If you email us, we keep the correspondence for as long as it is needed to help you.

Google account data

If you choose to connect a Google service — such as Google Search Console or Google Analytics — to your Orbit-360 reporting, we ask Google for read-only access and use it solely to display your search and analytics performance alongside your audit results in your portal.

• We only request read-only access. We never change anything in your Google account.
• The data is used only to provide the reporting features you asked for. We do not use it for advertising, we do not sell it, and we do not share it with third parties except as required to operate the service or comply with the law.
• You can disconnect a Google service at any time from your portal, or revoke Orbit-360's access at myaccount.google.com/permissions. When you disconnect, we stop collecting the data and delete stored copies within 30 days.

Orbit-360's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why we use your information

• To provide the audits, reports, and portal you have engaged us for (performance of a contract).
• To keep the service secure, prevent misuse, and troubleshoot problems (legitimate interests).
• To meet legal obligations that apply to us.

Cookies

The portal uses a single strictly necessary session cookie to keep you signed in. Our public website sets no cookies, uses no analytics trackers, and loads no third-party resources — the fonts are served from our own domain.

How long we keep it

Account details and audit data are kept for the duration of our engagement with you and removed when the engagement ends, subject to any legal retention requirements. Server logs are kept for a short rolling period. Google account data is refreshed rather than accumulated, and deleted within 30 days of disconnection.

Where it lives and how it's protected

Your data is stored on servers in the European Union. All connections to the website and portal are encrypted, access is restricted to the people who need it to serve you, and we take nightly encrypted backups.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email admin@orbit-360.co.uk and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we make material changes we will update this page and the date at the top, and let portal users know.