Privacy Notice

1. Who We Are

Orbina (orbina.co.uk and the Orbina app) is run by Cartwheel Penny Associates Ltd, a company registered in England and Wales. When this notice says “Orbina”, “we”, “us” or “our”, it means Cartwheel Penny Associates Ltd, which is the data controller for your personal information.

For anything about this notice or your information, contact us at info@orbina.co.uk.

2. Joining the Orbina Network

When you join Orbina, as a member of a group or as a follower connected to the member who introduced you, you become part of the Orbina network. We hold your personal information so that we can run that network, connect you with other people in it, and keep you up to date with its events.

3. What We Hold

• About you: your name, email address, mobile number, company, job title, industry and anything you write about yourself.
• Your sign-in: if you use a password, it is stored only in scrambled form. If you sign in with LinkedIn, Google or Microsoft, we receive your name and email address from them. We never see that password and we cannot post on your behalf.
• What you do on Orbina: the groups you belong to or follow, events and your replies to them, introductions you make, receive or ask for, directory listings, posts and files you add, and the recognition and ratings recorded for you.
• Technical details: such as your IP address and browser type, collected automatically when you use Orbina. See our Cookies Policy for cookies.
• Event guests: if a member invites you to an event as a guest, we hold the name and email address they gave us so that we can send you the invitation and record your reply. If you do not go on to join, you can ask us to remove those details at any time.
• People a member introduces: when a member introduces you to someone on Orbina, we hold the name they typed for you so that both of them know who the introduction is for. We hold nothing else about you unless you accept, and the name is removed if the member cancels the introduction.

4. Why We Hold It and Our Legal Basis (UK GDPR)

• Our agreement with you: to provide the network you joined, including your account, groups, the directory, introductions, the events calendar and alerts.
• Our agreement with you and our legitimate interests: to keep you up to date with events and activity in your network, in the app and by email.
• Legitimate interests: to keep Orbina secure, prevent misuse and improve it.
• Legal obligation: where the law requires us to keep or disclose information.
• Consent: only where we ask you separately, for example before your contact details are released in an introduction, or for non-essential cookies. You can withdraw consent at any time.

5. Who Sees Your Information

• Members of your group: your profile.
• People you are connected to (the members and followers of your groups, and anyone you were introduced or referred to): your name, job title and company in their My connections list, and any post you choose to show on the Orbina feed, with its pictures.
• The wider Orbina network: your name, job title and company in the directory. Followers appear only if they choose to, and anyone can hide themselves from the directory in Settings.
• Your email address and phone number: released to another person only when an introduction between you is accepted.
• Event organisers: your name and your reply to their event.
• Our suppliers, who act on our instructions: Supabase (database and sign-in, held in Ireland), Netlify (website hosting), Resend (sending email), Companies House (we send only the company name you search for), and LinkedIn, Google or Microsoft if you choose to sign in with them.
• Authorities: only where the law requires it.

We never sell your personal information.

6. How Long We Keep It

We keep your information for as long as your account is open. There is no fixed end date while you remain part of the network, because the network depends on its members’ details being available to one another.

You can delete your account at any time from Settings, or by following the steps at orbina.co.uk/delete-account. Your sign-in, profile, group memberships, introductions and directory listing are removed straight away. Updates and notes you posted to a group stay in that group’s log with your name removed. A sign-up that is never confirmed is removed within three days.

7. Your Rights (UK GDPR)

You have the right to:

• See the personal information we hold about you.
• Correct anything that is wrong or incomplete.
• Delete your information.
• Restrict or object to how we use it, in certain circumstances.
• Receive a copy in a format you can take elsewhere.
• Withdraw consent at any time, where we rely on consent.

To use any of these rights, email info@orbina.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Transfers Outside the UK

Some of our suppliers are based outside the UK. Where your information is transferred abroad, we make sure recognised safeguards are in place, such as UK adequacy decisions or standard contractual clauses.

9. Security

We use appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration or destruction. Passwords are never stored in plain text.

10. Automated Decisions

We do not make decisions about you by automated means that have a legal or similarly significant effect. Ratings shown on Orbina are worked out from activity and are for information only.

11. Changes to This Notice

We may update this notice from time to time. We will tell you about significant changes in the app or by email.

12. Contact

Cartwheel Penny Associates Ltd
Email: info@orbina.co.uk