Privacy Policy

1. Who We Are

Orbina is operated by Cartwheel Ltd, a company registered in England and Wales. We operate the Orbina professional networking platform at orbina.co.uk. When this policy refers to “Orbina”, “we”, “us” or “our”, we mean Cartwheel Ltd.

For questions about this policy or your personal data, please contact us at info@orbina.co.uk.

2. What Data We Collect

We collect the following categories of personal data:

• Account data: first name, surname, email address, and password (hashed).
• Professional data: company name, job title, phone number, and professional bio.
• Platform activity: groups joined, events RSVPd, business listings created.
• Technical data: IP address, browser type, pages visited, and timestamps (collected automatically).
• Cookie data: cookie preferences and session identifiers.

3. Legal Basis for Processing (UK GDPR)

• Contract performance: to provide you with the Orbina platform and services you signed up for.
• Legitimate interests: to improve the platform, prevent fraud, and ensure security.
• Consent: for non-essential cookies and marketing communications (where applicable).
• Legal obligation: where we are required to process data by law.

4. How We Use Your Data

• To create and manage your Orbina account.
• To provide access to networking groups, events, and the business directory.
• To display your professional information to other members in groups you have joined.
• To send you platform-related communications (e.g. account confirmation).
• To maintain the security and integrity of the platform.
• To comply with our legal obligations.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Supabase Inc.: our database and authentication provider, who process data under a data processing agreement.
• Netlify Inc.: our web hosting provider.
• Other members: your name, company, job title, and bio may be visible to other members in shared groups.
• Law enforcement: if required by law or to protect the rights of Orbina or others.

6. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where retention is required by law. Anonymised or aggregated data may be retained indefinitely.

7. Your Rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) in certain circumstances.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Portability — receive your data in a machine-readable format.
• Withdraw consent at any time where consent is the legal basis.

To exercise your rights, email info@orbina.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. International Transfers

Some of our service providers (including Supabase and Netlify) are based outside the UK. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions under UK law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Passwords are never stored in plain text.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Continued use of Orbina after changes constitutes acceptance of the updated policy.

11. Contact

Cartwheel Ltd
Email: info@orbina.co.uk