This Privacy Policy explains how Orbit Content ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Orbit Content is a content marketing service operated by Ahmad Alvi, based in the United Kingdom. For any privacy-related questions, contact us at theorbitcontent@gmail.com.

2. What data we collect

When you sign up or use our service, we may collect:

• Your name and email address
• Your company name and website URL
• Your industry, target audience, brand tone, and content preferences
• Payment information (processed and stored securely by Stripe — we do not store card details)
• Content brief submissions (monthly focus themes, keywords, special requests)
• Support and revision request messages

We do not collect sensitive personal data, and we do not use your data for any purpose beyond providing and improving the Orbit Content service.

3. How we use your data

We use your data to:

• Set up and manage your Orbit Content subscription
• Generate and deliver SEO content tailored to your business
• Process payments through Stripe
• Send you service notifications (content delivery, billing, brief reminders)
• Respond to support and revision requests

We will never sell your data to third parties or use it for advertising purposes.

4. Legal basis for processing

We process your personal data on the basis of:

• Contract: processing is necessary to provide the service you have subscribed to
• Legitimate interests: to communicate service updates and respond to support requests
• Legal obligation: to comply with applicable laws including tax and financial record-keeping

5. Data storage and third parties

Your data may be stored or processed by the following third-party services, each operating under their own privacy policies:

• Stripe — payment processing (stripe.com/privacy)
• Netlify — website hosting and form submissions (netlify.com/privacy)
• Google — onboarding form submissions (policies.google.com/privacy)
• Airtable (planned) — client records database
• Resend (planned) — transactional email delivery

We take reasonable steps to ensure these services meet appropriate data protection standards.

6. Data retention

We retain your personal data for as long as your subscription is active. Following cancellation, we will retain your data for up to 12 months for legal and billing purposes, after which it will be securely deleted. You may request earlier deletion at any time (see Your Rights below).

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict or object to how we process your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where consent is the basis for processing

To exercise any of these rights, email us at theorbitcontent@gmail.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses only functional browser storage (localStorage) to maintain your logged-in session. We do not use advertising cookies or third-party tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the latest revision. We will notify active subscribers of any material changes by email.

10. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at theorbitcontent@gmail.com.