Privacy & cookies
Privacy and cookie policy.
How Brand Orbit collects, uses and protects your personal information when you visit brandorbit.co.uk or get in touch with us. Last updated: 1 November 2026.
1. Who we are
Brand Orbit (“we”, “us”, “our”) is a partnership of Rizwan Patel and Abdullah Khimani, based in Mumbai, India. We provide website development, social media marketing, e-commerce administration, lead generation and related services to businesses in the United Kingdom.
Brand Orbit is the controller of the personal data described in this policy. We are not a UK company and are not registered with a company registry.
- Location: Mumbai, India
- Email: hello@brandorbit.co.uk
We have not appointed a Data Protection Officer, as we are not required to. Please send any privacy questions to the email address above.
2. Which laws apply
Because we offer our services to businesses and people in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to how we handle your personal data (UK GDPR Article 3(2)), even though we are based outside the UK. As an Indian business, we also follow India’s Digital Personal Data Protection Act 2023.
3. What we collect
Information you give us
- Enquiry form: your name, business name (optional), email address, the services you are interested in and your message.
- Print quote form: your name, business or organisation name (optional), email address, the product type, quantity, deadline, your notes and any artwork file you choose to upload.
- Email, WhatsApp and Instagram messages: your name, contact details and anything you choose to tell us when you contact us directly.
- If you become a client: business details, billing information and the content, product information and account access needed to deliver the work we agree.
Please do not send us passwords, identity documents or other sensitive information through our forms. We will arrange secure account access separately.
Information collected automatically
When you visit the website, our hosting provider (Netlify) processes technical data such as your IP address, browser type, the pages requested and the date and time of the request. This is needed to deliver the website, keep it secure and prevent abuse. We do not use analytics, advertising or tracking tools on this website.
4. How we use it and why
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry and preparing your free plan or quote, including print quotes | Taking steps at your request before entering into a contract (Article 6(1)(b)), and our legitimate interests in responding to business enquiries (Article 6(1)(f)) |
| Delivering services to clients, invoicing and account management | Performance of a contract (Article 6(1)(b)) |
| Keeping business and accounting records | Legal obligation (Article 6(1)(c)) |
| Running and securing the website, including filtering spam form submissions | Legitimate interests (Article 6(1)(f)) |
We do not sell your personal data, use it for automated decision-making, or add you to a marketing list without your permission.
5. Who we share it with
We only share personal data with service providers who help us run our business, and only as needed:
- Netlify, Inc. (United States): website hosting and processing of form submissions, including any artwork files you upload.
- Our production and delivery providers in India and the UK: if you ask for a print, packaging or merchandise quote, we share the product details and artwork needed to prepare your quote and, if you go ahead, the details needed to produce and deliver your order (such as the delivery name, address and phone number).
- Titan Email (provided through GoDaddy): our business email, used to receive and reply to messages.
- WhatsApp (Meta Platforms): only if you choose to contact us on WhatsApp.
- Instagram (Meta Platforms): only if you choose to contact us on Instagram.
- Professional advisers and authorities, such as our accountant, or where the law requires it.
WhatsApp and Instagram have their own privacy policies, which apply when you use them.
6. Where your data is processed
Brand Orbit is based in India, so when you send us an enquiry or message, your personal data is received and handled by us in India (Mumbai). If you order print, packaging or merchandise, the details needed to produce and deliver your order are also shared with our production and delivery providers in India and the UK. Some of our service providers, such as Netlify, process data in the United States and other countries. Where a provider processes data outside the UK, we rely on safeguards recognised under UK data protection law, such as UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or approved contractual clauses. Contact us if you would like more details.
7. How long we keep it
- Enquiries and print quote requests (including uploaded artwork) that do not lead to work: up to 12 months after our last contact, then deleted.
- Client records and invoices: for as long as we need them to meet our legal, tax and accounting obligations.
- Hosting logs: kept by Netlify for a short period under its own retention policy.
8. Keeping it secure
The website is served over HTTPS, enquiry form submissions are protected against spam, and access to personal data is limited to people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect your information.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or complete inaccurate data;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to processing based on our legitimate interests;
- ask us to transfer your data to you or another organisation (data portability).
To use any of these rights, email hello@brandorbit.co.uk. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
10. Cookies
Cookies are small files a website stores on your device. This website does not set any cookies and does not use analytics, advertising or tracking technologies. That is why you do not see a cookie banner.
Our fonts are hosted on our own website, so no font requests are sent to third parties. If you click through to WhatsApp, Instagram or a client website, those sites may set their own cookies under their own policies.
If we add analytics or other non-essential cookies in future, we will update this policy and ask for your consent before setting them.
11. Changes and contact
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
Questions? Email hello@brandorbit.co.uk.