How we collect, use, and protect your personal information
Last updated: January 2026
orbitaluxis Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our construction cost analytics platform services and visit our website at orbitaluxis.world.
As the data controller, orbitaluxis Ltd is responsible for your personal data and ensures compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
We collect various types of personal data to provide our construction analytics services effectively. The data we collect includes information you provide directly to us, information collected automatically through our platform, and information from third-party sources when necessary for service delivery.
Personal information we may collect includes your name, email address, phone number, company details, job title, project information, usage data from our analytics platform, and technical information such as IP addresses and browser details. We collect this information through our website contact forms, service registration processes, customer support interactions, and automated tracking technologies.
We use your personal data for several specific purposes related to our construction analytics services. The primary use of your data is to provide and improve our cost analytics platform, deliver customer support, process service requests, and communicate important service updates.
We also use your information to personalise your experience with our platform, conduct analytics to improve our services, ensure platform security and prevent fraud, comply with legal obligations, and send relevant marketing communications where you have consented. All data processing is based on legitimate legal grounds under GDPR, including contract performance, legitimate interests, legal compliance, and your explicit consent where required.
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
Our website uses essential cookies for basic functionality, analytics cookies to understand user behaviour, functional cookies to remember your preferences, and marketing cookies for advertising purposes. For detailed information about our cookie usage, please refer to our Cookie Policy.
We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in delivering our services, such as cloud hosting providers, analytics services, and customer support tools. These providers are contractually bound to protect your data and use it only for the specified purposes.
We may also share your data when required by law, to protect our legal rights, or in connection with a business transaction such as a merger or acquisition. In such cases, we ensure appropriate safeguards are in place to protect your personal information.
As we serve clients across the UK and European Union, your personal data may be processed in different countries within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or certification schemes.
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the type of data and the purpose for which it was collected.
Generally, we retain customer account information for the duration of your service agreement plus seven years for accounting and legal compliance purposes. Marketing data is retained until you withdraw consent or for a maximum of three years if there is no engagement. Website analytics data is typically retained for 26 months, whilst technical logs are kept for 12 months for security purposes.
Under GDPR and UK data protection law, you have several rights regarding your personal data. These include the right to access your personal information and receive a copy of the data we hold about you, the right to rectify inaccurate or incomplete personal data, the right to erase your personal data in certain circumstances, and the right to restrict processing of your data.
You also have the right to data portability, allowing you to receive your data in a structured format and transfer it to another service provider. Additionally, you have the right to object to processing based on legitimate interests, including direct marketing, and the right to withdraw consent where processing is based on your consent.
To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month and may ask for additional information to verify your identity.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, regular security assessments and updates, access controls and authentication systems, secure data centres with physical security measures, and regular staff training on data protection.
Whilst we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to improve our security measures and respond promptly to any security incidents.
Our services are not intended for individuals under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, sending you a notification. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact us regarding your personal data, please reach out to us using the following contact information:
Data Protection Contact:
Email: privacy@orbitaluxis.world
Phone: +44 1515492396
Post: Data Protection Officer, orbitaluxis Ltd, 103 Main Street, Liverpool, Merseyside L9F 2EB, United Kingdom
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters. You can contact the ICO through their website at ico.org.uk or by calling their helpline.
We process your personal data based on the following legal grounds under GDPR:
Where we process your data based on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to such processing at any time.