Your details, and what we do with them

LogoOrbit, operated by RevoluSys Inc, is the data controller for the information described on this page. Our legal desk is the point of contact for anything privacy-related, and the name and address are at the foot of this page.

This policy covers our website, our brief forms and the email, phone and WhatsApp conversations we have with clients. It does not cover other companies’ sites we link to, which run their own policies.

Two kinds of information. The first is what you hand us, deliberately, so we can do the work:

• Your name, business name, email address and phone number
• A billing address, and the country you are ordering from
• The brief itself, and anything you attach to it, sketches, photographs, existing artwork
• The messages between us, so the next person who picks up your job can see the history

The second is what any website collects automatically: the pages you looked at, roughly where in the world you were, the browser and device you used, and how you arrived. That data is aggregated, it tells us the pricing page is popular, it does not tell us who you are.

Card numbers are entered on our payment processor’s secure form and stay with them. We never see a full card number and we never store one. What we keep is the record every business keeps: what was bought, when, for how much, and whether it cleared.

Every piece of data we hold has a job. If it does not have one, we do not collect it.

• To design the work you ordered and get it to the right person
• To take payment and keep the accounting records the law requires
• To answer your questions on email, on the phone and on WhatsApp
• To send you occasional offers, only if you asked for them, and every message has an unsubscribe link that works
• To keep the site secure and to understand which pages are actually useful

A short list, and it is all suppliers doing a job for us: the payment processor that takes your card, the email service that delivers our replies, the hosting company that runs the site, and an analytics tool that counts page views. Each is bound to use your data only for the service they provide to us.

We do not sell personal information, we do not rent mailing lists, and we do not hand your details to another company for their own marketing. The only other time we would disclose anything is if a court or a law enforcement agency required it, or if a business transfer meant your contract moved to a new owner, in which case you would be told.

Our site uses a small number of cookies. Some are functional, they remember whether you chose the dark theme, or that you have already dismissed a prompt. Others are analytics, counting visits so we can see which pages are worth improving.

Every browser lets you block or delete cookies in its settings, and most now do a good deal of that on your behalf. Blocking them will not stop you using the site, though the theme choice will stop sticking.

Project files and correspondence stay with us for as long as you are a client, plus a reasonable period afterwards, so that when you come back in three years asking for the source file, we still have it.

Invoices and payment records are kept for as long as tax law requires. Anything we no longer have a reason to hold gets deleted.

The site runs over HTTPS, access to client files is limited to the people working on your job, and accounts are protected by strong authentication. We review who has access to what as people join and leave.

No system is perfect, and anyone who tells you otherwise is selling something. If a breach ever affected your data, we would tell you and the relevant regulator, quickly and in plain terms.

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct something wrong, ask us to delete it, or tell us to stop using it for marketing. If you are in California, the CCPA gives you those rights specifically, including the right not to be treated differently for exercising them. If you are in the UK or the EU, the GDPR gives you the equivalent, plus the right to have your data sent to you in a portable format.

Email the legal desk and say what you want. We will confirm who you are, act on it, and come back to you within 30 days. There is no charge.

We are a US company and our suppliers are mostly US-based, so if you order from outside the United States your information will be processed there. Where data moves out of the UK or EU, it is covered by the standard contractual clauses our suppliers operate under.

Our services are sold to businesses and to adults. We do not knowingly collect information from anyone under 13. If you believe a child has sent us personal information, tell the legal desk and we will remove it.

When our practices change, this page changes with them, and the date at the top moves. If a change materially affects how we use information we already hold, we will tell existing clients directly rather than relying on you to re-read the page.