Privacy Policy

Last updated: 22.03.24

Orbital Witness Limited (“us”, “we”, or “our”) operates https://www.orbitalwitness.com/ (the “Site”) and the applications and solutions provided via the Site, including Orbital Witness, Orbital Residential and Orbital Copilot (the “Applications”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from: (a) users of the Site; (b) users of the Applications; (c) suppliers to our business; and (d) prospective employees.

Your Information, and where we obtain it 

While using our Site or the Applications, or where applying for a role with us or engaging with us as a supplier, we may ask you to provide us with certain personally identifiable information that can be used to identify you (“personal information”). You may also choose to provide us with such information, or third parties might provide that information to us (for example, if one of your colleagues is acting as an administrator for your use of an Application, or if you engage with us via LinkedIn or another social media platform). 

Personally identifiable information about you which we collect and use may include, but is not limited to your name, email, organisation, telephone number and your usage of our Site and Application. If you apply for a role with us, we will also collect and use your personal information from your CV and other information which you provide to us. 

Log Data

Like many site operators, we collect information that your browser sends whenever you visit our Site (“Log Data”).

This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.

In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this usage data.

Controller and Processor

We act as the “data controller” in relation to our use of your personal information in our operation of the Site, and in relation to our management of the Applications (such as the operation of user accounts). 

In relation to the Applications, we will act as the “data processor” of our clients where they input personal information into the Applications (other than account management information). Questions about the data processing by our clients within the Applications should be directed to the clients themselves. 

Our lawful basis

Whenever we collect or use your personal information in any way we will make sure that we have an appropriate lawful basis to do that. The lawful basis will either be:

  • Legitimate interest: that the usage is in either our or your legitimate interest.
  • Performance of a contract:  if our usage is required in order to perform our contractual relationship with you (for example, if we need to process your personal information as part of your usage of an Application in accordance with our obligations under the terms of use of the Application).
  • Consent: if we ask you for your consent to a particular usage of your information.
  • Lawful requirement: if we need to process your personal information in order to comply with a lawful requirement.

Disclosure of personal information

In certain circumstances we may provide your personal information to third parties, as follows:

  • 3rd party vendors and providers: To enable us to meet business operations needs and to perform certain services and functions, we may need to provide personal information to vendors and providers, including, but not limited to, cloud hosting services (such as Microsoft Azure, Google Cloud and, for Orbital Copilot, OpenAI), logging and security software, customer service vendors, web analytics services, and email software. We will make sure that any such third parties will only process your personal information in pursuance of their contractual obligations with us and to the extent that is required in performing their duties to us. A number of such third party vendors are listed below in the Cookies section.   
  • Legal Requirements: We may share your personal information with government authorities, or other third parties if it is required:
  1. By law or that such action is necessary to comply with a legal obligation;
  2. To protect and defend our rights or property,
  3. Where we determine, in our sole discretion, that there is a violation of our terms, policies, or the law;
  4. To detect or prevent fraud or other illegal activity;
  5. To protect the safety, security, and integrity of our products, employees, or users, or the public; or
  6. To protect against legal liability.

If we need to transfer your personal information outside of the UK, we will make sure that we only transfer to countries whose data protection regimes have been assessed as being “adequate” by the UK Information Commissioner’s Office (“ICO”) or where we have appropriate contracts in place meeting the requirements set out by the ICO to ensure that your personal information has an appropriate level of protection. 

Communications

We may use your personal information to contact you with newsletters, marketing or promotional materials and other information that provide more information on the services and operations of Orbital Witness. We will only do this where you have opted into receiving such communications or where we are otherwise permitted to do so by applicable law. 

Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.

We use on our Site and in our Applications “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some features of our Site or Applications, so please bear this in mind.

The cookies we use are as follows:

  • Google Analytics. The type is Recommended and is used on Site and in Applications for tracking usage and performance of the Site and the Applications.
  • Heap Analytics. The type is Recommended and is used in Applications (including but not limited to Orbital Copilot, Orbital Witness) and the Site for tracking usage and performance of the Site and the Applications.
  • Auth. The type is Mandatory and is used in Applications (including but not limited to Orbital Copilot, Orbital Witness) and the Site to help persist user session.
  • Intercom. The type is Mandatory and is used in Applications to provision in-page user support and context tracking between pages.
  • Launch Darkly. The type is Mandatory and is used in Applications (including but not limited to Orbital Copilot, Orbital Witness) to handle Application feature flag handling to tailor rollout of new features
    • Hubspot. The type is Mandatory and is used in Applications and the Site for CRM contact tracing and inbound lead creation.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. We keep your Personal Information encrypted at rest when in our possession, our servers are secured using industry-appropriate firewalls, and access to our Applications is protected and managed by User OAUTH standard authentication that supports Corporate SSO. We also have real-time threat detection rolled out across our Site and the Applications to help us identify and manage any attacks or vulnerabilities across our applications. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your rights

You have the following rights in respect of your personal information, although these rights may be limited in some circumstances (we will let you know if they are limited when you contact us to exercise them):

• Ask us to send a copy of your personal information to you or someone else;

• Ask us to restrict, stop processing, or delete your personal information;

• Object to our processing of your personal information;

• Object to use of your personal information for direct marketing; and

• Ask us to correct inaccuracies.

If we rely on consent to process your personal information, or send direct marketing, you can withdraw consent by contacting us as set out below.

Data retention

We only retain your personal information for as long as we need to retain it for the purpose it was collected, plus a further period as necessary in order to enforce our rights, protect our legal position and otherwise in accordance with applicable law. 

Automated decision making

We do not use automated decision making in relation to any of your personal information. 

Changes To This Privacy Policy

This Privacy Policy is effective as of the date set out at the top and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. 

Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected] or by using the other contact capabilities on this website.