Privacy policy

Who we are

OV25 LTD, registered in England and Wales, company number 16295962. We are the controller of personal information we use to run this website, manage OV25 accounts and provide our own services.

This is our privacy notice for orbital.vision, the OV25 platform and our related services, including enquiries, demos and support. Where a retailer or another business uses OV25 to process information on its behalf, that business may be the controller and its own privacy notice also applies.

Make a privacy request · OV25 platform and AI services · Your rights

Information we use and why

• Enquiries: your name, work contact details, company and anything you include in your message. We use this to respond and discuss the services you have requested. The basis is taking steps at your request before entering a contract, or our legitimate interest in answering business enquiries when you act for an organisation.
• Demo requests: your name, email, optional phone number, selected appointment and time zone. Clicking Continue saves your details with our booking service at app.orbital.vision so we can arrange and follow up on your request. Confirming a booking creates the appointment. The same enquiry bases apply; this does not subscribe you to a newsletter.
• Newsletter: your email address when you sign up through the form in our footer, with the time and IP address of the sign-up as a record of your choice. We send a confirmation email and add you to the list only once you confirm. Mailchimp (Intuit) stores the list and sends the newsletter on our behalf; see Intuit’s privacy statement. Our basis is your consent, which you can withdraw at any time using the unsubscribe link in every email or by contacting us.
• Service and security information: hosting providers process connection information, including IP addresses and requested URLs, to deliver the site. Cloudflare Turnstile may check browser and device signals when you use our booking or privacy request forms to prevent automated abuse. Our basis is our legitimate interest in providing a secure, reliable service.
• Optional analytics: if you agree, Google Analytics processes identifiers, page visits, approximate location and browser/device information to measure site use. Our basis is your consent.
• Optional experience recordings: if you agree, Microsoft Clarity processes page interactions, clicks, scrolling and device information to create heatmaps and session recordings. Booking and contact form content is masked. Our basis is your consent.
• Privacy requests: your name, email address, request type, details and any information needed to verify your identity. We use this to respond to requests and comply with our legal obligations. Requests are routed to our privacy team through our existing application and email service.
• Cookie preferences: we store your choices, the notice version and when you made your choice so we can honour it. See the cookie policy.

Please avoid including sensitive personal information in an enquiry. Our contact form opens your email application; the message reaches us only when you send it from that application. Email and booking requests are not added to a marketing list through this website; only the newsletter form in our footer does that, and only after you confirm by email.

OV25 platform and AI services

Accounts and service delivery. When you use OV25, we process the details you provide to create and manage your account: your name, contact details, organisation, role, authentication information, account preferences and support correspondence. We also process the assets, product information and other content you upload or create, together with service activity and diagnostic information. We use this to provide 3D asset management, product configuration, integrations, collaboration and support. The basis is our contract with you, or our legitimate interest in delivering a business customer’s service where you act for that organisation.

Payments. We use billing and transaction details to manage purchases and business records, under our contract and applicable legal obligations. Card payment information is handled by Stripe; see Stripe’s privacy notice.

Connected services. When you connect another account or enable an integration, we process the information and permissions needed for the features you request. Information received from Google APIs is used in accordance with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke permissions through the connected provider as well as contacting us.

AI features. When you use an AI feature, the inputs and relevant assets you submit are processed by the providers needed to generate the result, including Google Cloud AI and Flux services where used. Outputs and associated activity may be stored in your account to deliver and support the feature. Please do not upload sensitive personal information or another person’s information without authority. Processing for requested AI features uses the same service-delivery bases above; separate consent is needed where applicable.

Security and communications. We use service and device logs to protect accounts, diagnose problems and prevent abuse, relying on our legitimate interests in a secure service. Administrative messages concern your account or requested service. Marketing messages have a separate applicable basis and an opt-out; you can object to direct marketing at any time.

Customer-controlled data. Where we process personal information on a business customer’s instructions, our agreement with that customer governs the processing. If a request concerns that customer’s records, we may need to help the customer respond rather than decide it ourselves.

Who receives information

Information is available to our authorised team and the providers needed to operate the service: our website hosting and content delivery providers, email, booking, account, storage, payment and requested AI infrastructure, and Cloudflare for form security. Mailchimp (Intuit) receives the email addresses of newsletter subscribers. For privacy requests, Resend delivers the notification to our team and an acknowledgement to you; see Resend’s privacy policy. On this marketing website, Google Analytics and Microsoft Clarity receive information only when the relevant optional category is enabled. The providers used for a requested platform or AI feature are separate from those optional website analytics choices. We may also disclose information when legally required or to professional advisers where necessary.

Google’s processing is described in Google’s privacy policy and Microsoft’s in the Microsoft Privacy Statement. Cloudflare describes Turnstile processing in its Turnstile Privacy Addendum.

International processing

Some suppliers, including Google, Microsoft and Mailchimp (Intuit), operate outside the UK, including in the United States. Where UK law requires protection for an international transfer, the applicable arrangement must be an adequacy decision or appropriate contractual safeguards. Contact us for information about the arrangements that apply to your data.

How long information is kept

Enquiry and booking information is kept for as long as needed to respond, manage the requested service and retain relevant business records. The period depends on whether the enquiry leads to a customer relationship, any continuing correspondence and applicable legal obligations or disputes. Contact us for the retention period applicable to your enquiry or to request deletion.

Your cookie choice expires after 180 days. Google Analytics cookies on this site are configured to expire within 180 days. Cookie expiry is separate from a provider’s retention of information already received. Microsoft normally retains recordings for 30 days, and heatmaps or saved recordings for up to nine months. The cookie policy links to provider retention information.

Platform information is retained for the period needed to provide your account and the services you request. After account closure, some records may need to be retained for legal obligations, security, resolving disputes or enforcing agreements. Information with no continuing purpose is deleted or anonymised; where immediate removal from backups is not possible, it is isolated until deletion is possible. Privacy request correspondence is retained as needed to handle your request and demonstrate that we have responded.

Security and children

We use organisational and technical safeguards to protect personal information. No online service can guarantee absolute security. Where a personal data breach requires notification under applicable law, we notify the relevant authority and affected people as required.

Our business services are not directed at children under 18. If you believe a child has provided personal information through our services, contact us so we can investigate and take appropriate action.

Your choices and rights

You can reject optional tracking or withdraw consent at any time through Cookie settings. Withdrawal does not affect processing that was lawful before you withdrew. It does stop future collection through the disabled services on this site.

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. You can always object to direct marketing. These rights are subject to the conditions in UK data protection law.

Email info@orbital.vision or use our privacy request form. We may need to verify your identity. We normally respond within one month; if an extension is permitted because of complexity or the number of requests, we explain why within the initial month. You also have the right to complain to the UK Information Commissioner’s Office.

Changes to this notice

We update this notice when our website or its processing changes. A material change to optional cookie purposes or providers will require a new choice before those services can run.