OrbitSign in

Privacy Policy

Last updated: 8 July 2026

Orbit is the client portal operated by LVerbeeck. This policy explains what personal data we process and how it can be erased. It covers two groups: portal users (agency and client staff who log in) and leads (people who submit a form on a website we host for a client).

1. Portal users — what we collect

  • Name, email address, and a securely hashed password.
  • Optional phone number and postal/company address.
  • Billing information via Stripe (we store a customer reference and invoice records — never card numbers).

Legal basis: performance of our service contract with you.

2. Leads captured from client websites

When someone submits a contact form on a website we host for a client, we store the details they provide (typically name, email, phone, and their message) and make them available to that client in their portal. We process this data as a processor on behalf of our client, who is the data controller for their own leads.

3. Reputation & reviews

For clients using the reputation feature, we sync public Google reviews (author name, rating, text) so the client can respond. Google remains the source of record.

4. Who we share data with (sub-processors)

  • Hetzner (EU hosting and database storage)
  • Cloudflare (CDN, security, bot protection)
  • Stripe (payment processing)
  • Amazon Web Services — SES (transactional email)
  • Anthropic (AI reply drafting, when used)
  • Google (reputation / Business Profile, when connected)

We never sell your data.

5. Retention & erasure

  • Portal users: your data is kept while your account is active. On account closure we erase your account and all associated sites, leads, invoices, and support history. Contact us to request erasure.
  • Leads:a client can delete any individual lead — or all of a site's leads — from their portal at any time, to honour a deletion request from the person who submitted the form.
  • Invoicing records may be retained where required for tax/accounting law.

6. Your rights

You have the right to access, correct, export, and erase your personal data, and to lodge a complaint with your data protection authority. To exercise any of these, email [email protected]. We respond within 30 days.