Privacy Policy | Orbatic Technology LLP

Orbatic Technology LLP ("Orbatic," "we," "our," or "us") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit orbatic.com, contact us, create an account, or use our software, applications, platforms, catalogue tools, visualizers, dealer applications, live links, AI-powered features, and related services (collectively, the "Services").

We process personal data in accordance with applicable privacy and data-protection laws, including the General Data Protection Regulation ("GDPR") where it applies.

1.Who we are

The data controller responsible for the personal data described in this Privacy Policy is:

Orbatic Technology LLP

1402, North Block, Twin Star

Near Nana Mauva Circle

Rajkot, Gujarat, India - 360005

Email: marketing@orbatic.com

Website: https://orbatic.com

For privacy-related requests, please use the subject line "Privacy Request."

2.Scope of this policy

This Privacy Policy applies to personal data collected through:

The Orbatic website and contact forms;
Orbatic software platforms and dashboards;
Catalogue and product-management services;
3D, AI, and 360-degree visualization services;
Dealer, manufacturer, sales, and end-user applications;
Live catalogues, permanent links, and QR-code services;
Product demonstrations, exhibitions, webinars, and meetings;
Customer service, technical support, training, and business communications.

This policy does not apply to third-party websites or services that have their own privacy policies.

3.Our role as controller and processor

For information that you provide directly to Orbatic for enquiries, account management, billing, marketing, website operation, or support, Orbatic generally acts as the data controller.

When a business customer uploads or manages personal data relating to its employees, dealers, customers, suppliers, buyers, or other contacts through our Services, that customer is generally the data controller and Orbatic acts as a data processor or service provider on its behalf.

If your personal data was entered into our Services by one of our customers, you should normally direct your privacy request to that customer. We will assist the customer in responding where required by applicable law and our contractual obligations.

4.Personal data we collect

Depending on how you interact with us, we may collect the following categories of information:

4.1 Identity and contact information

Name;
Company or organisation name;
Job title or role;
Email address;
Business and postal address;
Country, state, or region.

4.2 Account information

Username and account identifier;
Password in encrypted or hashed form;
User role and access permissions;
Login history;
Account preferences;
Authentication and verification information.

4.3 Business and service information

Product designs, images, catalogues, collections, specifications, and metadata;
Dealer, customer, supplier, or team information entered into the Services;
Orders, enquiries, remarks, comments, and transaction-related records;
Catalogue settings, visualizer settings, generated documents, and shared links;
Training, onboarding, demonstration, and support records.

4.4 Technical and usage information

IP address;
Browser type and version;
Device type and operating system;
Device identifiers;
Login time and activity logs;
Pages, features, and links accessed;
Error reports, diagnostic records, and performance information;
Referring URLs and approximate location derived from an IP address.

4.5 Communication information

We may retain communications made through email, contact forms, meetings, webinars, demonstrations, support requests, or other business channels.

4.6 Payment and billing information

We may collect billing names, addresses, tax information, invoice details, subscription information, payment status, and transaction references.

Where payments are processed by a third-party payment provider, complete card or banking credentials are generally collected and processed directly by that provider rather than stored by Orbatic.

4.7 Cookies and similar technologies

We may use cookies, local storage, pixels, analytics technologies, and similar tools to operate the website, remember preferences, maintain sessions, measure performance, detect security threats, and understand how visitors use our Services.

5.How we collect personal data

We may collect personal data:

Directly from you;
From your employer, organisation, administrator, or authorised user;
When you complete a contact or enquiry form;
When you register for or use our Services;
When you contact our sales or support teams;
During demonstrations, training sessions, webinars, or exhibitions;
Automatically through cookies, servers, application logs, and similar technologies;
From business partners, authorised resellers, or publicly available business sources where legally permitted.

6.Purposes and legal bases for processing

Where the GDPR applies, we process personal data under one or more of the following legal bases:

6.1 Contractual necessity

We process information necessary to:

Create and manage user accounts;
Provide subscriptions and requested Services;
Generate catalogues, previews, links, QR codes, and related outputs;
Process billing and payments;
Provide training, maintenance, support, and service communications;
Enforce contractual terms.

6.2 Legitimate interests

We may process personal data where necessary for our legitimate business interests, including:

Improving and developing our products;
Securing our systems and preventing misuse or fraud;
Monitoring service performance;
Managing business relationships;
Responding to enquiries;
Maintaining appropriate business records;
Promoting relevant business services to existing or prospective business contacts.

We balance these interests against your rights and reasonable expectations.

6.3 Consent

We may rely on your consent for:

Non-essential cookies;
Certain analytics or advertising technologies;
Promotional messages where consent is required;
Other processing activities for which we specifically request permission.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6.4 Legal obligation

We may process information to comply with tax, accounting, corporate, regulatory, judicial, law-enforcement, or other legal requirements.

6.5 Protection of vital interests

In exceptional circumstances, we may process information where necessary to protect an individual's life, health, or safety.

7.AI-powered and automated features

Some Services may use artificial intelligence, computer vision, image similarity, image processing, or automated recommendation technologies.

These features may analyse images, product information, colours, visual characteristics, tags, or user-selected criteria to generate previews or search results.

Unless expressly stated otherwise, Orbatic does not use these features to make decisions that produce legal or similarly significant effects concerning individuals.

Customer content will not be used to train general-purpose AI models unless this is specifically disclosed and permitted by the applicable agreement or valid consent.

8.How we share personal data

We may share personal data with:

Cloud hosting and data-storage providers;
Content delivery and infrastructure providers;
Email, SMS, notification, and communication providers;
Analytics and website-performance providers;
Payment processors and accounting providers;
Customer support and technical service providers;
Security, fraud-prevention, monitoring, and backup providers;
Professional advisers, including accountants, auditors, insurers, and legal advisers;
Government bodies, regulators, courts, or law-enforcement authorities where legally required;
A buyer, investor, successor, or adviser in connection with a merger, restructuring, financing, acquisition, or transfer of business assets.

We require service providers that process personal data on our behalf to protect it and process it only for authorised purposes.

We do not sell personal data for monetary consideration.

9.International data transfers

Orbatic is established in India, and personal data may be processed in India or other countries where we or our service providers operate.

Where personal data is transferred from the European Economic Area, United Kingdom, or another jurisdiction with international-transfer restrictions, we use legally recognised safeguards where required. These may include:

European Commission Standard Contractual Clauses;
The UK International Data Transfer Addendum or equivalent safeguards;
Transfers to countries recognised as providing adequate protection;
Other lawful exceptions or transfer mechanisms.

You may contact us for additional information about safeguards applicable to your personal data.

10.Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may depend on:

The duration of the customer account or subscription;
The nature of the information and Service;
Contractual and customer instructions;
Security, backup, and disaster-recovery requirements;
Applicable tax, accounting, regulatory, and legal obligations;
The establishment, exercise, or defence of legal claims.

Account and customer data is generally retained during the active service relationship and for a reasonable period afterward. Certain billing, tax, contractual, and transaction records may be retained for longer where required by law.

When information is no longer required, we will delete, anonymise, or securely isolate it, subject to lawful backup-retention cycles.

11.Cookies

11.1 Essential cookies

These cookies are required for website security, authentication, network management, session operation, and other essential functionality. They cannot normally be disabled through our website.

11.2 Preference cookies

These cookies remember settings such as language, region, or display preferences.

11.3 Analytics cookies

These cookies help us understand traffic, usage patterns, errors, and website performance.

11.4 Marketing cookies

Where used, these cookies may help measure campaigns or provide relevant advertising.

Where required by applicable law, we will obtain consent before placing non-essential cookies. You can accept, reject, or manage such cookies through our cookie-consent tool.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website or application functionality.

12.Data security

We use reasonable technical and organisational safeguards designed to protect personal data. Depending on the nature of the Service, these may include:

Encryption in transit;
Encryption or other protection for stored information where appropriate;
Access controls and role-based permissions;
Password hashing and authentication controls;
Network and application monitoring;
Logging, backup, and recovery procedures;
Security updates and vulnerability management;
Restricted access based on business requirements;
Confidentiality obligations for authorised personnel.

No internet transmission or electronic-storage system is completely secure. Therefore, we cannot guarantee absolute security.

13.Personal data breaches

We maintain processes to assess and respond to suspected personal-data breaches.

Where required by applicable law, we will notify the appropriate supervisory authority, affected customer, or affected individual within the legally prescribed period.

Where Orbatic acts as a processor, we will notify and assist the relevant customer in accordance with applicable law and our contractual commitments.

14.Your privacy rights

Depending on your location and applicable law, you may have the right to:

Request access to your personal data;
Request correction of inaccurate or incomplete information;
Request deletion of your personal data;
Request restriction of processing;
Object to processing based on legitimate interests;
Object to direct marketing;
Request portability of eligible personal data;
Withdraw consent at any time;
Request information about international-transfer safeguards;
Not be subject to certain decisions based solely on automated processing;
Submit a complaint to an appropriate data-protection authority.

These rights may be subject to legal conditions and exceptions.

To exercise a right, contact us using the information in Section 1. We may request reasonable information to verify your identity and authority before completing the request.

We aim to respond within the period required by applicable law. Under the GDPR, this is generally within one month, subject to permitted extensions for complex or multiple requests.

You also have the right to lodge a complaint with the data-protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

15.Marketing communications

We may send service-related communications necessary to administer your account or provide the Services.

We may separately send information about Orbatic products, updates, demonstrations, events, or offers where permitted by law.

You can opt out of promotional communications at any time by:

Using the unsubscribe method provided in the communication; or
Contacting us at marketing@orbatic.com.

Opting out of marketing will not stop essential account, security, billing, or service-related communications.

16.Customer-uploaded content

Business customers and their authorised users may upload product images, catalogues, company information, dealer details, contact information, and other content.

Customers are responsible for ensuring that:

They have a lawful basis for uploading and using personal data;
Appropriate privacy information has been provided to affected individuals;
Required permissions or consents have been obtained;
Their instructions to Orbatic comply with applicable law;
User permissions and access rights are properly managed.

Orbatic processes such information according to the customer's instructions, applicable agreements, and legal requirements.

17.Public and shared content

Some Services allow customers to create public or shareable catalogues, QR codes, live links, product pages, or visualizations.

Information published through these features may be accessible to anyone who has the relevant link or scans the QR code. Customers should not publish personal, confidential, or sensitive information through public features unless they are authorised to do so.

18.Children's privacy

Our Services are intended for businesses and professional users and are not directed to children.

We do not knowingly collect personal data directly from children below the age at which they can independently consent under applicable law. If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can investigate and take appropriate action.

19.Third-party links and services

Our website or Services may contain links to third-party websites, applications, social-media platforms, payment services, or communication tools.

Orbatic does not control the privacy practices of these third parties. You should review their privacy policies before providing personal data to them.

20.Required information

Certain personal data may be necessary to create an account, enter into a contract, process payment, provide a requested Service, or comply with legal obligations.

If required information is not provided, we may be unable to create the account, enter into the relevant agreement, or provide some or all of the requested Services.

21.Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technologies, business operations, service providers, or legal obligations.

The updated policy will be published on this page with a revised "Last Updated" date. Where changes materially affect how we use personal data, we will provide additional notice where required.

22.Contact us

For questions, complaints, consent withdrawals, or privacy-rights requests, contact: