Website Privacy Policy

1. Who we are

OrbitLoop is a registered trade name of Codigo Vision Inc. For data collected on this marketing website we act as a controller.

Questions, requests or complaints: privacy@orbitloop.com.

2. What we collect on this website

Contact-form enquiries

When you submit the contact form we collect the details you type — typically your name, work email, company, team size and message — so that we can reply and keep track of the conversation. Accepted enquiries are recorded in our customer-records system (HighLevel), in an account operated by Epic Momentum. Our server adds the time of the submission, your IP address and your browser's user-agent details, and the visit details described below.

Where you came from. The first time you open the contact page in a tab, your browser keeps a note of it in sessionStorage (which is cleared when you close the tab). When you submit the form, that note and the current page are sent with your enquiry: the page address, the page you arrived from, any campaign tags in the link (such as utm_source), any ad-click identifiers in the link (Google gclid, Meta fbclid, Microsoft msclkid), a label for the kind of traffic it was (for example “Organic Search”), and, if present in your browser, the Google Analytics client identifier and Meta advertising cookie values. This is stored with your enquiry in HighLevel so that we know which pages and campaigns lead to enquiries. It is not used to advertise to you.

Our hosting logs record the outcome of each submission. They can include your IP address and, where we could not deliver a submission, the details you entered, so that an enquiry is not lost.

Technical and visitor data

When measurement scripts are loaded (see section 4), those scripts and our servers receive your IP address, general device and browser details, page addresses and titles, and roughly where you arrived from.

Lead-origin attribution

If you click a contact call-to-action on these pages, we may store a short record of that click — page path, section, link text and a timestamp — in your browser's sessionStorage for up to two hours, so that a later successful form submission can be attributed to the button that started it. That particular record never leaves your browser except as fields on a Google Analytics conversion event when Analytics is enabled; it is separate from the visit details sent with your enquiry, described above.

3. Legal bases

Where the UK/EU GDPR applies, we rely on: legitimate interests (answering enquiries, understanding which marketing pages are useful, securing the site), contract or steps toward a contract when you ask us to get in touch, and consent where we ask for it — which you may withdraw at any time.

There is currently no cookie-consent banner on these pages. If you would rather not be counted by analytics, see the options in section 4.

4. Cookies, analytics and website tracking

We run no advertising or social-media pixels on these pages, we do not use any of what follows to advertise to you on other websites, and we do not sell or share your data for advertising. The signed-in OrbitLoop application uses only essential sign-in and session cookies; see the Privacy Policy.

These public marketing pages may carry measurement scripts. When they load, they send what they collect from your browser to servers in the United States, so those servers also receive your IP address.

Google Analytics (when enabled via our site configuration) tells us which pages and which buttons are useful. It sets a couple of cookies and records the pages you visit, the links and buttons you click and their labels, roughly where you arrived from, general details about your device and browser, and whether you went on to submit the contact form. It answers questions like “does anyone click the pricing button” — not to build a profile of you, and never to identify you personally. Google receives nothing you type, and the contact form’s contents are not sent to Google. Google processes this information as a service provider; their handling of it is covered by Google’s own privacy policy.

HighLevel is the customer-records system that holds enquiries you send us through the contact form (written server-side when the enquiry is accepted). Separately, HighLevel supplies an optional External Tracking script. That script is loaded on these marketing pages only when our site is configured with a HighLevel tracking id; if that id is not set, the script does not load and none of the browser messages below are sent. When it is enabled and a page loads in your browser, the script sends HighLevel a message containing the page address and title, the page you arrived from, and your browser and device details. It sets a cookie holding an identifier and sends that along with each message, so the messages sent from one page load are recognisable as belonging together. It generates a fresh identifier every time you load a page afresh, so it does not join one visit to the next.

When the HighLevel tracking script is enabled, it also measures how long you were actively engaged, watching for typing, scrolling, mouse movement and taps. When you leave, or after a long idle spell, it sends a further message carrying that duration and the address of the page you were on at that moment.

When the HighLevel tracking script is enabled and you press the button on our contact form, that same script reads what you typed and sends that too — your name, work email, company, team size and your message, together with the wording of the labels on those boxes and your browser’s time zone — alongside the page address. It reads the form at the moment you submit it, not as you type, and it does so whether or not the enquiry is then accepted: if we turn a submission away and ask you to correct something, that copy has already left your browser.

HighLevel is also where an accepted enquiry is recorded, so that a person can reply to you. When tracking is enabled, the details you typed and the record of the visit you typed them on can therefore sit alongside one another there. What we do with that is answer you and keep track of the conversation. We do not use it to follow you around other websites, and we do not sell it or share it.

We are describing what your browser sends rather than what happens to it afterwards, because the first is something we can be certain of and the second sits inside another company’s systems. If any of this changes, this page will say so before it starts rather than afterwards.

If you would rather not be counted, a privacy extension such as uBlock Origin will stop Google Analytics — though you should know that the common blocking lists do not currently cover the HighLevel script, so when that script is enabled it carries on. Two smaller things worth knowing: private browsing does not stop any of this during your visit, it only discards what was stored afterwards; and blocking cookies stops Google Analytics counting you as a returning visitor, but it does not stop the HighLevel script when enabled, which falls back to other browser storage and carries on sending. These pages work exactly the same either way, and nothing is withheld from you for opting out.

5. Service providers

• Amazon Web Services — hosts this website (United States).
• Google — analytics for these marketing pages when enabled (United States).
• HighLevel (LeadConnector) — customer-records system for contact-form enquiries, and optional marketing-page tracking when enabled (United States).

6. International transfers

Our infrastructure and these service providers are in the United States. If you are in the UK, EU or elsewhere, your data is transferred to the United States under appropriate safeguards, including standard contractual clauses where required.

7. Retention, and your rights

We keep enquiries and the visit details sent with them for as long as we are in conversation with you or your organisation, and delete them on request. Analytics data is kept for the period set in our Google Analytics property. Data in your browser's sessionStorage is cleared when you close the tab.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to receive a portable copy, and to withdraw consent. California residents have the right to know what is collected and to opt out of “sale” or “sharing” — neither of which we do.

Write to privacy@orbitloop.com. We respond within 30 days. We will not discriminate against you for exercising a right. If you are unsatisfied, you may complain to your local data protection authority. We will confirm your identity before acting on a request, and you may use an authorised agent.

You do not have to give us any information to read this website. The contact form needs your name and email address so that we can reply. We do not make decisions about you based solely on automated processing.

8. Children

This website is aimed at businesses. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the site changes. The “last updated” date at the top always reflects the current version. For material changes affecting your rights we will update this page before they take effect.

10. Contact

Codigo Vision Inc. — privacy@orbitloop.com. You can also reach us through our contact page.