Privacy Policy

1. Scope and Application

This Privacy Policy applies to personal information collected when you visit or use the Services; submit an inquiry or communicate with OrbitWorks; download materials or request a review; or interact with OrbitWorks in connection with business development, security and privacy inquiries, vendor management, and client or prospect communications, including private, pilot, confidential, or limited-availability offerings operated under the OrbitWorks brand.

This Privacy Policy does not override any separately executed contract, non-disclosure agreement, master services agreement, statement of work, data processing agreement, or other written agreement that specifically governs confidentiality, security, or data handling for a particular engagement. If such an agreement conflicts with this Privacy Policy, the written agreement controls to the extent of the conflict.

2. Who We Are

OrbitWorks is a security-first architecture and delivery practice. Depending on the context in which information is processed, OrbitWorks may act as a controller, business, processor, service provider, or similar role under applicable privacy law.

3. Information We Collect

3.1 Information You Provide Directly

We may collect name; business email address; phone number; company, role, and professional affiliation; the content of messages, requests, project descriptions, inquiries, or submissions; records of communications with OrbitWorks; and any files or materials you choose to provide.

3.2 Information Collected Automatically

When you access or interact with the Services, we and our service providers may automatically collect IP address or approximate geolocation derived from IP; browser type, device type, and operating system; referral source, pages viewed, and timing of visits; diagnostic and performance data; log data related to access and security events; and information collected through cookies or similar technologies.

3.3 Information from Third Parties

We may receive information from analytics, hosting, infrastructure, communications, and security providers; referral sources and business partners; and publicly available professional profile information.

3.4 Client Engagement Information

OrbitWorks may process business contact information, environment details, system information, architectural materials, support records, and other information associated with inquiries, proposals, private offerings, or client workspaces. Where OrbitWorks processes information on behalf of a client under a written contract, the applicable contract and data processing terms govern that relationship.

4. Information We Do Not Want Submitted Through Public Channels

Public contact forms and general website channels are not intended for the submission of credentials or private keys; exploit code or proof-of-concept materials; regulated or export-controlled data; payment card data; government-issued identifiers; health information; controlled unclassified or classified information; or confidential system details that should only be transmitted through an approved secure channel.

Do not submit sensitive information through general website forms unless OrbitWorks has expressly directed you to do so through a secure process. For security and trust matters, use the Trust Center.

5. How We Use Information

We may use personal information to operate, secure, maintain, and improve the Services; authenticate users and detect abuse or fraudulent activity; respond to inquiries and requests; evaluate and perform client engagements; create and retain documentation and operational materials; send administrative, security, service-related, or transactional communications; comply with legal obligations; establish, exercise, or defend legal claims; support internal business operations and governance; and, where permitted by law, send limited business communications about relevant services, updates, or insights.

6. Legal Bases for Processing

Where applicable law requires a legal basis for processing, OrbitWorks may rely on consent; performance of a contract or pre-contractual steps at your request; compliance with legal obligations; protection of vital interests; and legitimate interests pursued by OrbitWorks (including operating and securing the Services, preventing misuse, responding to inquiries, managing business relationships, and protecting legal rights) except where such interests are overridden by applicable legal rights.

7. Cookies, Analytics, Logs, and Similar Technologies

OrbitWorks uses only cookies and similar technologies that are necessary to operate, secure, and maintain the Services, together with limited first-party, privacy-preserving analytics configured to minimize personal data use. OrbitWorks does not use third-party advertising pixels, retargeting technologies, or cross-site behavioral tracking technologies on the core public website.

You can manage cookies through your browser or device settings. Where applicable, OrbitWorks honors Global Privacy Control (“GPC”) and other legally recognized universal opt-out preference signals. Additional details are provided in the Cookie Notice.

8. How We Disclose Information

OrbitWorks does not disclose personal information more broadly than reasonably necessary for the purposes described in this Privacy Policy. We may disclose information to hosting, infrastructure, analytics, communications, and security service providers acting on our behalf; professional advisers subject to confidentiality obligations; contractors or subcontractors engaged to support an engagement; counterparties in a corporate transaction; and government authorities where required or permitted by law. OrbitWorks does not use inquiry information submitted through the general contact form for unrelated third-party marketing.

9. International Transfers

OrbitWorks may store or process personal information in countries other than the country in which the information was originally collected. Where cross-border transfers are subject to legal requirements, OrbitWorks will use appropriate safeguards as required by applicable law.

10. Data Retention

OrbitWorks retains personal information for no longer than reasonably necessary for the purposes described in this Privacy Policy, including to respond to requests and maintain communications; operate the Services; document and administer engagements; comply with legal, tax, accounting, contractual, or regulatory obligations; preserve records relating to disputes or incidents; and maintain security, audit, and business continuity records. Retention periods vary based on the nature of the information, the purpose of processing, sensitivity, operational need, legal obligations, and risk.

11. Security

OrbitWorks applies administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, least-necessary access practices, encryption in transit where appropriate, logging, monitoring, configuration management, segmentation, documentation controls, secure collaboration practices, and vendor due diligence. No system or method of transmission is guaranteed to be completely secure.

12. Confidentiality and Client Information

Confidentiality is treated by OrbitWorks as a baseline expectation. However, information submitted through a public website form or unsolicited public channel should not be presumed to be a secure or privileged submission method. For active or prospective engagements involving confidential information, OrbitWorks may require a non-disclosure agreement, a written engagement, or an approved secure information-sharing method before receiving sensitive materials.

13. Your Rights and Choices

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to know whether we process your personal information; request access, correction, or deletion; request restriction of processing; object to certain processing; request data portability; withdraw consent; opt out of certain marketing communications; opt out of certain sales, sharing, targeted advertising, or profiling practices where applicable; and lodge a complaint with a competent supervisory or regulatory authority. OrbitWorks will not unlawfully discriminate against you for exercising applicable privacy rights. If you receive marketing communications from OrbitWorks, you may opt out using the unsubscribe mechanism in the message or by contacting us.

14. Region-Specific Privacy Information

14.1 EEA, UK, and Similar Jurisdictions

If data protection law in the EEA, UK, or a similar jurisdiction applies, you may have additional rights including rights to access, rectification, erasure, restriction, objection, portability, and complaint to a supervisory authority.

14.2 United States State Privacy Rights

If U.S. state privacy law applies to OrbitWorks and to the relevant processing, you may have applicable rights such as the right to know, access, correct, delete, port, or opt out of certain processing activities. OrbitWorks will respond in accordance with applicable law and any permitted exceptions. Where legally required, OrbitWorks will also process recognized opt-out preference signals including Global Privacy Control.

15. Children

The Services are intended for business, professional, and commercial audiences. OrbitWorks does not knowingly collect personal information from children under the age at which consent is required by applicable law. If you believe a child has provided personal information to OrbitWorks, contact us and we will take appropriate steps.

16. Third-Party Websites and Services

The Services may contain links to third-party websites, platforms, tools, or services. OrbitWorks is not responsible for the content, security, or privacy practices of third parties. Your use of third-party services is governed by the terms and policies of those third parties.

17. Supplemental Notices for Specific Offerings

OrbitWorks may provide additional or supplemental privacy notices for specific products, features, services, private offerings, client workspaces, or programs. Those supplemental notices will govern to the extent they conflict with this Privacy Policy for the covered context.

18. Changes to This Privacy Policy

OrbitWorks may update this Privacy Policy from time to time. Changes become effective when posted unless a later effective date is stated. Material changes may be highlighted through the Services or by other appropriate means where required by law. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Policy, except to the extent additional notice or consent is required by law.

19. Contact OrbitWorks About Privacy