Privacy Policy

1) Who we are (data controller)

Controller: Play Orbit Garden Ltd (Private Limited Company (Ltd)). Address: 20-22 Wenlock Road, London, England, N1 7GU, United Kingdom. Email: contact@playorbitgarden.com. Companies House No: 14273951. VAT: GB893472156.

2) Data we collect

• Account data (if you create an account): name, email, login credentials, preferences.
• Support/contact data: messages you send, contact details, and any information you include.
• Usage & device data: pages viewed, approximate location, IP address, browser/device info, timestamps, and referral data (typically via analytics and server logs).
• Transaction/contract data (if applicable): records needed to provide services and for accounting.

3) How we use data and legal bases

• Provide the website and services, manage accounts and requests (Contract; Legitimate Interests).
• Respond to enquiries and provide support (Legitimate Interests; Contract where relevant).
• Analytics and service improvement (Consent for non-essential cookies/SDKs where required; otherwise Legitimate Interests for strictly necessary measurement).
• Security, fraud prevention, and troubleshooting (Legitimate Interests; Legal Obligation where applicable).
• Compliance with law and defending legal claims (Legal Obligation; Legitimate Interests).

4) Cookies and analytics

We may use cookies and similar technologies. Where required, we will ask for your consent before setting non-essential analytics cookies. You can manage preferences via your browser settings and any on-site consent controls (where available).

5) Sharing and processors

We share personal data only as needed with service providers acting as processors (e.g., hosting, analytics, email/support tools), professional advisers (legal/accounting), and authorities where legally required. We require appropriate contractual safeguards and limit access on a need-to-know basis.

6) International transfers

If data is transferred outside the UK/EEA, we use recognised safeguards such as the UK International Data Transfer Agreement (IDTA) and/or EU Standard Contractual Clauses, and additional measures where appropriate.

7) Retention

We keep personal data only as long as necessary for the purposes described: account data while your account is active (and for a limited period after closure), support records for follow-up and audit, analytics data in aggregated or time-limited form, and longer where required by law (e.g., tax/accounting) or to establish/defend legal claims.

8) Your rights (UK/EU)

• Access, rectification, erasure, restriction, and data portability.
• Object to processing based on legitimate interests; withdraw consent at any time (where processing is based on consent).
• Complain to the UK Information Commissioner’s Office (ICO) (see ico.org.uk) and, where applicable, your EU supervisory authority.

To exercise rights, contact us at contact@playorbitgarden.com.

9) Security

We use technical and organisational measures designed to protect personal data (e.g., access controls and secure infrastructure). No method of transmission or storage is 100% secure.

10) Changes

We may update this policy from time to time. We will post the updated version on this page and change the effective date above.