Orble Services
Privacy

Privacy notice

What we collect, why, who sees it, and your rights. Last updated: 12 October 2026.

Who we are

Orble Services ("we") is a small-business web services company. We decide how the personal data described here is used, so we are the "controller" under UK data protection law. You can reach us at [email protected].


What we collect

Contact form. Your name, email address, optional phone number, the services you are interested in and your message. We also record the date and time and your IP address with each enquiry.


Client accounts. Your name, business email address and a password, which we store only as a one-way hash so we cannot read it. New sign-ups are checked and approved by us before the account is active. Once you are a client we also keep the project information we record for you, such as project titles, status and notes.


Email. If you email us, or reply to one of our emails, we keep the correspondence.


Security and technical data. Your IP address is kept for a short time (around 15 minutes) to limit repeated login and form attempts. The companies that host and protect our website, listed below, may also log technical details such as your IP address, browser type and the pages requested.


Why we use it, and our legal basis

To reply to your enquiry and take steps you ask for before you become a client (this is part of preparing a possible contract). To set up and run your client account and show you project updates (to carry out our contract with you). To keep the website and accounts secure and to prevent abuse (our legitimate interest in running a safe service). To keep records we are legally required to keep. When you send the contact form we also send you an automatic email confirming we received it; it does not repeat what you wrote.


Cookies

We use a single session cookie when you visit the client sign-in, sign-up and password-reset pages and when you sign in. It keeps the page secure and keeps you signed in, and it is deleted when you close your browser. We do not use advertising, analytics or tracking cookies. Our security provider, Cloudflare, may set its own security cookie to protect the site from automated abuse.


Fonts are loaded from Google Fonts, which means your browser contacts Google when a page loads and Google can see your IP address.


Who sees your data

Only Orble Services and the providers that run our website and email: Namecheap (website hosting and our email mailboxes) and Cloudflare (DNS and website security and delivery). Google provides the fonts, as above. These providers only handle data on our behalf and for the purposes described here. We do not sell your data, and we do not share it for marketing. We may disclose data if the law requires it.


Some of these providers may process data outside the UK. We only use providers that offer the safeguards UK data protection law requires for that.


How long we keep it

Enquiries: normally no longer than 12 months, unless you become a client. Client accounts and project records: until you ask us to close your account, after which we delete them, apart from anything the law requires us to keep. Security attempt records: around 15 minutes. Email: for as long as it is needed for the enquiry or the work. Deleted data can remain in our regular backups for a short while until they are replaced.


Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop using it for something based on our legitimate interests. Where it applies, you can also ask for your data in a portable format. Email [email protected] and we will reply within one month. We may need to confirm who you are first.


If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.


Changes to this notice

If we change how we use personal data we will update this page and the date at the top.