Privacy Policy

1. Who we are

Next Orbit (“we”, “us”, “our”) is a web design and development studio based in Georgia. We are the controller of the personal data described in this policy. For anything privacy-related, email hello@nextorbit.studio.

2. What data we collect

• Contact & enquiry details — when you contact us, request a quote or book a call through a form on this site, we collect your name, email, company and anything else you include in the form or message.
• Project information you share so we can scope and deliver your website.
• Usage data — basic, privacy-friendly statistics about how the site is used (only if and when analytics are enabled).

We do not collect or store payment-card details ourselves — when online payments are enabled, they are handled by our payment processor.

3. Why we use it (legal basis)

• Respond to enquiries and prepare quotes — your request / pre-contract steps.
• Deliver and support our services — performance of a contract.
• Improve the site and, with your consent, send occasional updates — legitimate interests / consent.
• Meet legal, tax and accounting obligations — legal obligation.

4. Cookies & analytics

This site currently uses only the essential cookies needed to function. If we later add analytics or marketing cookies, we will ask for your consent first through a cookie banner, and you’ll be able to change your choice at any time.

5. Who we share it with

We share data only with service providers that help us run the studio, under appropriate data-processing agreements:

• Hosting — Vercel Inc. (hosting and content delivery).
• Payments — Stripe (only when online payments are enabled).
• Email — our email provider, to communicate with you.

We never sell your personal data.

6. International transfers

Some providers are located outside Georgia (for example in the EU or the USA). Where personal data is transferred internationally, we rely on the safeguards required by the Law of Georgia on Personal Data Protection (and the GDPR where it applies).

7. How long we keep it

We keep personal data only for as long as needed for the purpose we collected it, plus any period required by law (for example, accounting records). Enquiry data is deleted once it’s no longer needed.

8. Your rights

Under the Law of Georgia on Personal Data Protection (and the GDPR where it applies) you can ask us to: access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive a portable copy. To exercise any right, email hello@nextorbit.studio — we’ll respond within the timeframes set by law.

You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge).

9. How we protect your data

We use HTTPS encryption in transit, keep credentials in secure environment variables (never in our code), limit who can access data, and collect only what we need. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your information.

10. Children

Our services are intended for businesses and adults. We don’t knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the current version.

12. Contact

Questions about this policy or your data? Email hello@nextorbit.studio.