Privacy policy

Orbit is a digital loyalty card service for businesses. It is run by PLANAJOB LTD, Office 1782, London, W1T 2EW, United Kingdom. This policy covers the Orbit website, the business dashboard, the wallet cards and the Orbit Scan app.

When a business uses Orbit to run its loyalty card, that business decides what happens with its customers' details. We hold and process them on its behalf. For the business's own account, we are responsible for the data.

When you join a business's loyalty card, we store:

• your name and email address, and your phone number if you choose to give it;
• whether you agreed to hear about offers from that business;
• your stamps, rewards and the date, time and branch of each visit;
• if you add the card to Apple Wallet, an identifier for your device and a push token, so the card on your phone updates when you get a stamp.

We do not collect your location. The business sets where its shops are, and your phone decides on its own when to show the card nearby. We do not read anything else on your phone.

• the business name, logo, website and phone number if given, branch addresses and card design;
• each staff member's name, email if given, role, when they were last active, and a scrambled form of their PIN and dashboard password (never the PIN or password itself);
• for the Orbit Scan app, a sign-in token for each device. Only a scrambled form is stored, and the business owner can switch off a lost phone at any time.
• for each signed-in phone, its name and type, its system version and when it was last used, so the owner can see each phone and switch it off.
• which staff member gave each stamp, so the business has an honest record.

The Orbit Scan app uses the camera only to read a customer's card code. Nothing is photographed, recorded or stored.

• to run the loyalty card: giving stamps, unlocking rewards and keeping the card on your phone up to date;
• to send the messages a business writes to its card holders, which appear on the wallet card;
• to send service emails, such as a link to your card;
• to keep the service secure and stop misuse.

We never sell personal data. We do not show adverts, and there are no advertising or analytics trackers on Orbit. The only cookie is the one that keeps business staff signed in to the dashboard.

We use a small number of providers to run the service:

• Vercel, which hosts the website and servers, in London;
• Neon, which runs our database;
• Resend, which sends our emails;
• Apple, and Google if you use Google Wallet, to deliver and update wallet cards;
• Google Maps, which turns a shop's address into map coordinates so the card can appear on the lock screen nearby.

Each one handles data only to provide its part of the service. Where data leaves the UK, it is protected by the safeguards UK law requires.

A business can also connect its own systems. If it does, events such as a new customer, a stamp or a reward are sent to the address that business chooses, and it is responsible for what happens there.

We keep card data for as long as the business keeps its loyalty card running with us. When a business closes its account, or asks us to remove a customer, we delete that data within 30 days, unless the law requires us to keep it longer.

Under UK data protection law you can ask to see the data held about you, correct it, delete it, or object to how it is used. You can ask the business whose card you hold, or contact us at pm@netaccessmarketing.com and we will help. You can also complain to the Information Commissioner's Office at ico.org.uk.

Orbit is not aimed at children, and the Orbit Scan app is for business staff only.

If this policy changes, we will update this page and the date at the top.