How we handle your data.

1. Who we are

Orbit Stack Ltd (“Orbit Stack”, “we”, “us”) is a private limited company incorporated under the Companies Act, 2019 (Act 992), registration number CS095090526, whose registered office is at House Number 12B, Racko Junction, Near Racko School Complex, Twumduase, Kumasi, Ashanti Region, Ghana. We are the data controller for personal data collected through https://orbitstackglobal.com (the “Site”) and in the course of providing our services.

Questions about this policy or your data can be sent to support@orbitstackglobal.com or by post to the address above.

2. What we collect

Information you give us

• Contact details when you enquire, request a quote or sign a contract: name, organisation, job title, email address, phone number.
• Billing details when you buy from us: billing address, tax identification number, and payment confirmation details returned by our payment processor.
• Account details if we provision access to a service such as Kepler: name, work email, role and the permissions granted to you.
• Content of correspondence with us, including support requests.

Information collected automatically

• Technical data when you use the Site: IP address, browser type and version, device type, pages visited, referring page and timestamps.
• Cookies and similar technologies, described in section 9.

Information from third parties

• Payment status and limited transaction details from Paystack when you pay an invoice or subscription.
• Business verification information from public registries where needed to enter a contract.

3. Why we use it and our lawful basis

• To respond to enquiries and provide quotes — on the basis of your consent and steps taken at your request before entering a contract.
• To deliver services, manage accounts and provide support — to perform our contract with you or your organisation.
• To invoice, collect payment, process refunds and keep accounts — to perform our contract and to meet legal obligations under Ghanaian tax and company law.
• To secure our systems, prevent fraud and enforce our terms — in our legitimate interests, balanced against your rights.
• To improve the Site and our services — in our legitimate interests, using aggregated or pseudonymised data wherever possible.
• To send service notices such as changes to terms, security alerts or planned maintenance — to perform our contract. Marketing messages are sent only with your consent, and you can withdraw it at any time.

4. Payment data

Card and mobile money payments are processed by Paystack, which handles your payment details under its own privacy policy and security standards. We do not receive or store your full card number, CVV or mobile money PIN. We receive confirmation of payment, the last four digits of a card where applicable, and the details needed to reconcile and refund transactions.

5. Who we share data with

• Paystack, for processing payments and refunds.
• Cloud hosting, email and productivity providers that store data on our behalf under contract.
• Professional advisers such as accountants, auditors and lawyers, where necessary.
• Regulators, courts and law enforcement, where required by law.
• A buyer or successor in the event of a merger, acquisition or reorganisation, subject to this policy.

We do not sell personal data.

6. International transfers

Some of our providers store data outside Ghana. Where that happens we make sure the transfer is permitted under Act 843 and that the recipient is bound by contractual or equivalent safeguards providing an adequate level of protection.

7. How long we keep data

• Enquiries that do not lead to a contract: 12 months from our last contact.
• Contract, account and support records: the life of the contract plus 6 years.
• Invoices, payment and refund records: 6 years, as required by Ghanaian tax and company law.
• Site analytics data: 26 months, in aggregated form where possible.

When a retention period ends we delete or anonymise the data.

8. Your rights

Under Act 843 you have the right to:

• be told what personal data we hold about you and to receive a copy;
• have inaccurate or incomplete data corrected;
• have data deleted where we no longer have a lawful reason to keep it;
• object to processing, including for direct marketing;
• withdraw consent where processing is based on consent; and
• complain to the Data Protection Commission of Ghana.

To exercise a right, email support@orbitstackglobal.com. We respond within 30 days and may ask you to confirm your identity first.

9. Cookies

The Site uses a small number of cookies and similar technologies. Strictly necessary cookies remember your cookie choice and keep the Site working. Analytics cookies, if enabled, help us understand which pages are used so we can improve them; they are set only after you accept the cookie notice. You can clear or block cookies in your browser settings; doing so may affect parts of the Site.

10. Security

We protect personal data with access controls, encryption in transit, least-privilege permissions and logging. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the Data Protection Commission as required by law.

11. Children

Our services are for organisations and working professionals. We do not knowingly collect data from anyone under 18.

12. Changes

We may update this policy from time to time. The effective date at the top of the page shows when it last changed, and we will notify account holders of material changes by email.