Who we are. Blue Orbits is a software engineering company registered in the United Arab Emirates, at Meydan Grandstand, 6th Floor, Nad Al Sheba, Dubai. Our engineering team works from Karachi, Pakistan. This policy explains what personal data we collect through this website and our campaign landing pages, why we collect it, and what we do with it. Questions, requests or complaints: [email protected].

What we collect

When you contact us. Our contact form, our landing page forms and our case study request form ask for your name, work email, company, dialling code and phone number, and whatever you write in the message field. Our contact form also lets you attach a CV or portfolio; if you do, we receive that file and whatever it contains.

When you use live chat. The chat widget on this site is operated by Tawk.to. Anything you type into it, and basic technical details about your visit, are processed by Tawk.to on our behalf.

When you simply browse. Like most websites we receive your IP address, browser and device type, the pages you view, and the page or advertisement that referred you. Where you arrive from an advertisement we also receive the campaign identifiers in the link, such as UTM parameters and Google click identifiers.

We do not ask for, and do not want, special categories of data — health, religion, political opinion or anything similar. Please do not include them in a message to us.

Why we use it, and on what basis

We use enquiry details to reply to you, to prepare a proposal, and to keep a record of the conversation. Where the law requires a legal basis, ours is our legitimate interest in responding to a business enquiry, or the steps necessary to enter into a contract with you. We use analytics to understand which pages and campaigns work; where consent is required for that, we rely on your consent and you can withdraw it through your browser settings.

We do not sell personal data. We do not share it with advertisers. We do not add you to a marketing list because you asked us a question.

Who else sees it

We use a small number of service providers who process data on our behalf: our website host and email provider, Google (Tag Manager and Analytics), and Tawk.to for live chat. Each is bound to use the data only for the service they provide to us. We may also disclose data where we are legally required to.

Where your data is processed — please read this one

Our engineering and delivery team is in Pakistan. Enquiries and project correspondence are handled by people working there, so personal data you send us is accessed from, and may be stored in, Pakistan as well as the United Arab Emirates. Pakistan has not been designated as providing an adequate level of data protection by the United Kingdom or the European Union.

If you are in the United Kingdom or the European Economic Area and you engage us commercially, we will put an appropriate transfer safeguard in place before any of your data reaches our team — an International Data Transfer Agreement or Standard Contractual Clauses, together with a transfer risk assessment. Ask us for a copy before you share anything sensitive and we will provide it.

How long we keep it

Enquiries that do not become projects are kept for up to twenty-four months, so that we can recognise you if you come back. Records relating to actual engagements are kept for as long as the contract runs and then for as long as tax, accounting and legal requirements oblige us to. CVs sent speculatively are kept for twelve months unless you ask us to delete them sooner.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. If you are in the UK or the EEA these rights come from the UK GDPR or the GDPR. If you are in the UAE they come from the Personal Data Protection Law. If you are in California you may also ask what we have collected and ask us to delete it; we do not sell or share personal information as those terms are defined there.

To exercise any of these, email [email protected]. We will respond within one month. If you are not satisfied with our answer you may complain to your local data protection authority.

Cookies and analytics

We use cookies to keep the site working and, through Google Tag Manager and Google Analytics, to understand how it is used and which advertising campaigns bring people here. You can block or delete cookies in your browser settings; parts of the site may work less well if you do.

Security, stated honestly

We take sensible measures to protect the data we hold: access is limited to people who need it, connections to this site are encrypted, and every engineer signs an individual confidentiality and intellectual property agreement. We do not currently hold ISO 27001 or SOC 2 certification, and we will tell you so on the first call rather than imply otherwise. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect data from anyone under eighteen.

Changes to this policy

If we change how we handle personal data we will update this page and the date shown at the top. If the change is significant and we hold your contact details, we will tell you directly.