Personal Data Policy

Anyone who gives us their data through the form on getorbleap.com, by WhatsApp, by email or in the course of our services.

What you give us in the form:

• Name (optional).
• Email address (required).
• The address of your website or your Instagram username.
• WhatsApp number (optional).

What is generated when we prepare your review: the result of analyzing the public information about your business (your website, your public social profiles, your listings in directories and search engines) and the website proposals we build from it.

What is generated when you interact with us: emails exchanged, WhatsApp messages, call notes, and technical browsing data (IP address, device type, the country you visit from, where the visit came from and the campaign that brought you).

Payment-related data: the transaction reference and its status. OrbLeap does not receive or store card numbers or banking credentials; the payment gateway handles that directly.

We do not request sensitive data (health, ethnic origin, political, religious or sexual orientation, biometric data) or data about children and adolescents. If you send it to us on your own, we will delete it. If you are a health professional and hire us, we do not process your patients’ data.

1. Preparing and delivering your review and the related website proposals.
2. Communicating with you by email or WhatsApp about that review, answering your questions and arranging the review call.
3. Contacting you with OrbLeap’s commercial offers: service proposals, improvements to your online presence, informational content and our own promotions. This includes emails and messages after your review is delivered, even if you haven’t hired anything.
4. Managing payment and invoicing when you hire a service, and meeting the resulting tax and accounting obligations.
5. Measuring and improving the service: aggregate statistics on how many people contact us, through which channel and with what results.
6. Meeting legal obligations and responding to requests from competent authorities.

We do not sell, rent or transfer your data to third parties for their own commercial use.

Processing is based on your prior, express and informed authorization, which you give by clicking the form’s button with the authorization notice in view, by writing to us on WhatsApp to request the review, or by accepting this policy through any other verifiable means. We keep proof of that authorization, with its date and the channel through which it was given.

You can revoke it at any time, as described in section 8.

• Know, update and correct your data.
• Request proof of the authorization you gave.
• Be informed of how it has been used.
• File complaints with Colombia’s Superintendence of Industry and Commerce (SIC), once the process with us is complete.
• Revoke your authorization and request deletion of your data, when no legal or contractual duty prevents it.
• Access your data free of charge.

To operate we use providers that act as data processors. By authorizing us, you also authorize your data to be hosted and processed on their platforms, including servers outside Colombia, mainly in the United States:

We require them to process data only according to our instructions and with adequate security measures. This list is updated when a provider changes.

Write to privacidad@orbleap.com (or on WhatsApp) with your name, a way to contact you and what you are requesting. You don’t need to justify your request or pay anything.

If a claim arrives incomplete, we will let you know within 5 days so you can complete it. If it isn’t completed within two months, it will be considered withdrawn.

To stop receiving commercial messages, just reply “ELIMINAR” or “DELETE” to any of our emails or messages, or write to the address above. We process it without conditions.

We keep it while there is a relationship with you and while the purpose that justified it remains.

• If you don’t hire any service, we keep your contact details and your review for up to 24 months from your last contact, so we can offer you our services. After that they are deleted.
• If you hire a service, we keep the information during the relationship and afterwards for as long as commercial, accounting and tax rules require.
• If you revoke your authorization or request deletion, we delete your data except what we must keep by legal duty, and confirm the deletion to you.

We apply reasonable measures: restricted access to the accounts that hold the data, two-step verification where the provider allows it, credentials kept out of the code and the documentation, and least privilege in the access our clients grant us. No system is infallible; if an incident affected your data, we would inform you and report it to the authority when appropriate.

getorbleap.com and orbleap.com may use cookies and similar technologies to measure traffic, where visits come from and how well our advertising campaigns work, and a cookie that remembers the prices you chose to see. You can block them in your browser settings; the form will keep working.

We may update it. The current version is always the one published at getorbleap.com/privacidad (in Spanish) and getorbleap.com/en/privacy, with its update date. If a change substantially affects the purpose of processing, we will tell you and, where the law requires it, ask for a new authorization.

This policy has been in effect since September 25, 2026. The databases will remain in force for as long as the purposes described in section 4 last.