Privacy Policy

1. Information we collect

We collect information you give us directly, and a small amount collected automatically:

• Order information. Name, email address, delivery address, phone number, and the personalisation text you choose for a certificate (for example, the name recorded on it).
• Payment information. We never see or store your card number. Payment is handled entirely by Stripe, our PCI‑compliant payment processor; we retain only a transaction reference and the amount charged.
• Contact form submissions. Whatever you enter when you write to us.
• Technical information. Standard server logs (IP address, browser type, pages visited, timestamps) used to keep the registry secure and to enforce fair‑use limits on public lookups such as certificate verification.

2. How we use it

• To process your order, assign a territory, and issue your certificate.
• To ship your physical package and contact you about delivery.
• To respond to questions sent through the contact page.
• To maintain the public registry record tied to your certificate number.
• To detect abuse, prevent fraud, and keep the site secure.

We do not sell your personal information, and we do not use it for third‑party advertising.

3. What appears on the public registry

A certificate number and the territory it corresponds to can be looked up on our public verification page. That lookup does not display your name, email, or address, only the certificate number, the territory reference, and its recorded status. The personalisation name you choose is printed on your physical certificate but is not published on the public verification page.

4. Who we share information with

We share information only with the service providers needed to run the registry and fulfil your order: our payment processor (Stripe), our hosting and database provider, and, once you have a label, the shipping carrier we use to deliver your package. We do not share your information with data brokers or advertisers.

5. How long we keep it

We keep order and shipping records for as long as needed to fulfil the order, answer support questions about it, and meet our own accounting and legal obligations. The certificate‑to‑territory registry record is kept indefinitely, since verifying a certificate is a permanent part of what you receive.

6. Cookies

We use only the minimum cookies needed to operate the site, such as keeping your checkout session working. We do not use third‑party advertising or tracking cookies.

7. Your choices

You can ask us to tell you what information we hold about an order, correct it, or delete it, subject to what we are required to keep for accounting, fraud prevention, or the integrity of the public registry record. To make a request, use the Contact page and include your order reference.

8. Children

ExplOrbit is intended for adults purchasing on behalf of themselves or as a gift. We do not knowingly collect personal information directly from children.

9. Changes to this policy

If we make a material change to this policy, we will update the effective date above. Continued use of the site after a change means you accept the updated policy.

10. Contact

Questions about this policy or a request about your data can be sent through the Contact page.