Website and marketing privacy
This notice covers the ACHOS public website and its marketing campaigns. Orbits Plus Limited operates ACHOS. For questions or to exercise your rights, email contact@orbitsplus.co.uk. This is separate from the privacy arrangements for information held in a broker's CRM.
When you contact us
We use the contact details and message you submit to respond to your enquiry and manage the conversation. Providing optional company and telephone information is your choice. Please do not include mortgage-client financial records, identity documents or other sensitive information in this form.
Marketing emails and your preferences
We record contact provenance, sending eligibility and your marketing choices. We use an applicable documented lawful basis for business outreach; consent is required where the applicable electronic-marketing rules require it. A listed or publicly available business address does not, by itself, establish permission.
Every marketing email includes an unsubscribe link. An objection is applied across ACHOS marketing lists. We keep a minimal suppression record so that a later import does not accidentally add you back. Essential service communications are separate.
Email and website measurement
Where the applicable permission has been recorded, email image requests and tracked links can show which campaign message a request is associated with. Image proxies, security scanners, forwarding and shared devices mean these records are not proof of who read an email.
Optional first-party website analytics records pages, stable button identifiers, form interaction, scroll milestones and approximate active time. A separate campaign-attribution choice connects a consented visit and enquiry with an email link, including return visits within 30 days. We do not use browser fingerprinting or collect the text you type for analytics.
Optional Google Analytics and Microsoft Clarity diagnostics are a separate choice. They remain off until selected. We do not send campaign recipient identifiers to these services. The campaign-admin workspace does not load either integration.
Your choices and rights
You can change optional website measurement at any time using . Withdrawing consent stops future optional collection. Contact us to request access, correction, deletion or restriction, or to object to direct marketing. We may need to verify your identity before disclosing records.
You can also raise a concern with the Information Commissioner's Office.
Retention and access
Campaign raw engagement events are retained for up to 90 days and reporting summaries for up to 13 months under the campaign retention policy. Import files are temporary and exports expire. Minimal suppression records remain while needed to honour an objection. Enquiry and service records follow their applicable business and legal retention requirements.
Access is limited to authorised personnel. Azure hosts the campaign application, email delivery and storage. Optional diagnostics providers process data under their own service terms and applicable transfer safeguards. Marketing activation is subject to the operational privacy and supplier review.
See the cookie details for storage purposes and durations. Updated September 2026.