Privacy Notice
Last updated: 16 August 2026
This notice explains what personal data Orion Aero collects through this website, why we collect it, and what rights you have over it.
1. Who we are
In this notice, "Orion Aero", "we", "us" and "our" mean Orion Aero Limited, a company registered in England and Wales, company number 16746410, registered office 29 Charles Street, Mayfair, London W1J 5DT.
Orion Aero Limited is the data controller for personal data collected through this website. That means we decide why and how it is used, and we are responsible for looking after it.
For any question about this notice or about your personal data, contact privacy@orion-aero.co.uk.
We are not required to appoint a Data Protection Officer and have not done so. Privacy matters are handled by the directors.
2. What we collect
This website is a small brochure site with a single enquiry form. We do not run advertising, profiling or analytics on it.
Information you give us
If you complete the enquiry form, we collect the information you enter:
- your name
- your organisation
- your work email address
- the area of interest you select
- anything you write in the message field
You choose what to put in the message field. Please keep it to what is needed to route your enquiry.
Information collected automatically
Our hosting provider records standard technical information when a page is requested, including IP address, browser type, the page requested and the time of the request. This is used to deliver the site, keep it available and protect it from abuse.
Information we do not want
We do not ask for, and would rather you did not send, special category data — information about health, race or ethnicity, religion or belief, political opinions, trade union membership, genetic or biometric data, sex life or sexual orientation — or information about criminal offences. If you send it to us unprompted, we will delete it unless we are required to keep it.
3. Why we use it, and our legal basis
| What we do | Legal basis |
|---|---|
| Read and respond to your enquiry, and follow up on it | Legitimate interests — running our business and responding to people who contact us. Where your enquiry is about entering into a contract with us, we also rely on steps taken at your request before entering a contract. |
| Keep a record of correspondence, including who asked what and when | Legitimate interests — maintaining an accurate business record, and being able to evidence what was disclosed to whom. This matters in a regulated sector. |
| Check that an enquiry is legitimate before sending technical information, including sanctions and export-control screening where appropriate | Legal obligation under export control and sanctions legislation, and legitimate interests in not disclosing controlled information to inappropriate recipients. |
| Keep the website available and secure | Legitimate interests — protecting our systems. |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights. We think it is not, because the data involved is ordinary business contact information, you have chosen to send it to us, and we use it only for the purpose you sent it for. You can object at any time — see Your rights.
We do not use your data for marketing, and we do not sell it or share it for anyone else's marketing. We do not carry out automated decision-making or profiling.
4. Who we share it with
- Our service providers. Netlify, which hosts this website and processes form submissions, and Microsoft, which provides our email. They act on our instructions and may not use your data for their own purposes.
- Other companies in our group, where they need it to respond to your enquiry — Orion Group Holdings Ltd (England and Wales) and Orion Sovereign Group Pty Ltd (Australia).
- Professional advisers, such as lawyers and accountants, where relevant.
- Regulators, government bodies or law enforcement, where we are required to disclose — including under export control and sanctions legislation.
5. Sending data outside the UK
Some of the organisations above are outside the United Kingdom. Where personal data is transferred outside the UK, we make sure an appropriate safeguard recognised under UK data protection law is in place — usually the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses.
Our email is hosted by Microsoft in the United Kingdom. Website and form data is processed by Netlify in the United States. Our group includes a company in Australia whose staff may see enquiries relevant to them.
You can ask us for a copy of the safeguards we rely on by emailing privacy@orion-aero.co.uk.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to a business relationship | 24 months from our last contact with you |
| Enquiries that lead to a business relationship | For the relationship, then 6 years, to cover the ordinary limitation period for contract claims |
| Records we must keep for export control or sanctions purposes | For the period required by the relevant legislation |
| Technical and server logs | As retained by our hosting provider, typically a short period |
7. Cookies
This website does not use analytics, advertising or tracking cookies, and does not track you across other websites. That is why you are not being asked to accept cookies. If that changes we will update this notice and ask for your consent first, as the law requires.
8. Security
The site is served over HTTPS. Access to enquiries is limited to people who need it. No system is perfectly secure, which is one reason we ask you not to send controlled or sensitive information through the form.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you
- have inaccurate data corrected
- ask us to delete data, where there is no good reason for us to keep it
- ask us to restrict how we use it while a question about it is resolved
- object to our use of it where we rely on legitimate interests
- ask us to transfer it to you or another organisation in a machine-readable format, in some circumstances
To exercise any of these, email privacy@orion-aero.co.uk. We will respond within one month. There is no charge. We may ask you to confirm your identity first.
10. Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
11. Changes to this notice
If we change how we use personal data, we will update this notice and change the date at the top. Where the change is significant we will make that clear.