Privacy Notice

Last updated: 15 November 2026

1. Who we are

ThinkBoxUK Ltd, including under any of its trading names ("we", "us"), is the controller of the personal data described in this notice. Contact us by email at support@orlia.ai, or by post at: ThinkBoxUK Ltd, Unit 4, 35 Creek Road, Hayling Island, PO11 9QZ.
ThinkBoxUK Ltd is registered in England and Wales, company number 10824292. Its registered office is the address above.

2. What this notice covers

Personal data about the businesses that use our services, their staff, and visitors to our websites. It does not cover personal data we process for a business as its processor. That business's own privacy notice covers it.

3. Where we get it

We get personal data from you, from the business you work for, from our service providers, from publicly available sources, and from your use of our services and websites.

4. Why we use it, and our lawful basis

• To provide our services and manage accounts: performance of a contract.
• To meet our legal obligations: legal obligation.
• To run, secure and improve our business, services and websites: our legitimate interests in doing so.
• To protect our rights and defend legal claims: our legitimate interests in doing so.

5. Who receives it

Our service providers; our professional advisers; anyone who buys or takes over our business; and authorities where the law requires.

6. Transfers outside the UK

Some of our service providers process personal data outside the UK. Where they do, it is protected by UK adequacy regulations, or by UK-approved contract terms: the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, published by the Information Commission at ico.org.uk.

7. How long we keep it

For as long as you use our services or websites, and afterwards only as long as needed to meet our legal obligations, protect our rights or resolve disputes.

8. Your rights

You have the right, where the law allows, to request access to, correction of, deletion of, and restriction of processing of your personal data; to object to processing; and to receive your personal data in a portable format. Where we rely on consent, you can withdraw it at any time. To use these rights, write to us (section 1).

9. Complaints

You can complain to us by writing to us (section 1). You can also complain to the Information Commission at ico.org.uk.

10. Providing your data

You need to give us your contact and account details to use our services.

11. Changes

We may update this notice. The current version is always on our website.