Privacy Policy

1. Who We Are

The data controller is SuperiorStudents, trading as iBOrbit. We are based in the United Kingdom. Our contact email for all privacy matters is hello@iborbit.com.

2. Data We Collect

Account and contact data

• Your name and email address when you sign up, join the waitlist, or purchase a product
• Any additional profile information you choose to provide

Payment data

• Payment is processed by Stripe. We do not store your card number, sort code, or full bank details — these are held by Stripe under their own privacy policy.
• We retain a record of the transaction amount, date, and product purchased.

Submitted work

• IB essays, IAs, drafts, and other academic work you share with a coach for review
• Feedback and annotations produced during coaching sessions

Usage data

• Standard server logs (IP address, browser type, pages visited, timestamps) collected automatically when you use our website
• We do not use analytics tools that track you across other websites

Communications

• Emails, messages, and session notes exchanged with iBOrbit coaches or support staff

3. How We Use Your Data

To deliver our services

We use your name, email, and submitted work to provide coaching, operate the community, and respond to your questions. Lawful basis: contract.

To process payments

We share your email and transaction details with Stripe to process purchases and manage billing. Lawful basis: contract.

To send you relevant emails

We use Kit (formerly ConvertKit) to send transactional emails (receipts, session confirmations) and, where you have opted in, educational content and product updates. Lawful basis: contract for transactional emails; legitimate interest or consent for marketing emails.

You can unsubscribe from marketing emails at any time using the link at the bottom of any email.

To improve our coaching

We may use anonymised, non-identifiable excerpts from submitted work for internal coach training. We will never use your work in a way that identifies you without your explicit consent. Lawful basis: legitimate interests.

To comply with legal obligations

We may retain transaction records as required by UK tax and accounting law. Lawful basis: legal obligation.

4. Third-Party Processors

We use a small number of trusted third-party services to operate iBOrbit. Each processes your data only as necessary to provide their service:

• Stripe — payment processing. stripe.com/gb/privacy
• Kit (ConvertKit) — email delivery. kit.com/privacy
• Skool — community platform. skool.com/privacy
• Vercel — website hosting. vercel.com/legal/privacy-policy

We do not sell your data to any third party, ever.

Some of these processors are based in the United States. Where data is transferred outside the UK, we rely on Standard Contractual Clauses or the UK adequacy framework to ensure an equivalent level of protection.

5. How Long We Keep Your Data

• Account and coaching data: retained while your account is active and for 2 years after your last interaction with us, then deleted.
• Payment and transaction records: retained for 7 years as required by UK tax law.
• Email list: retained until you unsubscribe or request deletion.
• Server logs: retained for up to 90 days, then automatically deleted.

If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are legally required to retain it (e.g. transaction records).

6. Your Rights

Under UK GDPR, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Deletion: ask us to delete your data (subject to legal retention requirements)
• Restriction: ask us to limit how we process your data in certain circumstances
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, email hello@iborbit.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

Our website uses minimal cookies:

• Strictly necessary: session cookies required for the site to function (e.g. login state). These cannot be disabled.
• Preference cookies: we store small amounts of data in your browser's localStorage (e.g. whether you have already submitted the lead magnet form) to avoid showing the same prompt repeatedly. No tracking or advertising cookies are used.

We do not use Google Analytics, Meta Pixel, or any cross-site tracking tool.

8. Children and Minors

Our services are available to students aged 16 and over. Students under 18 must have a parent or guardian review these terms and this policy and authorise their participation. We do not knowingly collect data from children under 16. If you believe a child under 16 has submitted data to us, please contact us and we will delete it promptly.

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and using reputable third-party processors who maintain their own security standards.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at hello@iborbit.com.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website. The "last updated" date at the top of this page reflects the most recent revision. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, requests, or complaints: hello@iborbit.com

We aim to respond to all requests within 30 days.