Privacy Policy

InOrbit X (“InOrbit X”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal information when you visit our website, communicate with us, use our digital platforms or services, or otherwise interact with InOrbit X.

InOrbit X provides technology solutions, digital platforms, artificial intelligence and automation solutions, enterprise integrations, embedded operational services, data analytics, and strategic consulting services, including solutions for the insurance, healthcare, financial services, and public-sector ecosystems.

Depending on the service being provided, InOrbit X may act as a controller of personal information or may process information on behalf of its clients in accordance with their instructions and applicable contractual arrangements.

This Privacy Policy applies to personal information collected through:

• The InOrbit X corporate website;
• Contact and enquiry forms;
• Business communications;
• InOrbit X digital platforms and applications, where applicable;
• Client, insurer, broker, TPA, healthcare provider, partner and vendor interactions;
• Recruitment activities;
• Events, demonstrations and marketing activities; and
• Other services operated or managed by InOrbit X where this Privacy Policy is referenced.

Client-specific platforms may be subject to additional privacy notices, terms, consent requirements or contractual provisions.

InOrbit X may use artificial intelligence, machine learning, analytics and automated technologies as part of its products and services.

Depending on the solution, these technologies may support activities such as data analysis, document processing, workflow automation, fraud detection, operational decision support, underwriting support, claims analytics and customer service.

Where AI technologies process personal information, InOrbit X will apply appropriate privacy, security, contractual and governance controls based on the nature of the service and applicable legal requirements.

Where required under applicable data protection laws, personal information will be processed on an appropriate legal basis, which may include:

• Your consent;
• Performance of a contract;
• Compliance with legal or regulatory obligations;
• Protection of legitimate interests where permitted;
• Protection of vital interests where applicable; or
• Other lawful grounds recognized by applicable legislation.

Where InOrbit X processes information on behalf of a client, the client may be responsible for determining the applicable legal basis for that processing.

We may disclose information where necessary to:

Third parties receiving personal information are expected to process it only for authorized purposes and subject to appropriate confidentiality, security and contractual requirements.

InOrbit X may use technology infrastructure, cloud services, vendors or business partners located in different jurisdictions.

Where personal information is transferred outside the jurisdiction in which it was collected, we will seek to implement appropriate safeguards as required by applicable data protection laws and contractual obligations.

Certain categories of regulated information may be subject to additional localization or transfer restrictions.

InOrbit X maintains administrative, organizational and technical measures designed to protect information against unauthorized access, disclosure, alteration, loss, misuse or destruction.

InOrbit X maintains an information security management framework aligned with its applicable ISO/IEC 27001 certification scope. No electronic system can, however, be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, contractual, operational, accounting and audit requirements.

Information processed on behalf of clients may be retained or deleted in accordance with the applicable client agreement and instructions, subject to legal requirements.

Our website may use cookies and similar technologies to:

• Operate essential website functionality;
• Maintain security and session integrity;
• Understand website usage patterns;
• Improve website performance and loading speeds; and
• Remember user preferences.

Where required, users will be provided with appropriate choices regarding non-essential cookies. A separate Cookie Policy may be published where appropriate.

Subject to applicable law, you may have rights concerning your personal information, including rights to:

• Request access to your personal information;
• Request correction of inaccurate or incomplete information;
• Request deletion where legally permitted;
• Request restriction of certain processing activities;
• Object to certain processing of your data;
• Withdraw consent where processing is based on consent; and
• Exercise other rights available under applicable data protection legislation.

Certain rights may be subject to legal, regulatory or contractual exceptions. Where InOrbit X processes your information solely on behalf of another organization, your request may need to be directed to that organization as the relevant data controller.

Our corporate website and business services are not generally intended for direct use by children.

Where information relating to minors is processed as part of an authorized insurance, healthcare or other client service, it will be processed for the relevant legitimate service purpose and subject to applicable legal and contractual requirements.

Our website or platforms may contain links to third-party websites or services. InOrbit X is not responsible for the privacy practices, security or content of third-party websites. Users should review the privacy policies of those organizations separately.

We may update this Privacy Policy periodically to reflect changes in our services, technologies, legal requirements or business practices. The latest version will be published on our website with the applicable “Last Updated” date.