PRIVACY POLICY

Last Updated: July 2026

ORBIT-12 Limited, trading as ORBIT-12 (“ORBIT-12,” “we,” “us,” or “our”), operates this online store, website, digital products, free tools, apparel services, and related customer-support functions (collectively, the “Services”).

Our online store is hosted by Shopify. This Privacy Policy explains how ORBIT-12 collects, uses, stores, shares, and protects personal information when you visit the website, place an order, submit information for an Entity Blueprint, use our Services, or communicate with us.

This Privacy Policy is a notice describing our information-handling practices. It does not replace any mandatory privacy right available under applicable law.

Important distinction: the Free BaZi Profile and the paid Entity Blueprint use different data processes. Information entered into the free browser-based calculator is not submitted as an Entity Blueprint order. Birth information for a paid Blueprint is collected separately through the secure form sent after purchase.

1. WHO CONTROLS YOUR PERSONAL INFORMATION

For personal information collected and controlled by ORBIT-12 in connection with the Services, the data controller or data user is:

ORBIT-12 Limited
Room A, 19/F, 367–373 King's Road
North Point, Hong Kong

Email: support@orbit12.com

Certain service providers, including Shopify and payment providers, may also process personal information under their own legal responsibilities and privacy policies.

2. PERSONAL INFORMATION WE COLLECT

“Personal information” means information that identifies you or can reasonably be connected with you. The categories collected depend on how you interact with ORBIT-12.

Contact and Customer Information

We may collect:

Your full name.
Email address.
Telephone number.
Billing address.
Shipping address.
Country or region.
Customer-account details and preferences.

Order and Transaction Information

We may collect:

Products viewed, added to cart, purchased, cancelled, or returned.
Order number and purchase history.
Product variants, garment sizes, colours, and designs selected.
Shipping, fulfilment, delivery, and tracking information.
Discount, promotional, and Entity Blueprint eligibility information.
Payment status, refund status, and transaction confirmation.

Full payment-card numbers are generally processed through Shopify and its payment providers. ORBIT-12 does not normally receive or store the complete card number.

Entity Blueprint Personalization Information

To prepare a paid Entity Blueprint, we may collect:

Birth year, month, and day.
Exact birth time.
Birth city and country.
For United States births, city, state, and country.
The male or female sex selection required by the traditional chart calculation method.
Time-zone, daylight-saving, longitude, or related calculation information derived from the submitted birth location.
Clarifications or corrections provided during customer support.

ORBIT-12 treats this personalization information as private and applies additional handling restrictions to it. It is used to prepare, verify, deliver, support, or correct the Entity Blueprint.

Chart calculation variable: the sex selection requested in the Entity Blueprint form is used as a calculation variable within the traditional chart method. It is not intended to define, evaluate, or invalidate a customer’s gender identity.

Providing the required Entity Blueprint information is voluntary in the sense that you do not have to purchase or complete the product. However, ORBIT-12 cannot prepare the paid Blueprint without the required birth information.

Communications and Support Information

We may collect information included in emails, refund requests, correction requests, complaints, support enquiries, reviews, photographs, screenshots, or other communications sent to us.

Device, Website, and Cookie Information

Depending on your settings, we may collect:

IP address.
Browser and device type.
Operating system.
Approximate country or region.
Pages visited and actions performed.
Cart, checkout, login, and session information.
Cookie and consent preferences.
Fraud, security, and technical diagnostic information.

3. FREE BAZI PROFILE

The Free BaZi Profile is designed to perform its basic calculation within your web browser.

Birth information entered into the free calculator is not intentionally submitted to ORBIT-12 as part of the calculator function and is not treated as a paid Entity Blueprint submission.

General website information—such as the fact that a visitor opened or interacted with the page—may still be processed through Shopify’s essential website, security, and consent-management systems.

If you later purchase an Entity Blueprint, you must separately submit the required birth information through the secure post-purchase form. ORBIT-12 does not use the free calculator’s default time to prepare a paid Blueprint.

4. HOW WE COLLECT PERSONAL INFORMATION

We may collect personal information:

Directly from you, including when you place an order, complete a form, create an account, contact support, request a correction, or exercise a privacy right.
Automatically through the website, including through Shopify, cookies, local storage, security tools, and similar technologies.
From service providers, including payment, fulfilment, form, automation, database, shipping, and email-delivery providers.
From carriers and fulfilment partners, including delivery, tracking, address, damage, and lost-package information.
From fraud-prevention and payment providers, where needed to verify or protect a transaction.

5. HOW WE USE PERSONAL INFORMATION

ORBIT-12 may use personal information to:

Process and Fulfil Orders

Process purchases and payment confirmations.
Prepare and deliver the Entity Blueprint.
Provide access to Decryption Keys.
Produce and ship made-to-order apparel.
Send order, fulfilment, tracking, and delivery communications.
Confirm promotional Entity Blueprint eligibility.

Prepare and Support the Entity Blueprint

Generate BaZi and Zi Wei Dou Shu chart information.
Apply time-zone, location, or daylight-saving adjustments.
Verify submitted information where clarification is required.
Respond to correction, support, or re-delivery requests.
Investigate calculation, file, or delivery errors.

Operate and Secure the Services

Maintain the website, cart, checkout, account, and customer service.
Detect fraud, abuse, security incidents, or unauthorized access.
Troubleshoot technical problems.
Maintain records needed to establish consent or defend legal claims.

Improve the Customer Experience

Understand general store performance.
Improve product descriptions, navigation, and checkout experience.
Evaluate product demand and operational performance.

Comply With Legal Obligations

Maintain tax, accounting, transaction, and business records.
Respond to lawful requests from courts or public authorities.
Enforce applicable terms and policies.
Protect ORBIT-12, customers, service providers, and other persons.

Marketing

ORBIT-12 may send promotional email only where permitted by law and where the required consent or other lawful basis exists.

You may unsubscribe from promotional email using the unsubscribe option in the message or by contacting us.

Transactional communications—including order confirmations, delivery messages, form links, support replies, security messages, and policy notices— are not promotional marketing and may still be sent where needed to provide the Services.

ORBIT-12 does not use precise Entity Blueprint birth information for advertising or marketing segmentation.

6. LEGAL BASES FOR EEA AND UK PROCESSING

Where the European Union or United Kingdom data-protection rules apply, we generally rely on the following legal bases:

Activity	Legal Basis	Purpose
Processing purchases and payments	Performance of a contract	To complete and administer your order
Collecting birth information and preparing the Entity Blueprint	Performance of a contract	To create the personalized product you purchased
Apparel production and shipping	Performance of a contract	To manufacture and deliver your order
Fraud prevention, security, and misuse investigation	Legitimate interests and, where applicable, legal obligation	To protect customers, transactions, and ORBIT-12 systems
Customer support and service improvement	Contract performance and legitimate interests	To answer requests and improve operations
Tax, accounting, and regulatory records	Legal obligation	To comply with applicable law
Promotional email	Consent or another lawful basis permitted by local law	To send optional promotional communications
Non-essential cookies	Consent where required	To enable optional functionality or measurement

Where we rely on consent, you may withdraw that consent at any time. This does not affect processing already carried out lawfully before withdrawal.

7. COOKIES AND SIMILAR TECHNOLOGIES

ORBIT-12 and Shopify use cookies and similar technologies to operate the website.

Essential Cookies

Essential cookies may be used without optional consent where permitted by law because they are required for functions such as:

Shopping cart and checkout.
Customer-account sessions.
Security and fraud prevention.
Cookie and privacy preferences.
Website stability and basic functionality.

Non-Essential Cookies

Where required by law, non-essential cookies will be controlled through the website’s cookie consent banner and will not be activated until the required consent is provided.

You may adjust available cookie preferences using the cookie banner or your browser settings. Blocking essential cookies may prevent parts of the store, cart, or checkout from functioning correctly.

As of the “Last Updated” date of this policy, ORBIT-12 does not intentionally operate Google Tag Manager, Meta Pixel, or TikTok Pixel on the store.

This policy will be updated if ORBIT-12 introduces materially different analytics, advertising, or tracking technologies.

8. SERVICE PROVIDERS AND DATA RECIPIENTS

ORBIT-12 uses third-party providers to operate the Services. These providers may receive only the information reasonably required for their role.

Provider	Function	Information That May Be Processed
Shopify	Store hosting, cart, checkout, payment support, account, security, and ecommerce operations	Contact, order, payment-status, device, usage, cookie, and transaction information
Fillout	Secure customer-facing Entity Blueprint form	Order reference, contact information, birth information, and form responses
Airtable	Internal order and Entity Blueprint fulfilment database	Order details, fulfilment status, contact information, birth information, and support records required for preparation
Make	Workflow automation between ORBIT-12 systems	Order identifiers, customer contact details, form data, fulfilment status, and digital-delivery information passing through an automation
Printful	Apparel production, fulfilment, shipping, tracking, and product-issue handling	Customer name, shipping address, contact details, ordered items, product variants, and fulfilment information
Payment, email, hosting, storage, security, and professional-service providers	Payment processing, communication, storage, security, accounting, legal support, and technical operation	Information reasonably necessary for the relevant service

These providers process information under their applicable agreements, data-processing terms, security practices, and privacy notices.

ORBIT-12 may also disclose information:

When you request or authorize the disclosure.
To investigate fraud, misuse, security incidents, or payment disputes.
To comply with a valid legal or regulatory requirement.
To establish, exercise, or defend legal claims.
In connection with a genuine merger, acquisition, restructuring, financing, insolvency, or sale of all or part of the business.

9. BIRTH INFORMATION RESTRICTIONS

ORBIT-12 does not sell, rent, or trade precise Entity Blueprint birth information to advertising companies or data brokers.

Birth information is not provided to Printful for apparel fulfilment and is not used to select advertising audiences.

Birth information may pass through Fillout, Airtable, Make, email or file delivery systems, and authorized ORBIT-12 personnel where reasonably necessary to prepare, deliver, correct, support, or secure the Entity Blueprint.

Access should be limited to persons and providers who require it for the relevant operational purpose.

10. THIRD-PARTY AI PLATFORMS

The Entity Blueprint and Decryption Keys are designed so that you may choose to use them with an independent AI platform such as ChatGPT, Claude, Gemini, or another compatible service.

ORBIT-12 does not automatically send your Blueprint to those AI platforms merely because you purchased the product.

When you personally upload, paste, or enter your Blueprint, birth information, questions, or other content into an AI platform:

You are choosing to disclose that information to the platform.
The platform’s own privacy policy and account settings apply.
The platform may retain, review, or use the information according to its own terms and selected privacy settings.
ORBIT-12 does not control the platform’s retention, training, security, or deletion practices.

Conversations you have directly with a third-party AI platform are not automatically sent back to ORBIT-12.

Review the privacy and data-control settings of the chosen AI platform before uploading a Blueprint or other personal information.

11. DATA RETENTION

ORBIT-12 retains personal information only for as long as reasonably required for the purpose for which it was collected, including fulfilment, support, security, accounting, legal, and dispute-management purposes.

Entity Blueprint Birth Information

Birth information used to prepare an Entity Blueprint is retained in active fulfilment systems for a maximum of 90 days after the completed Blueprint is delivered, unless:

You request earlier deletion.
A limited extension is reasonably required to resolve an active correction, complaint, payment dispute, fraud investigation, or legal claim.
Applicable law requires a different retention period.

After the applicable period, ORBIT-12 will delete or de-identify the birth information from active fulfilment records.

Residual copies may remain temporarily in restricted backup, security, or technical logs until those systems are overwritten according to their normal retention cycles.

You may request earlier deletion by emailing support@orbit12.com .

Earlier deletion may prevent ORBIT-12 from correcting, recalculating, or re-delivering the Blueprint after the information has been removed.

Order and Transaction Records

Order, payment-status, refund, tax, accounting, shipping, and transaction records may be retained for the period reasonably required by applicable commercial, tax, accounting, fraud-prevention, and legal obligations.

Support and Complaint Records

Support correspondence may be retained for a reasonable period after the matter is closed to maintain service history, respond to follow-up questions, and establish or defend legal claims.

Marketing and Cookie Preferences

Marketing preferences are retained until you unsubscribe, withdraw consent, or until the information is no longer needed. A limited suppression record may be retained to ensure that an opt-out request continues to be respected.

Cookie-consent records may be retained as needed to remember and demonstrate your privacy choice.

12. INTERNATIONAL DATA TRANSFERS

ORBIT-12 is based in Hong Kong. Our service providers may operate or store information in Hong Kong, the United States, Canada, the European Economic Area, or other countries in which they or their approved subprocessors operate.

As a result, your personal information may be processed outside the country where you live.

Where required by applicable law, ORBIT-12 and its providers may use recognized transfer mechanisms, contractual safeguards, or other lawful protections for international transfers.

Privacy and government-access rules in another country may differ from those in your own jurisdiction.

13. SECURITY

ORBIT-12 uses reasonable administrative, organizational, and technical measures intended to protect personal information against unauthorized access, alteration, misuse, disclosure, or loss.

Measures may include:

Limited access to fulfilment systems.
Password and account-access controls.
Use of established ecommerce and service platforms.
Data minimization and limited retention.
Deletion or de-identification procedures.
Review of suspected security incidents.

No website, form, email, database, cloud service, or transmission system can be guaranteed to be completely secure.

Do not send sensitive birth information through public social-media comments or other unsecured public channels.

14. YOUR PRIVACY RIGHTS

Depending on where you live and the law that applies, you may have the right to:

Request access to personal information held about you.
Request correction of inaccurate or incomplete information.
Request deletion of information.
Request restriction of certain processing.
Object to certain processing based on legitimate interests.
Withdraw consent where processing is based on consent.
Request a portable copy of qualifying information.
Opt out of qualifying targeted advertising, sale, or sharing.
Appeal certain decisions where applicable.
Complain to an applicable privacy or data-protection authority.
Exercise applicable rights without unlawful discrimination or retaliation.

These rights are not absolute. A request may be limited or refused where permitted by law—for example, where information must be retained for legal, fraud-prevention, accounting, security, or dispute purposes.

How to Submit a Request

Email support@orbit12.com and clearly describe the request.

To protect customer information, ORBIT-12 may ask for information reasonably required to verify your identity, order, or authority to act for another person.

ORBIT-12 will respond within the timeframe required by applicable law.

Hong Kong

Subject to the Personal Data (Privacy) Ordinance, you may request access to and correction of personal data held by ORBIT-12. A permitted processing fee may apply to a formal data-access request where allowed by law.

European Economic Area and United Kingdom

Where applicable, you may exercise rights relating to access, correction, deletion, restriction, objection, portability, consent withdrawal, and complaint to a competent supervisory authority.

Australia

Where the Australian Privacy Act and Australian Privacy Principles apply, you may request access to and correction of personal information and may submit a complaint concerning its handling.

New Zealand

Where New Zealand privacy law applies, you may have rights relating to access, correction, and complaints regarding personal information.

United States

Residents of certain US states may have privacy rights where the relevant state law applies to ORBIT-12 and the particular processing activity.

ORBIT-12 does not sell precise Entity Blueprint birth information and does not use it for cross-context behavioural advertising.

15. AUTOMATED DECISIONS AND PROFILING

ORBIT-12 may use automated calculations to generate the chart data contained in an Entity Blueprint.

These calculations provide a purchased self-reflection and entertainment product. ORBIT-12 does not use the Blueprint to make automated decisions about your eligibility for employment, credit, insurance, housing, healthcare, education, legal rights, or another similarly significant service.

Any AI-generated interpretation produced through a third-party platform is controlled by that platform and the prompts or information you submit to it.

16. CHILDREN

ORBIT-12 Digital Products are intended for adults who are at least 18 years old or the age of legal majority in their jurisdiction.

We do not knowingly request Entity Blueprint birth information directly from a child.

If you believe that a child has submitted personal information without appropriate authorization, contact support@orbit12.com .

17. THIRD-PARTY WEBSITES

The Services may link to websites, AI platforms, social networks, payment services, or other third-party platforms that ORBIT-12 does not control.

This Privacy Policy does not govern information collected directly by those independent platforms. Review their privacy policies before submitting personal information.

18. PRIVACY COMPLAINTS

To complain about how ORBIT-12 handled personal information, email:

support@orbit12.com

Please include:

Your name and contact email.
Your order number, where relevant.
A description of the concern.
The outcome or action you are requesting.

ORBIT-12 will review the complaint and respond within a reasonable period or the period required by applicable law.

Depending on where you live, you may also have the right to complain to your local privacy or data-protection authority.

19. CHANGES TO THIS PRIVACY POLICY

ORBIT-12 may update this Privacy Policy to reflect changes to products, service providers, legal requirements, security practices, or operational processes.

The revised version will be published on the website with an updated “Last Updated” date.

Where required by applicable law, ORBIT-12 will provide additional notice or obtain consent before using personal information for a materially different purpose.

20. CONTACT ORBIT-12

For privacy questions, access requests, correction requests, deletion requests, consent withdrawal, complaints, or questions about Entity Blueprint birth information: