Data Deletion

Last updated: July 22, 2026

This page explains how to exercise your right to erasure over the personal data usite processes as a controller, and what to do if your request concerns a site published by one of our customers.

First: who should handle your request?

You are a usite customer (you have an account and a published site) → the request is for us. Follow this page.
You are a visitor or buyer of a site built with usite → the controller of your data is the owner of that site. Contact them; if the request reaches us, we forward it without delay and let you know.

What gets deleted

Account: name, email, hashed password, preferences and sign-in history.
Site content: copy, images, catalogue and settings. The site is unpublished.
Technical logs linked to your account.
Marketing data: email subscriptions and communication preferences.

What we keep, and why

Billing records (amounts, dates, country and transaction identifiers) are kept for the period required by applicable tax law, typically 7 years. That retention rests on a legal obligation and overrides the right to erasure. We also keep the minimum data needed to defend an active legal claim.

How to request it

Option 1 — Form

Fill in the form with your account email. On submit you get a tracking ID: keep it and quote it if you write to us about the same case.

Option 2 — By email

Write to privacy@orbitia.io with your name, the account email and the site domain.

Timelines

Tracking ID: issued immediately, on submitting the form.
Resolution: within the 30 days set by the GDPR, extendable by two months for complex requests if we tell you.
Backups: overwritten in the normal cycle, within the following 30 days.

Export before you delete

Deletion is irreversible. Download your content and your orders before sending the request.

Full details of our processing are in the Privacy Policy.