Last updated: 5 October 2026
1. Who we are
Orbist Ltd (company number 13256091) is the controller of the personal data described in this policy. Our registered office is 284 Chase Road, A Block, 2nd Floor, London, England, N14 6HF. You can contact us about privacy matters at support@orbist.co.uk.
2. Personal data we collect
Depending on how you use our website and services, we may collect:
- identity and contact details, such as your name, billing and delivery address, email address and telephone number;
- account details, login information and saved preferences;
- order, payment and transaction information. Payment card details are processed by our payment providers and are not stored by us in full;
- communications with us, including enquiries, return requests, reviews and customer-service records;
- technical and usage information, such as IP address, device and browser information, pages viewed, referring pages and cookie identifiers; and
- marketing preferences and consent records.
We normally collect this information directly from you. We may also receive relevant information from our ecommerce platform, payment providers, delivery partners, fraud-prevention providers and analytics or customer-support services.
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| To create and manage your account, process orders, take payment, deliver products, handle returns and provide customer support | Performance of our contract with you |
| To keep accounting, tax, transaction and compliance records and respond to lawful requests | Compliance with legal obligations |
| To protect our website, customers and business; prevent fraud and misuse; and establish, exercise or defend legal claims | Our legitimate interests in security, fraud prevention and protecting our legal rights |
| To improve our website, services and customer experience using aggregated or limited usage information | Our legitimate interests in improving our business; consent where required for non-essential cookies |
| To send email marketing | Your consent, or the soft opt-in where permitted by law; you can opt out at any time |
Where we rely on legitimate interests, we consider the impact on your rights and do not use your data where those interests are overridden by your rights and freedoms.
4. Cookies and similar technologies
We use essential cookies to operate functions such as the shopping basket, checkout, security and saved privacy choices. With your consent, we may also use non-essential cookies or similar technologies for analytics, functionality or marketing. You can accept, reject or adjust non-essential cookies through the cookie banner or the “Manage Website Data Collection Preferences” link on our website. Withdrawing consent does not affect processing carried out before withdrawal.
5. Who we share data with
We may share personal data only where necessary with:
- our ecommerce hosting and technology providers, including BigCommerce;
- payment processors and fraud-prevention providers;
- delivery, fulfilment and returns providers;
- customer-support, communications, analytics and website-service providers, including services used for live chat or embedded website functionality;
- professional advisers, insurers, auditors and IT-security providers; and
- regulators, courts, law-enforcement bodies or other parties where required by law or necessary to protect legal rights.
We do not sell your personal data.
6. International transfers
Some service providers may process personal data outside the United Kingdom. Where this happens, we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by UK data-protection law. You may contact us for more information about the safeguards relevant to your data.
7. How long we keep data
We keep personal data only for as long as necessary for the purposes described above, including legal, accounting and reporting requirements. In general:
- order, payment and tax records are normally kept for six years after the end of the relevant financial period;
- account information is kept while the account is active and for a reasonable period afterwards, unless you ask us to delete it and we have no lawful reason to retain it;
- customer-service and returns records are kept for as long as needed to resolve the matter and manage legal claims;
- marketing details are kept until you opt out or we determine they are no longer current; and
- cookie and analytics information is kept according to the lifetime of the relevant cookie or service setting.
When determining a retention period, we consider the amount, nature and sensitivity of the data, the risk of harm, why we need it and applicable legal requirements.
8. Your rights
Depending on the circumstances, you may have the right to:
- request access to your personal data;
- ask us to correct inaccurate or incomplete data;
- ask us to erase your data;
- ask us to restrict how we use your data;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent at any time where we rely on consent; and
- complain to the Information Commissioner’s Office (ICO).
You have the right to object at any time to the use of your personal data for direct marketing. You can unsubscribe using the link in a marketing email or contact support@orbist.co.uk.
To exercise your rights, email support@orbist.co.uk. We may need to confirm your identity. Rights are not absolute and exemptions may apply.
9. Complaints
Please contact us first so that we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner’s Office. Information is available at ico.org.uk/make-a-complaint/.
10. Children’s data
Our products are intended for purchase by adults. We do not knowingly collect personal data directly from children. If you believe a child has provided personal data to us, please contact us so that we can investigate and take appropriate action.
11. Security
We use appropriate technical and organisational measures designed to protect personal data. No online service is completely secure, so please use a strong, unique password and contact us if you suspect unauthorised access to your account.
12. Automated decision-making
We do not currently make decisions about customers based solely on automated processing that produce legal or similarly significant effects. If this changes, we will provide the information required by law.
13. Links and third-party services
Our website may contain links to third-party websites or services. Their privacy practices are controlled by their own policies, and we encourage you to read those policies.
14. Changes to this policy
We may update this policy to reflect changes to our services, providers or legal obligations. We will publish the updated version on this page and change the “Last updated” date.
15. Contact us
Orbist Ltd
Company number: 13256091
284 Chase Road, A Block, 2nd Floor
London, England, N14 6HF
Email: support@orbist.co.uk