www.orbisa.co.uk — Last updated: 13 April 2026

1. Who We Are

This website is operated by Orbisa (www.orbisa.co.uk). For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller responsible for your personal data.

If you have any questions about this privacy policy or how we handle your personal data, please contact us at: giles@orbisa.co.uk.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity data: your name, username, or similar identifier.

• Contact data: your email address, telephone number, and postal address.

• Technical data: your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.

• Usage data: information about how you use our website, products, and services.

• Transaction data: details of products or services you have purchased from us, including payment information.

• Marketing data: your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Your Data

We collect personal data through direct interactions (when you fill in forms, correspond with us, or create an account), automated technologies (cookies, server logs, and similar technologies when you interact with our website), and from third parties such as analytics providers, advertising networks, and payment service providers.

4. How We Use Your Data

We will only use your personal data where we have a lawful basis to do so. Under UK GDPR, the lawful bases we rely on are:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose.

• Contract: where processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.

• Legitimate interests: where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

• Legal obligation: where processing is necessary for us to comply with the law.

5. Third-Party Services

We may share your personal data with trusted third-party service providers who assist us in operating our website and conducting our business. These include payment processors, analytics services (such as Google Analytics), email service providers, and advertising platforms (such as Amazon Advertising).

Where we use Amazon Advertising services, data may be processed in accordance with Amazon’s own privacy policies. We ensure that all third-party processors provide sufficient guarantees to implement appropriate technical and organisational measures to protect your data.

We will not sell, distribute, or lease your personal data to third parties unless we have your permission or are required by law to do so.

6. Cookies

Our website uses cookies to distinguish you from other users and to improve your experience. Cookies are small text files placed on your device by websites you visit. We use session cookies (which expire when you close your browser), persistent cookies (which remain until they expire or you delete them), and third-party cookies (set by services such as Google Analytics and advertising platforms).

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

7. Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal, regulatory, tax, or accounting requirements.

8. Your Legal Rights

Under UK data protection law, you have the following rights:

• The right to access: you can request a copy of the personal data we hold about you.

• The right to rectification: you can ask us to correct any data that is inaccurate or incomplete.

• The right to erasure: you can ask us to delete your personal data in certain circumstances.

• The right to restrict processing: you can ask us to limit how we use your data.

• The right to data portability: you can request that we transfer your data to another organisation or directly to you.

• The right to object: you can object to our processing of your personal data where we rely on a legitimate interest.

• The right to withdraw consent: where we rely on consent, you can withdraw it at any time.

You will not have to pay a fee to exercise any of these rights. We may need to request specific information from you to help us confirm your identity. To exercise any of these rights, please contact us at giles@orbisa.co.uk.

9. International Transfers

Some of our third-party service providers are based outside the United Kingdom. Where we transfer your personal data out of the UK, we ensure that it is protected by appropriate safeguards, such as UK adequacy regulations, standard contractual clauses approved by the Information Commissioner’s Office (ICO), or the service provider’s binding corporate rules.

10. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. You can contact the ICO at www.ico.org.uk or by calling 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first at giles@orbisa.co.uk.

12. Changes to This Policy

This privacy policy was last updated on 13 April 2026. We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

Contact Us

If you have any questions about this privacy policy, please contact us:

• Email: giles@orbisa.co.uk

• Website: www.orbisa.co.uk