Privacy Policy
Privacy Policy
Last updated: 22 April 2026
This Privacy Policy explains how OrbitalFlyers Ltd (company number 16476720, registered office 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom), trading as OrbitalFlyers ("we", "us", "our"), collects, uses, and protects your personal data when you use our online shop at https://shop.orbitalflyers.co.uk (the "Service"). The Service is provided to us by Fourthwall.
OrbitalFlyers Ltd is the data controller for the personal data it collects and uses for operating and supporting the Service. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What personal data do we collect?
Personal data you provide
We collect personal data you provide directly to us through:
- Placing an order or creating an account
- Contacting us with an enquiry
- Subscribing to updates or newsletters
- Registering for a membership
The personal data we collect may include your name, email address, shipping address, and phone number. When you make a purchase, payment card details are processed directly by our payment processors and are not stored by us. We also collect transaction information such as the products purchased, order amounts, and dates.
Personal data we collect automatically
When you use the Service, we or our service providers may automatically collect:
- Technical data: your IP address, browser type, device type, and operating system
- Usage data: pages visited, how you navigate the Service, and frequency of use
- Cookie data: see the Cookies section below
How do we use your personal data?
We use your personal data for the following purposes and on the following legal bases:
- To fulfil your order and manage your account: necessary for the performance of a contract with you
- To process payments and prevent fraud: necessary for the performance of a contract and our legitimate interests in protecting the business
- To communicate with you about your order or respond to enquiries: necessary for the performance of a contract or our legitimate interests
- To improve the Service and understand how it is used: our legitimate interests in operating and developing our business
- To comply with legal obligations: where required by law
- For marketing communications: where you have given your consent. You may withdraw consent at any time
Who do we share your personal data with?
We share your personal data only where necessary with:
- Fourthwall Inc., which provides the platform for the Service and acts as merchant of record for orders placed through it
- Payment processors, who handle transaction processing securely
- Delivery and logistics providers, to fulfil your order
- Analytics providers such as Google Analytics, to help us understand how the Service is used
We do not sell your personal data to third parties.
International transfers
Some of our service providers, including Fourthwall Inc., are based outside the UK. Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses approved by the ICO.
How long do we keep your data?
We keep your personal data for as long as necessary to fulfil the purposes described in this policy. Order and transaction data is typically retained for up to six years where needed for tax, accounting, and legal compliance. Other data is retained only for as long as it remains necessary for the purpose it was collected.
Cookies
The Service uses cookies and similar technologies to operate correctly and to analyse usage. Where applicable, you may also be given cookie choices through the Service. You can additionally manage cookies through your browser settings, although disabling cookies may affect functionality.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request erasure of your personal data where there is no lawful reason for us to continue processing it
- Object to or restrict how we process your personal data
- Request a copy of your personal data in a portable format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us through our Contact page.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Children
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last changed. We encourage you to review it periodically.
Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please use our Contact page.