Privacy notice

Last updated 19 October 2026.

Who we are

ORTON OBJECTS Ltd ("ORTON", "we", "us") runs this website and is the controller of the personal information described here.

• Company number: 17514007
• Registered in England and Wales
• Registered office: Milford Court, Royal Leamington Spa, Warwickshire, CV31 1BJ, United Kingdom
• Email for privacy questions: privacy@ortonobjects.com

What we collect and why

When you register your interest in a product

We keep your email address, the product you chose and when you signed up. We use it for one thing: to tell you when that product is available to order. Our legal basis is your consent, which you can withdraw at any time by asking us to remove you. We keep the address until we have sent that email, or until you ask us to delete it, whichever comes first.

When you place an order

We collect your name, email address, phone number, delivery and billing addresses, and what you ordered. We use them to take payment, deliver your order, contact you about it, and handle any return, refund or warranty question. Our legal basis is that we need this information to carry out our contract with you. We keep order records for six years after the end of the financial year in which the order was placed, because UK company and tax law requires it.

Card payments are handled by Stripe. Your card details go directly to Stripe, and we never see or store your full card number.

When you contact us

If you email us, we keep your name, email address and what you wrote so we can reply and follow up. Our legal basis is our legitimate interest in answering enquiries. We keep this correspondence for up to two years after our last contact, unless it relates to an order, in which case it is kept with the order record.

When you visit the website

Like any website, ours receives technical information each time a page is requested: your IP address, browser and device type, the page requested and the time. Our hosting provider uses it to deliver the site and protect it from abuse. Our legal basis is our legitimate interest in running a secure, reliable website. These logs are kept for a short period and then deleted.

Cookies and storage on your device

We do not use advertising or analytics cookies, and we do not track you across other websites.

• Your bag is saved in your browser's local storage so it is still there when you come back. It stays on your device and is only sent to us when you go to checkout.
• Cloudflare, which hosts the site, may set a cookie that helps tell people apart from automated traffic.
• Stripe sets its own cookies on its checkout pages to process payment and prevent fraud. See Stripe's privacy policy.

These are strictly necessary for the site and checkout to work, so they do not need your consent. If we ever add optional cookies, we will ask first.

Who we share it with

We do not sell personal information or share it for advertising. We share it only with service providers that help us run the business, who may use it only on our instructions:

• Cloudflare: website hosting and security.
• Stripe: payments. Stripe also uses payment information for its own fraud prevention and legal obligations, as an independent controller, which includes automated checks on payments.
• Supabase: stores the register-your-interest list on servers in London.
• Resend: sends our emails, such as order and availability emails.
• Delivery companies: receive your name, address and phone number.

We may also share information with professional advisers, or where the law requires it, for example with HMRC.

Transfers outside the UK

Some of these providers are based in, or use servers in, other countries, including the United States. Where personal information leaves the UK, we rely on safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the International Data Transfer Addendum to standard contractual clauses.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to limit how we use it, or object to how we use it;
• ask for information you gave us in a format you can take elsewhere;
• withdraw your consent at any time, where we rely on it.

Some rights depend on the circumstances. For example, we must keep order records for as long as the law requires. To make a request, email us at the address above. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this notice

We will update this notice when what we collect or how we use it changes, and change the date at the top.