Last updated: December 2020

Cookies and Personal Data Security

To facilitate effective processing of orders the Company offers secure payment facilities online, via the website and can accept payment by major credit cards or debit cards by this method. To this end cookies are used by the website server to track order details only and Customers are asked to accept these files from the website server. Personal details are encrypted during transmission and stored and used strictly in accordance with the Data Protection Act 1998 and will not be passed to any third party without your explicit permission. Orb Group fully complies with PCI DSS level IV as required.

About Us

This is the online merchandise store for CalMac, provided by Orb Group. You can browse categories, products and place these in your shopping basket. To proceed to checkout, simply click checkout at the top right of the page. You can change your password and much more under My Account, where you can see your past orders and even reorder these, saving you time in the future.

Privacy Policy:

Who We Are

We are Orb International Kms Limited, the Orb Group (‘we’ or ‘us’ or ‘our’) registered as a Data Controller with the Information Commissioner’s Office (ICO) under registration number ZA302129.

Orb Group is a community of marketing and supply chain experts with over 20 years’ experience in creative services. We focus on delivering sustainable and ethically sourced products into the hands of an engaged audience. Our aim is to collaborate with brands to integrate the needs of both marketing and procurement. We provide and manage (under contract) end-to-end e-commerce sites for various brands and partners, in essence, acting as their online ‘shop’.

This privacy notice tells you about the personal data that we collect, how we handle it, store it, keep it safe, who we share it with and how long we keep it. It further tells you about your rights and how to find out more from us. It’s likely that we’ll need to update this privacy notice from time to time. We’ll notify you of any significant changes, either by sending you a new copy of the privacy notice or by placing a banner notice on our site to make you aware.

Contact details

Our registered office is:

The Orion Building, Broomloan Place, Ibrox Business Park, Glasgow, G51 2JR and we are a company registered in Scotland under company number SC631438. Telephone: 0141 427 7272 Email: glasgow@orbgroup.co.uk

Information That We Collect

Orb Group usually collect the following information from you:

• First name, Last Name
• Delivery address and postal code
• Billing address and postal code
• Telephone number
• Email address
• Company Name
• Business Email
• VAT number (if applicable)
• Country
• Payment Details (secure portal provided by 3rd party)
• Delivery Instructions
• Compliments / Complaints

Why We Use Your Personal Data (Legal Basis for Processing)

• Orb Group processes your personal data as it is necessary for the performance of a contract to which you are party, or in order to take steps to enter into a contract with you, i.e. provision of goods or services.
• Orb Group processes financial information relating to our transactions with you as it is necessary for compliance with a legal obligation to which we are subject, i.e. payment of VAT / taxes to HMRC / business accounting etc.
• Orb Group processes some of your personal data if you have given consent for specific purposes, i.e. receiving promotional offers and or marketing. You are free to withdraw your consent at any time. This is identified further within this privacy notice under the ‘Your Rights’ section.
• Orb Group processes personal data where it is necessary for the purpose of a legitimate interest we, or one of our third party partners, has: except where these interests are overridden by the interests or fundamental rights and freedoms of a data subject. Examples of this are to help us and you understand our business, its performance and changes or administer and keep your account up to date or resolve problems and respond to complaints etc.
• We apply physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data;
• We protect the security of your information while it is being transmitted by encrypting it;
• We use computer safeguards such as firewalls and data encryption to keep this data safe;
• We only authorise access to employees and trusted partners who need it to carry out their work functions and responsibilities.

Your Rights

You have rights in relation to your personal data and you can ask Orb Group to:

Provide a copy of your personal data Correct any mistakes in your personal data In certain situations: Delete your personal data In certain circumstances: Restrict processing of your personal data, i.e. if you contest the accuracy of the data In certain situations: Provide you with a copy of the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party At any time to your personal data being processed for direct marketing (including profiling); In other situations, to our continued processing of your personal data, e.g. processing carried out for the purpose of our legitimate interests. required or permitted by law for the purpose of exercising or defending our legal rights meeting our legal and/or any regulatory obligations

You can object:

If you would like to exercise any of these rights, or if you have any concerns about how your personal data is being processed, please contact us using the details above (or by visiting our ‘contact us’ page) and we will do our best to address your concerns.

Your objection (or withdrawal of consent) may mean we cannot perform the services you have requested of us or you may not be able to buy the products we offer. We will advise you where this is the case. In certain circumstances even if you withdraw your consent, we may still be able to process your personal information if:

You also have the right to complain to the Information Commissioner where you believe any alleged infringement of data protection laws occurred. We would, however, appreciate the chance to deal with your concerns before you approach the Information Commissioner so please contact us in the first instance.

If you still believe that we have not handled your personal data properly or have not complied with your rights, you can complain to the Information Commissioner. Contact details are available at:

Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Telephone: 0303 123 1113 Or: https://ico.org.uk/make-a-complaint/

This privacy notice last updated: December 2020