Privacy Policy
Updated 5 February, 2026
1. Background
Ordit International Ltd respects your privacy and is committed to collecting personal data only as described in this policy, consistent with our legal obligations and your rights.
2. Definitions and Interpretation
- "Account" — access credentials for certain website areas.
- "Cookie" — small text files placed on devices during site visits.
- "Cookie Law" — Privacy and Electronic Communications (EC Directive) Regulations 2003.
3. Information About Us
Ordit International Ltd operates https://marketing.ordit.co.uk.
- Company registration: England, number 12020646
- Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ
- Contact: [email protected]
4. What Does This Policy Cover?
This policy applies exclusively to ordit.co.uk. The site contains external links whose privacy practices fall outside our control — review their policies before sharing data.
5. What Is Personal Data?
Under GDPR and the Data Protection Act 2018, personal data means "any information relating to an identifiable person." This includes obvious identifiers (name, contact details) and less obvious ones (identification numbers, location data, online identifiers).
6. What Are My Rights?
Users possess the following rights:
- Right to be informed — understanding collection and use of personal data.
- Right of access — obtaining held personal data.
- Right to rectification — correcting inaccurate or incomplete data.
- Right to erasure — requesting deletion of personal data.
- Right to restrict processing — preventing data use.
- Right to object — opposing specific processing purposes.
- Right to withdraw consent — revoking consent-based processing.
- Right to data portability — obtaining data copies for reuse.
- Rights regarding automated decision-making — not currently applicable to Ordit's practices.
Contact details in Part 3 facilitate rights exercises. Complaints may be lodged with the Information Commissioner's Office.
7. What Data Do You Collect and How?
We may collect the following categories of personal data:
- Identity Data — first name, last name, username, title, date of birth.
- Contact Data — billing address, office/home address, work address, email, telephone numbers.
- Financial Data — payment card details.
- Transaction Data — payment details, order information.
- Technical Data — IP address, login data, browser type/version, timezone, operating system, device technology.
- Profile Data — username, password, interests, preferences (dietary restrictions, allergies), feedback, survey responses.
- Usage Data — website and service usage information.
- Marketing and Communications Data — marketing preferences, communication preferences.
Ordit does not collect special category data or children's personal data.
8. How Do You Use My Personal Data?
We use your personal data for the following purposes:
- Process registrations, orders, and payments — using Identity, Contact, Financial, Transaction, Profile, and Marketing data. Lawful basis: contract performance and legitimate interests.
- Manage customer relationships — send status updates and notify of changes. Lawful basis: contract performance, legal compliance, and legitimate interests.
- Business administration, troubleshooting, and maintenance — lawful basis: contract performance, legal compliance, and legitimate interests.
- Analytics to improve services and marketing — using Identity, Contact, and Technical data. Lawful basis: legitimate interests.
- Recommendations for food items and offers — using Technical and Usage data. Lawful basis: legitimate interests.
Marketing communications require express opt-in consent and permit opt-out at any time.
9. How Long Will You Keep My Personal Data?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
10. How and Where Do You Store or Transfer My Personal Data?
Although most of your data is processed in the UK, in some cases personal data may be processed within the European Economic Area ("EEA"). If in the future we consider processing your data with countries outside of the EEA, we will ensure that appropriate safeguards are in place, including EU approved Standard Contractual Clauses or adequacy decisions by the European Commission. Please contact us if you want further information on the specific mechanisms used when transferring your personal data out of the EEA.
12. How Can I Control My Personal Data?
When you submit personal data via Our Site, you may be given options to restrict our use of your data. We aim to give you strong controls on our use of your data for direct marketing purposes, including the ability to opt-out of receiving emails from us by unsubscribing using the links provided. You may also wish to sign up to preference services operating in the UK such as the Telephone Preference Service ("the TPS"), the Corporate Telephone Preference Service ("the CTPS"), and the Mailing Preference Service ("the MPS").
13. Can I Withhold Information?
You may access certain areas of Our Site without providing any personal data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.
14. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details and a copy of it. This is known as a "subject access request." All requests should be made in writing and sent to the email or postal addresses shown in Part 3. There is not normally any charge. If your request is "manifestly unfounded or excessive," a fee may be charged. We will respond within 28 days, though complex requests may take up to three months.
15. Fraud Checks
We conduct fraud checks on all customers. Where we believe we may detect fraudulent activity we may block you from placing an order and using our website. We may share your information with a third party fraud detection provider who uses automated systems to analyse order data. This is necessary for us to perform our contracted services by ensuring that services are duly paid for and individuals are protected from fraudulent transactions. You have the right to contest any fraud decision made about you and to be given more information by contacting us.
17. Changes to this Policy
We may change this Privacy Notice from time to time. Any changes will be immediately posted on our Site and you will be deemed to have accepted the terms on your first use of our Site following the alterations. We recommend that you check this page regularly to keep up-to-date.