Skip to main content

Calderdale College

Privacy Policy

Last updated November 2025

This privacy notice for GB Total Solutions Ltd (trading as Orox Teamwear) (“Orox Teamwear”, “we”, “us”, or “our”) describes how and why we collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

If you have any questions or concerns, please contact us at info@oroxteamwear.co.uk.

Summary of key points

  • Personal information we process: Depends on how you interact with our Services and what you provide us.

  • Sensitive information: We do not process special category (sensitive) personal data.

  • Third-party data: We do not receive data from external third parties.

  • Use of your data: To operate our Services, fulfil orders, maintain security, communicate with you, and meet our legal obligations.

  • Sharing of data: Only with essential service providers such as hosting partners, payment processors, and fulfilment providers.

  • Security: We implement technical and organisational safeguards appropriate under UK GDPR.

  • Your rights: Under UK GDPR you have rights to access, correct, delete, restrict, object, or transfer your personal data.

  • Exercising rights: Contact us at info@oroxteamwear.co.uk.

Table of Contents

  1. What information do we collect?

  2. How do we process your information?

  3. What lawful bases do we rely on?

  4. When and with whom do we share your personal information?

  5. How long do we keep your information?

  6. How do we keep your information safe?

  7. Do we collect information from minors?

  8. What are your UK privacy rights?

  9. Controls for do-not-track features

  10. UK-specific information for residents

  11. Do we make updates to this notice?

  12. How can you contact us about this notice?

  13. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on our website, make a purchase, contact us, or engage with our Services.

Personal information may include:

  • Names

  • Phone numbers

  • Email addresses

  • Billing and shipping addresses

  • Payment information (processed securely by Elavon)

  • Usernames and passwords

  • Contact or authentication details

  • Contact preferences

We do not collect or process special category data (e.g., health, ethnicity, biometrics).

Payment Data

Payments are processed securely through Elavon. Their privacy policy is available at:
https://www.elavon.co.uk/privacy-policy.html

Information automatically collected

We collect technical data automatically when you browse our site, such as:

  • IP address

  • Browser type and version

  • Operating system

  • Device information

  • Pages visited, actions taken

  • Country and approximate location

  • Log files and system activity

This helps us maintain site security, improve performance, and monitor usage patterns.

2. How do we process your information?

We process your personal data to:

  • Create and manage your account

  • Process and deliver your orders

  • Facilitate payments, returns, and exchanges

  • Provide customer support

  • Send important service or order updates

  • Improve website functionality

  • Detect and prevent fraud

  • Comply with UK laws and regulatory requirements

  • Protect vital interests where necessary

3. What lawful bases do we rely on?

(UK GDPR & Data Protection Act 2018)

We process your personal data on the following lawful bases:

1. Consent

When you give clear permission (e.g., marketing communications).
You may withdraw consent at any time.

2. Contract

When processing is necessary to fulfil your order or manage your account.

3. Legal obligation

When required to comply with applicable UK laws (e.g., tax, accounting, fraud prevention).

4. Legitimate interests

When processing is necessary for our business operations and does not override your rights (e.g., website analytics, improving services).

5. Vital interests

Where processing is required to protect an individual’s safety.

4. When and with whom do we share your personal information?

We only share data with trusted third parties who help us operate our business, such as:

  • Website hosting and IT providers

  • Payment processors (Elavon)

  • Delivery and logistics partners

  • Accounting and finance systems

  • Analytics tools

These parties must comply with UK GDPR and may only use your information for the services we request.

We may also share data:

  • To comply with UK law or legal proceedings

  • In the event of a merger, acquisition, or business transfer

We do not sell personal data.

5. How long do we keep your information?

We keep your data only as long as necessary for the purposes outlined, or as required by UK law (e.g., tax records for 6 years).

When information is no longer required, we securely delete or anonymise it.

6. How do we keep your information safe?

We implement appropriate technical and organisational measures to protect your data, including:

  • Encrypted connections (HTTPS)

  • Restricted access to authorised staff

  • Secure storage and password protection

  • Fraud and security monitoring

However, no method of electronic storage is 100% secure.

7. Do we collect information from minors?

We do not knowingly collect data from children under the age of 13.
If a child has provided personal information, please contact us and we will delete it.

8. What are your UK privacy rights?

(Under UK GDPR)

You have the right to:

  • Access your personal data

  • Rectify inaccurate information

  • Erase your data (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Data portability (transfer of your data)

  • Withdraw consent at any time

To exercise rights, contact: info@oroxteamwear.co.uk

If unresolved, you also have the right to complain to the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

9. Controls for do-not-track features

We do not currently respond to DNT signals as no industry-standard approach exists.

10. UK-specific information for residents

Your information is stored and processed within the United Kingdom or in secure third-country locations compliant with UK GDPR.

We do not transfer your data outside the UK unless adequate protection is ensured.

11. Do we make updates to this notice?

Yes. We may update this policy from time to time to remain compliant with UK law.
The “Last updated” date reflects the most recent revision.

12. How can you contact us about this notice?

info@oroxteamwear.co.uk
GB Total Solutions Ltd
Unit 1 Black Brook Way, Stainland Rd, Greetland
Halifax, West Yorkshire HX4 8ED
United Kingdom

13. How can you review, update, or delete your data?

To request access, correction, or deletion of your personal data, contact:

info@oroxteamwear.co.uk

We will respond in accordance with UK GDPR.