This Privacy Policy explains how your personal information is collected, used, and shared when you visit our site or make a purchase.
Collection of Personal Information
When you visit the site, we collect certain details about your device, your interaction with the site, and the information necessary to process your purchases. We may also collect additional information if you contact us for customer support.
In this policy, “personal information” refers to any data that can uniquely identify an individual (including the information listed below).
Device Information
Examples of personal data collected: Web browser version, IP address, time zone, cookie data, websites or products viewed, search terms, and how you interact with the site.
Purpose of collection: To load the site correctly and to analyse usage in order to optimise performance.
How it's collected: Automatically, through cookies, log files, web beacons, or pixels when you visit our site.
Disclosure for business purposes: Shared with our processor, Shopify.
Order Information
Examples of personal data collected: Name, billing address, shipping address, payment details (including credit card numbers), email address, and phone number.
Purpose of collection: To provide our products or services to you, fulfil our contract, process payments, send order confirmations, communicate with you, arrange delivery, issue invoices, check for fraud or risk, and send marketing messages in line with your preferences.
How it's collected: Directly from you.
Disclosure for business purposes: Shared with Shopify, our ecommerce platform.
Customer Service Information
Examples of personal data collected: As listed above.
Purpose of collection: To provide customer support.
How it's collected: Directly from you.
Use of Personal Information
We use your personal information to deliver our services — including selling products, processing payments, fulfilling orders, and keeping you updated about new products, offers, and services.
Legal Basis
Under the General Data Protection Regulation (GDPR), if you are a resident of the European Economic Area (EEA), we process your personal data under the following legal bases:
- To perform the contract between you and our site
- To comply with legal obligations
- To protect your vital interests
- To carry out a task in the public interest
- For our legitimate interests, provided these do not override your fundamental rights and freedoms
Data Retention
When you place an order through the site, we retain your personal information for our records unless and until you ask us to delete it. For more on your right to erasure, see the "Your Rights" section below.
Automated Decision-Making
If you are an EEA resident, you have the right to object to processing based solely on automated decision-making (including profiling), when such decisions have legal or similarly significant effects on you.
We do not use fully automated decision-making that has a legal or substantial impact on customers.
Our processor, Shopify, uses limited automated decision-making to prevent fraud. This does not have a legal or significant effect on you.
Examples include:
- Temporary denial lists of IP addresses associated with failed transactions.
- Temporary denial lists of credit cards linked to banned IPs.
Your Rights
If you are an EEA resident, you have the right to:
- Access the personal information we hold about you
- Request that it be corrected, updated, or deleted
- Request a copy to transfer to another service
To exercise these rights, please contact us via our Contact page.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons.
Contact Us
For more information about our privacy practices, if you have questions, or if you wish to make a complaint, you can email us at: support@oakmereandco.com