Privacy policy
Last updated: 23 September 2026
This policy explains what personal data we collect when you visit [WEBSITE] or buy from us, why we use it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018). We do not sell your personal data.
1. Who is responsible for your data
[LEGAL NAME], trading as Oséa, [REGISTERED ADDRESS], is the controller of your personal data. For any privacy question or request, email [SUPPORT EMAIL]. ICO registration number: [ICO NUMBER, if registered].
2. The data we collect
| Type of data | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email address, phone number, delivery and billing address | You, when you order, sign up or contact us |
| Orders | Products bought, order value, delivery and returns history | Your orders |
| Payment | Payment status and the last digits of your card | Our payment providers (we never see or store full card details) |
| Account | Email address used to log in, saved addresses | You, if you create an account |
| Messages and reviews | Emails to our support team, reviews you choose to submit | You |
| Marketing preferences | Newsletter sign-up, email opens and clicks | You and our email tool |
| Technical and browsing | IP address, device and browser type, pages viewed, cookie identifiers | Your device, through cookies (see section 6) |
We do not ask for health information. If you choose to share some in a message to us, we only use it to answer you and delete it when it is no longer needed.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Process, deliver and support your orders, returns and refunds | Performing our contract with you |
| Answer your questions and complaints | Contract, or our legitimate interest in helping customers |
| Manage your account | Contract |
| Send newsletters and offers by email | Your consent, or for existing customers our legitimate interest (soft opt-in). You can unsubscribe at any time. |
| Measure site traffic and show you relevant ads (analytics and advertising cookies) | Your consent, given through our cookie banner |
| Prevent fraud and keep the site secure | Our legitimate interests |
| Keep accounting and tax records | Legal obligation |
4. Who we share your data with
- Shopify, which hosts our store and processes orders on our behalf.
- Payment providers such as Shopify Payments and PayPal, to take payment securely.
- Delivery carriers ([CARRIER NAMES]), to deliver your parcels.
- Email marketing provider ([EMAIL TOOL]), to send newsletters if you have subscribed.
- Advertising and analytics partners such as Meta (Facebook, Instagram), TikTok and Google, only through cookies you have accepted.
- Professional advisers and authorities, when the law requires it or to protect our legal rights.
Each of these companies may only use your data for the service they provide to us or, where they act independently, under their own privacy policies.
5. International transfers
Some of our providers, including Shopify, process data outside the UK, for example in Canada, the European Economic Area or the United States. When that happens, we rely on UK adequacy regulations or on approved safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
6. Cookies
- Essential cookies make the site work, for example your basket and checkout. They do not need your consent.
- Analytics cookies help us understand how visitors use the site.
- Marketing cookies let us and our advertising partners show you relevant ads and measure them.
Analytics and marketing cookies are only set if you accept them in our cookie banner. You can change your choice at any time from the banner link in the footer or in your browser settings.
7. How long we keep your data
| Data | How long |
|---|---|
| Orders and invoices | 6 years after the order, for tax and accounting purposes |
| Customer account | Until you ask us to close it |
| Newsletter data | Until you unsubscribe |
| Support messages | 2 years after the last exchange |
| Cookie data | For the lifetime of each cookie, as shown in the cookie banner |
8. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use your data, including stopping direct marketing at any time;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting what we did before.
To use any of these rights, email [SUPPORT EMAIL]. It is free, and we reply within one month.
9. Security
We use secure, recognised providers and limit access to your data to the people who need it. Payments are encrypted and handled by our payment providers.
10. Children
Our products and website are intended for adults. We do not knowingly collect data from anyone under 18.
11. Complaints
If you are unhappy with how we use your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you by email or on the site.