Privacy policy

Last updated: 20 October 2026

This Privacy Policy explains how Oakverly collects and uses personal information when you visit oakverly.co.uk, place an order, contact us or interact with our store. It also explains your privacy rights and choices.

1. Who is responsible for your information?

Jordan Owen Buxton, trading as Oakverly, is the controller responsible for our use of your personal information under applicable UK data protection law, including the UK GDPR and the Data Protection Act 2018, as amended.

Address: 27 Kinder Way, Fairfield, Buxton, SK17 7TP, United Kingdom
Email: contact@oakverly.co.uk
Telephone: +44 7473 985315

2. Information we collect

Depending on how you interact with us, we collect:

  • Contact information: your name, billing and delivery addresses, email address and telephone number.
  • Order and account information: products ordered, order history, delivery instructions, returns, refunds and account details if you create an account.
  • Payment information: transaction references, payment status and payment-method information made available by our payment providers. Payment credentials are collected by the provider handling your checkout payment.
  • Communications: enquiries, complaints, feedback and information you send to customer support.
  • Device and browsing information: IP address, browser and device details, approximate location, pages viewed and interactions with the store, subject to your choices where consent is required.
  • Preferences: marketing subscriptions, cookie choices and records of consent or objections.

Please do not send full payment-card details or sensitive personal information in ordinary email. If information needed to process an order is not provided, we may be unable to fulfil that order.

3. Where information comes from

We receive information directly from you, automatically through our website and its technologies, and from providers supporting your transaction, such as Shopify, payment providers and delivery partners. These providers may supply payment confirmations, delivery updates or fraud indicators.

4. How we use information and our lawful bases

  • Orders and customer accounts: to take steps you request before a purchase, process payments, fulfil orders and provide account services. Our basis is performance of a contract or taking requested steps before entering one.
  • Returns and customer support: to handle order enquiries and contractual obligations, comply with consumer law, and resolve general enquiries. Depending on the purpose, our basis is contract, legal obligation or our legitimate interest in providing effective support.
  • Legal and financial records: to meet applicable tax, accounting and regulatory duties. Our basis is legal obligation.
  • Security and fraud prevention: to protect customers, secure our systems and investigate misuse. Our basis is our legitimate interest in preventing fraud and protecting our business and customers, balanced against your rights.
  • Service improvement: to identify operational problems and improve the store. We rely on legitimate interests for necessary operational analysis and on consent for optional tracking where required.
  • Marketing: to send permitted promotional communications. We rely on consent, or legitimate interests where the customer marketing exception described below applies.
  • Advertising and optional personalisation: to provide and measure these features where enabled, using consent where required by law.

5. Who receives your information?

We disclose relevant information to the following categories of recipients where needed for the purposes above:

  • Shopify and providers supporting our online store, hosting and checkout.
  • Payment processors and fraud-prevention providers.
  • Carriers, delivery partners and fulfilment suppliers handling your order.
  • Customer-support, email and business-administration providers.
  • Analytics and advertising providers where their services are enabled and the required consent has been obtained.
  • Professional advisers, regulators, courts and public authorities where necessary to meet legal duties or establish, exercise or defend legal claims.

Providers acting on our behalf are subject to appropriate contractual requirements. Some recipients, such as payment providers, also process information as independent controllers under their own privacy notices.

6. Shopify and its services

Our store is hosted by Shopify. Shopify processes information about your visits, purchases and interactions to operate and support the store.

Where Shopify Network Intelligence and related Enhanced Services are enabled, Shopify also uses information from interactions with our store, other merchants and Shopify to provide features such as personalisation, service improvement and advertising. This can involve sharing information with Shopify and other providers located in other countries. Consent is obtained for advertising uses where required.

Shopify acts as an independent controller for certain processing described in its Consumer Privacy Policy . You can learn about Shopify's processing and exercise relevant choices, including withdrawing consent or objecting, through the Shopify Privacy Portal.

7. Cookies and similar technologies

Our store uses cookies and similar technologies to support its operation. Strictly necessary technologies help provide functions such as the shopping basket, checkout, security and remembering privacy choices.

Where enabled, optional technologies can measure visits, personalise content or support advertising. We obtain consent before using technologies that require consent. You can accept or reject optional categories through our cookie controls and change your choices later. Rejecting optional cookies does not prevent you from making a purchase.

Some cookies last only for a browsing session; others remain for a defined period. Shopify's cookie names, purposes and durations are described in the Shopify Cookie Policy. You can contact us for information about additional technologies used by our store.

Your browser also provides cookie controls, although blocking essential cookies may affect store functions. Browser settings are additional to the consent choices offered by our store.

8. Marketing choices

We send promotional emails or text messages only with the appropriate consent or where another lawful permission applies. For the customer marketing exception, we must have obtained your details during a sale or discussions about a sale, market only our own similar products or services, and give you an opportunity to opt out both when collecting your details and in every message.

You can unsubscribe using the link or instructions in a marketing message or contact contact@oakverly.co.uk. Essential order, delivery and service messages are separate from promotional marketing.

You have an absolute right to object to our use of your personal information for direct marketing, including related profiling. We will stop that use when you object.

9. International transfers

Shopify and other providers may process information outside the United Kingdom, including in Canada and the United States. The location depends on the provider and service used.

Where a transfer requires protection under UK data protection law, we rely on an applicable UK adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, with additional measures where required. Contact us for information about the safeguards relevant to your information and how to obtain a copy.

10. How long we keep information

Retention depends on the purpose and applicable obligations:

  • Order and financial records: for fulfilment, after-sales obligations and the applicable statutory tax and accounting retention periods.
  • Support and dispute records: for the time needed to resolve the matter and any relevant warranty, complaint or legal-claim period.
  • Account information: while needed to provide the account, subject to deletion requests and any separate legal retention duties.
  • Marketing records: while the relevant permission remains valid. We may retain minimal suppression information to respect an unsubscribe request or objection.
  • Technical information: for the operational, security or consented analytical purpose concerned, taking account of the relevant cookie duration, investigation needs and deletion settings.

We delete or anonymise information when it is no longer needed. A deletion request may not require removal of records that we must retain by law.

11. Security and fraud checks

We use appropriate technical and organisational measures to protect personal information, including access controls and safeguards provided by our service providers.

Shopify and payment providers may use automated tools to identify unusual activity, assess fraud risk or flag transactions. If an order is affected by a fraud check, contact us to question the outcome and request a review. Where a decision falls within legal rules on significant solely automated decisions, you have the applicable rights to information, human intervention and to challenge the decision.

12. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

  • Access your personal information and receive a copy.
  • Correct inaccurate or incomplete information.
  • Request deletion or restriction of processing.
  • Receive certain information in a portable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time, without affecting the lawfulness of earlier processing.

These rights are subject to applicable conditions and exceptions. Your right to object to direct marketing is explained separately above.

Contact contact@oakverly.co.uk to exercise your rights. We may request proportionate information to verify your identity. Requests are normally free, and we respond within the applicable legal time limits, generally one calendar month. Where an extension is permitted, we explain the reason and applicable deadline.

13. Children's information

Our store is not directed at children. If you believe a child has provided personal information in circumstances requiring parental involvement, contact us so we can investigate and take appropriate action.

14. Other websites and policy changes

External websites and services have their own privacy notices. Please review those notices when you interact directly with another provider.

We update this policy when our practices or legal requirements change and revise the date above. We provide additional notice or request fresh consent where required.

15. Questions and complaints

For privacy questions, rights requests or complaints, contact Jordan Owen Buxton at contact@oakverly.co.uk, call +44 7473 985315, or write to Oakverly, 27 Kinder Way, Fairfield, Buxton, SK17 7TP, United Kingdom.

You may also complain directly to the UK's Information Commissioner's Office (ICO). Information about raising a concern is available at ico.org.uk/make-a-complaint . You do not have to contact us first to exercise that right.