Privacy Policy

Last updated: 14 May 2026

This Privacy Policy explains how Oshlea collects, uses, stores, shares and protects personal information when you visit or use oshlea.co.uk, purchase products from us, create an account, contact us, subscribe to marketing, interact with our advertisements, or otherwise communicate with us.

Oshlea is committed to protecting your privacy and handling your personal information in accordance with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who we are

For the purposes of data protection law, the data controller is:

Oshlea
3rd Floor, 45 Albemarle Street
London, ENG W1S 4JL
United Kingdom

Website: oshlea.co.uk
Email: hello@oshlea.co.uk
Telephone: 0759722205

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. Personal information we collect

We may collect and process the following types of personal information.

2.1 Information you provide directly

This may include:

  • your name;
  • billing address;
  • delivery address;
  • email address;
  • telephone number;
  • account login details;
  • order details;
  • payment-related details;
  • product preferences;
  • size, style, colour and purchase preferences;
  • customer service messages;
  • returns, refund and exchange information;
  • marketing preferences;
  • reviews, feedback or survey responses;
  • information you provide through forms, checkout, live chat, email, telephone, social media or other communication channels.

We do not intentionally collect special category personal data, such as health, biometric, religious, political or similar sensitive information. Please do not provide such information unless it is necessary for your enquiry.

2.2 Information collected automatically

When you visit our website, we and our technology providers may collect information such as:

  • IP address;
  • device type;
  • browser type and version;
  • operating system;
  • time zone setting;
  • location information derived from IP address;
  • pages viewed;
  • products viewed;
  • search terms used on the website;
  • links clicked;
  • add-to-cart activity;
  • checkout activity;
  • order conversion events;
  • referral source;
  • advertising campaign identifiers;
  • cookie identifiers;
  • analytics identifiers;
  • session activity;
  • error logs and security logs.

This information may be collected through cookies, pixels, tags, scripts, server-side tracking, analytics tools and similar technologies.

2.3 Information from third parties

We may receive personal information from third parties such as:

  • Shopify and Shopify-related services;
  • payment processors;
  • delivery and courier partners;
  • fraud prevention and security providers;
  • Google, including Google Analytics, Google Ads and Google Search Console;
  • Meta platforms, including Facebook and Instagram advertising tools;
  • email marketing or SMS marketing providers;
  • customer review platforms;
  • social media platforms;
  • analytics and advertising partners;
  • professional advisers and service providers.

3. How we use your personal information

We use your personal information for the following purposes.

3.1 To process and fulfil orders

We use your information to:

  • process your order;
  • take payment;
  • confirm your order;
  • deliver products;
  • provide invoices and order updates;
  • manage returns, refunds and exchanges;
  • provide customer support.

Lawful basis: performance of a contract with you, and our legitimate interests in operating our business.

3.2 To manage your customer account

We may use your information to:

  • create and maintain your account;
  • allow you to view order history;
  • save delivery details where requested;
  • manage account security.

Lawful basis: performance of a contract and our legitimate interests.

3.3 To respond to enquiries and provide customer care

We use your information to respond to emails, calls, messages, complaints, product questions and support requests.

Lawful basis: performance of a contract, steps before entering into a contract, and our legitimate interests.

3.4 To personalise your shopping experience

We may use browsing behaviour, product views, purchase history and preferences to:

  • recommend products;
  • improve website content;
  • improve product ranges;
  • show relevant offers;
  • personalise the website experience.

Lawful basis: consent where required for cookies or tracking technologies, and legitimate interests where the processing does not require consent.

3.5 For marketing communications

We may use your email address or telephone number to send marketing messages about Oshlea products, collections, promotions, offers, events and updates.

We will only send electronic marketing where we have your consent or where permitted by law, such as where you have purchased from us or shown interest in our products and have not opted out.

You can unsubscribe from marketing emails or messages at any time by using the unsubscribe link in our emails or by contacting us at hello@oshlea.co.uk.

Lawful basis: consent or legitimate interests, depending on the situation and applicable marketing rules.

3.6 For advertising, remarketing and measurement

We may use advertising and tracking technologies to:

  • measure the performance of Meta and Google advertisements;
  • understand whether an advertisement led to a website visit, add-to-cart action or purchase;
  • build remarketing audiences;
  • show more relevant advertisements;
  • limit repeated advertising;
  • analyse campaign performance;
  • improve our advertising strategy.

This may involve sharing certain event data with platforms such as Meta and Google. Event data may include page views, product views, add-to-cart events, checkout events, purchase events, cookie identifiers, device information, browser information, IP address and hashed contact details where supported by the platform.

We will seek consent for non-essential advertising cookies, pixels and similar tracking technologies where required by law. You can manage your choices through our cookie banner or cookie settings.

Lawful basis: consent where required for cookies, pixels and advertising tracking; legitimate interests for limited internal advertising analysis where permitted.

3.7 For analytics and website improvement

We may use analytics tools such as Google Analytics to understand:

  • how visitors use our website;
  • which pages are popular;
  • which products customers view;
  • how customers move through the website;
  • technical errors;
  • website speed and performance;
  • conversion performance.

This helps us improve our website, products, customer experience and marketing.

Lawful basis: consent where required for analytics cookies or similar technologies; legitimate interests for basic internal business analysis where permitted.

3.8 For fraud prevention, security and legal compliance

We may use your information to:

  • detect and prevent fraud;
  • protect our website and systems;
  • investigate suspicious activity;
  • enforce our terms;
  • comply with legal obligations;
  • keep accounting and tax records;
  • respond to lawful requests from regulators, courts or authorities.

Lawful basis: legal obligation and legitimate interests.

4. Cookies and tracking technologies

Our website uses cookies and similar technologies. These may include:

  • essential cookies required for website operation, checkout, security and shopping basket functionality;
  • preference cookies that remember your choices;
  • analytics cookies that help us understand website performance;
  • advertising cookies, pixels and tags used for Meta, Google and other advertising;
  • tracking pixels in marketing emails, where used;
  • server-side tracking technologies used to measure advertising and website performance.

Essential cookies are required for the website to work and cannot usually be switched off.

Non-essential analytics, advertising and personalisation technologies will be used only where permitted by law and, where required, after you provide consent.

You can manage cookie preferences using our cookie banner or cookie settings. You can also control cookies through your browser settings. If you block some cookies, parts of the website may not work properly.

5. Shopify and ecommerce platform processing

Our store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to sell products to you. Shopify and its subprocessors may process customer personal information to provide platform, checkout, payment, security, hosting and related ecommerce services.

Shopify may process data in different countries through its affiliated companies and subprocessors. Shopify provides tools such as privacy settings, cookie banners and customer privacy features, but we remain responsible for ensuring our own privacy information accurately reflects how Oshlea operates.

6. Who we share your personal information with

We may share personal information with:

  • ecommerce platform providers, including Shopify;
  • payment processors and fraud prevention providers;
  • delivery companies and fulfilment partners;
  • IT hosting, security and website service providers;
  • analytics providers;
  • advertising platforms, including Meta and Google;
  • email marketing and communication providers;
  • customer support tools;
  • review and feedback platforms;
  • accountants, lawyers, insurers and professional advisers;
  • regulators, law enforcement, courts or public authorities where legally required;
  • potential buyers or investors if we sell, restructure or transfer part of our business.

We only share personal information where necessary for the purposes described in this Privacy Policy.

7. International transfers

Some of our service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will take steps designed to protect it in accordance with applicable law. These steps may include using adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or other appropriate safeguards where required.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods may include:

  • order and transaction records: usually up to 6 years for tax, accounting and legal purposes;
  • customer service records: usually up to 3 years after the enquiry is resolved;
  • marketing records: until you unsubscribe or withdraw consent, plus a suppression record to ensure we do not contact you again;
  • website analytics data: according to the settings of the relevant analytics platform;
  • cookie consent records: for a reasonable period to evidence consent choices;
  • fraud, security and legal records: for as long as necessary to protect our business and comply with legal obligations.

These periods may vary depending on legal, tax, accounting, regulatory or dispute-related requirements.

9. How we protect your information

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These may include secure platforms, access controls, encryption where appropriate, password protection, secure payment processing and restricted access to customer information.

No online system is completely secure. You are responsible for keeping your account login details confidential.

10. Your data protection rights

Subject to legal conditions and exceptions, you may have the right to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your personal information;
  • ask us to restrict processing;
  • object to certain processing, including direct marketing;
  • withdraw consent where processing is based on consent;
  • request data portability where applicable;
  • complain to the UK Information Commissioner’s Office.

To exercise your rights, contact us at hello@oshlea.co.uk.

We may need to verify your identity before responding to your request.

11. Marketing choices

You can opt out of marketing at any time by:

  • clicking the unsubscribe link in our marketing emails;
  • following the opt-out instructions in SMS or other messages;
  • contacting us at hello@oshlea.co.uk.

If you opt out of marketing, we may still send service messages, such as order confirmations, delivery updates, refund information or important account notices.

12. Children’s privacy

Our website is not directed at children. We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided us with personal information, please contact us.

13. Third-party websites

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices or content of those third parties. Please read their privacy policies before providing personal information to them.

14. Complaints

If you are unhappy with how we handle your personal information, please contact us first at hello@oshlea.co.uk so we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Please check this page regularly to stay informed about how we handle your personal information.