Privacy Policy

Last updated: September 16, 2026

oakseren (“oakseren,” “we,” “us,” or “our”) operates https://oakseren.com and the related online store, content, features, purchasing functions, and services (collectively, the “Services”).

Our ecommerce store is hosted by Shopify, which provides the ecommerce platform that enables us to offer the Services.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use the Services, place an order, create an account, subscribe to communications, contact us, or otherwise interact with oakseren.

It also explains the privacy rights and choices that may be available to you under applicable data-protection law.

1. Who Is Responsible for Your Personal Information

Where oakseren determines why and how personal information is processed, oakseren acts as the applicable data controller.

Our contact details are:

oakseren
Website: https://oakseren.com
Email: machucagaddy54@hotmail.com
Phone: +44 7970 686773
Business Address:
Flat 3, 14 Florence Road
London
W5 3TX
United Kingdom

2. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information.

Contact Information

This may include:

• Your name;

• Email address;

• Telephone number;

• Billing address; and

• Shipping address.

Order and Transaction Information

This may include:

• Products viewed or purchased;

• Shopping-cart activity;

• Order history;

• Purchase amounts;

• Discounts or promotions used;

• Returns;

• Refunds;

• Delivery information;

• Order status; and

• Communications relating to an order.

Payment-Related Information

Payments are processed through Shopify and authorised third-party payment providers.

oakseren does not ordinarily receive or store complete payment-card numbers.

We may receive limited transaction or payment information necessary to:

• Confirm transactions;

• Prevent fraud;

• Process refunds;

• Resolve payment issues; and

• Maintain legally required transaction records.

Account Information

If customer-account functionality is available, we may collect information such as:

• Account or login information;

• Saved addresses;

• Saved preferences;

• Order history; and

• Account activity.

Device and Usage Information

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Device identifiers;

• Cookie identifiers;

• Network information;

• General location derived from an IP address;

• Referring websites or pages;

• Pages viewed;

• Products viewed;

• Links clicked;

• Shopping-cart activity;

• Session information; and

• Other interactions with the Services.

Marketing and Preference Information

This may include:

• Newsletter subscriptions;

• Marketing preferences;

• Advertising preferences;

• Cookie choices;

• Privacy choices;

• Responses to promotions; and

• Interactions with marketing communications.

Communications and Customer-Service Information

We may collect information you voluntarily provide when communicating with us, including:

• Emails;

• Customer-service requests;

• Return or refund requests;

• Product reviews;

• Feedback;

• Photographs;

• Videos; and

• Other information you choose to provide.

3. How We Collect Personal Information

We may collect personal information in the following ways.

Directly From You

For example, when you:

• Place an order;

• Create an account;

• Enter billing or shipping information;

• Complete a form;

• Subscribe to communications;

• Request a return or refund;

• Submit a review; or

• Contact customer support.

Automatically

We and our service providers may collect information automatically through technologies such as:

• Cookies;

• Pixels;

• Tags;

• Log files;

• Scripts;

• Local storage;

• Device identifiers; and

• Similar storage or access technologies.

From Service Providers and Partners

We may receive information from third parties that help us operate the Services, including:

• Shopify;

• Payment processors;

• Fraud-prevention providers;

• Analytics providers;

• Advertising and marketing providers;

• Fulfilment providers;

• Warehouses;

• Delivery carriers;

• Returns providers; and

• Customer-service or technology providers.

4. How We Use Personal Information

We may use personal information to:

• Provide and operate the Services;

• Process payments;

• Confirm and manage orders;

• Fulfil purchases;

• Arrange shipping and delivery;

• Provide tracking information;

• Process returns, replacements, and refunds;

• Provide customer support;

• Create and maintain customer accounts;

• Save customer preferences;

• Send transactional and service-related communications;

• Send order, delivery, security, account, and policy updates;

• Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

• Protect customers, our website, systems, and business;

• Analyse how customers use the Services;

• Maintain and improve our website, products, Services, and customer experience;

• Personalise content or product recommendations where permitted;

• Measure marketing and advertising performance;

• Provide or evaluate advertising where permitted by applicable law;

• Send promotional communications in accordance with applicable law and your choices;

• Maintain business, accounting, tax, and transaction records;

• Comply with legal, regulatory, contractual, and law-enforcement obligations;

• Establish, exercise, or defend legal claims; and

• Enforce our Terms of Service and other policies.

We seek to process only personal information that is reasonably necessary and appropriate for the applicable purpose.

5. Lawful Bases for Processing

Where the UK General Data Protection Regulation (“UK GDPR”) requires a lawful basis for processing, the basis we rely upon depends on the purpose and circumstances of the processing.

These bases may include:

Performance of a Contract

We may process personal information where necessary to enter into or perform a contract with you, including to:

• Process an order;

• Accept payment;

• Fulfil a purchase;

• Arrange delivery;

• Provide customer support;

• Process a return; or

• Issue a refund.

Legal Obligation

We may process personal information where necessary to comply with applicable legal obligations, including obligations relating to:

• Tax;

• Accounting;

• Consumer protection;

• Regulatory compliance;

• Fraud prevention; and

• Valid legal or governmental requests.

Legitimate Interests

Where permitted by law, we may process personal information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These interests may include:

• Operating and improving our business;

• Providing effective customer service;

• Protecting our website and systems;

• Preventing and detecting fraud;

• Understanding website performance;

• Maintaining appropriate business records; and

• Establishing, exercising, or protecting legal rights.

Recognised Legitimate Interests

Where applicable UK law permits processing under a recognised legitimate-interest basis for a specified purpose, we may rely on that basis where the legal requirements are met.

This may include certain processing connected with preventing or investigating crime.

Consent

Where required by law, we may rely on your consent for activities including:

• Certain marketing communications;

• Non-essential cookies;

• Advertising technologies;

• Certain analytics technologies; and

• Other processing activities requiring consent.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. Cookies and Similar Technologies

oakseren, Shopify, and other service providers may use cookies, pixels, tags, scripts, local storage, and similar technologies to:

• Operate the website;

• Maintain shopping-cart and checkout functionality;

• Authenticate users;

• Remember preferences;

• Protect against fraud;

• Understand website usage;

• Measure website performance;

• Analyse customer interactions;

• Measure marketing effectiveness;

• Personalise content where permitted; and

• Provide or evaluate advertising.

Some technologies are strictly necessary to provide Services requested by the user or to enable essential website functionality.

Other technologies, including certain analytics, personalisation, and advertising technologies, may require consent under applicable UK privacy and electronic communications rules.

Where consent is required, we will seek appropriate consent before using the relevant non-essential technologies.

You may manage available choices through the cookie or privacy controls presented on https://oakseren.com.

You may also manage certain technologies through your browser or device settings.

Blocking or disabling certain technologies may affect functionality including:

• Account access;

• Shopping carts;

• Saved preferences;

• Personalisation; or

• Checkout.

7. Marketing Communications

We may send marketing communications only where permitted by applicable law.

Where consent is required for electronic marketing, we will seek appropriate consent.

Where another lawful permission or exception applies, marketing may be sent in accordance with the applicable legal requirements.

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in the message.

You may also contact us to object to the use of your personal information for direct marketing.

Opting out of marketing does not prevent us from sending necessary non-promotional communications relating to:

• Orders;

• Payments;

• Shipping;

• Returns;

• Refunds;

• Accounts;

• Security; or

• Customer-service matters.

8. Advertising and Privacy Choices

We may work with advertising, analytics, and marketing providers to:

• Measure advertising performance;

• Attribute conversions;

• Understand customer interactions;

• Personalise marketing where permitted; and

• Provide or evaluate advertising.

These activities may involve information such as:

• Cookies;

• Pixels;

• Device identifiers;

• IP addresses;

• Browsing activity;

• Product-viewing activity;

• Cart activity; and

• Purchase interactions.

oakseren does not exchange personal information for money.

However, laws in certain jurisdictions outside the United Kingdom may classify certain advertising-related disclosures as a “sale,” “sharing,” or use for targeted advertising even when no money is exchanged.

Where such laws apply and provide an opt-out right, eligible individuals may exercise that right through applicable privacy controls available on our website or by contacting:

machucagaddy54@hotmail.com

Where applicable law requires us to recognise qualifying browser-based privacy preference signals, we will process those signals as required.

9. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to the following categories of recipients.

Shopify

Shopify hosts and supports our ecommerce store and processes personal information in connection with providing ecommerce and related services.

Payment and Financial-Service Providers

We may disclose necessary information to:

• Payment processors;

• Banks;

• Financial-service providers; and

• Fraud-prevention providers

for purposes including payment authorisation, transaction processing, refunds, verification, and fraud prevention.

Fulfilment and Delivery Providers

We may disclose necessary customer and order information to:

• Fulfilment providers;

• Warehouses;

• Logistics providers;

• Delivery carriers; and

• Returns providers.

Technology and Business-Service Providers

We may use providers supporting:

• Website functionality;

• Information technology;

• Cloud infrastructure;

• Data storage;

• Customer support;

• Email delivery;

• Analytics;

• Security; and

• Fraud prevention.

Advertising and Marketing Providers

Subject to applicable law and your privacy choices, we may disclose certain information to advertising, analytics, or marketing providers for:

• Measurement;

• Attribution;

• Personalisation; or

• Advertising.

Professional Advisers

We may disclose information where reasonably necessary to:

• Lawyers;

• Accountants;

• Auditors;

• Insurers; and

• Other professional advisers.

Government and Legal Authorities

We may disclose information to courts, regulators, government authorities, law-enforcement agencies, or other authorised parties where:

• Required by applicable law;

• Required by valid legal process;

• Necessary to investigate fraud or unlawful activity;

• Necessary to establish or protect legal rights; or

• Necessary to protect the rights or safety of customers or others.

Business Transactions

If oakseren is involved in a merger, acquisition, financing, restructuring, sale of assets, transfer of business, or similar transaction, relevant personal information may be disclosed to prospective or actual purchasers, advisers, or successors, subject to applicable safeguards.

10. Shopify

Our ecommerce store is powered by Shopify.

Shopify processes personal information in connection with providing ecommerce technology and related services to oakseren.

Depending on the Shopify service involved, Shopify may process information on behalf of oakseren and may also process certain information for purposes described in Shopify's own privacy notices.

Customers who use Shopify consumer services such as Shop or Shop Pay may also have a direct relationship with Shopify and may have separate privacy rights and choices relating to information processed directly by Shopify.

We encourage customers to review Shopify's applicable privacy notices for additional information about Shopify's processing practices.

11. International Transfers of Personal Information

oakseren is based in the United Kingdom.

Shopify and other service providers may process, store, or access personal information in countries outside the United Kingdom.

Where this constitutes a restricted international transfer under applicable UK data-protection law, we will use or rely upon an appropriate lawful transfer mechanism.

Depending on the circumstances, this may include:

• UK adequacy regulations;

• The UK International Data Transfer Agreement (“IDTA”);

• The UK Addendum to approved EU Standard Contractual Clauses;

• Binding corporate rules where applicable;

• Other appropriate safeguards permitted by applicable UK law; or

• A lawful exception where applicable.

Where required, additional assessments or safeguards may also be used to help ensure that transferred personal information receives the protection required by applicable UK law.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods may depend on:

• The type of personal information;

• The purpose of processing;

• The duration of our customer relationship;

• Whether an account remains active;

• Tax and accounting obligations;

• Transaction-record requirements;

• Return and warranty periods;

• Fraud-prevention requirements;

• Legal and regulatory obligations;

• Dispute resolution; and

• The need to establish, exercise, or defend legal claims.

When information is no longer reasonably required, we may delete, anonymise, aggregate, or securely dispose of it, subject to applicable legal obligations.

13. Security

We use reasonable administrative, organisational, and technical safeguards designed to protect personal information against:

• Unauthorised access;

• Unauthorised disclosure;

• Loss;

• Misuse;

• Alteration; and

• Destruction.

However, no internet transmission, website, network, database, or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for protecting their passwords, account credentials, and authentication information.

If you believe your account or personal information has been compromised in connection with oakseren, please contact us promptly.

Where a personal-data breach occurs, we will take steps required by applicable law, which may include notifying the relevant supervisory authority or affected individuals where legally required.

14. Your UK Data Protection Rights

Depending on the circumstances and applicable law, you may have rights concerning your personal information.

Right to Be Informed

You have the right to receive information about how and why your personal information is processed.

Right of Access

You may request confirmation of whether we process your personal information and request access to relevant personal information.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

The right to erasure is not absolute and may be subject to legal exceptions.

Right to Restrict Processing

In certain circumstances, you may request that processing of your personal information be restricted.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, machine-readable format.

Where legally and technically applicable, you may also request that qualifying information be transmitted to another organisation.

Right to Object

You may have the right to object to certain processing based on legitimate interests or recognised legitimate interests where applicable.

You have the right to object to the use of your personal information for direct marketing.

Right to Withdraw Consent

Where we rely on consent, you may withdraw that consent at any time.

Rights Relating to Automated Decisions

Where applicable, you may have rights concerning certain decisions based solely on automated processing that produce legal or similarly significant effects.

These rights are subject to applicable conditions, exemptions, and limitations.

15. How to Exercise Your Privacy Rights

To exercise an applicable privacy right, please contact:

Email: machucagaddy54@hotmail.com

Where possible, use the subject line:

Privacy Request

Please describe your request and provide enough information for us to identify the relevant records.

We may request additional information where reasonably necessary to verify your identity and protect personal information against unauthorised access or disclosure.

We will respond within the period required by applicable law.

For requests covered by UK data-protection law, we will generally respond without undue delay and within one calendar month, subject to any extension permitted by law.

Where legally permitted, additional time may be required for particularly complex requests or multiple requests.

Applicable privacy rights are generally available without charge, although the law may permit a reasonable fee or refusal in limited circumstances, such as where a request is manifestly unfounded or excessive.

Where permitted by law, an authorised representative may submit a request on your behalf, although we may require appropriate evidence of authorisation and identity verification.

16. Privacy Rights Outside the United Kingdom

Customers located outside the United Kingdom may have additional privacy rights under the laws applicable in their jurisdiction.

Depending on applicable law, these may include rights to:

• Access personal information;

• Correct inaccurate information;

• Request deletion;

• Obtain a portable copy of certain information;

• Opt out of direct marketing;

• Opt out of targeted advertising;

• Opt out of processing treated as a sale or sharing;

• Limit certain uses of sensitive information;

• Appeal certain privacy-request decisions; or

• Exercise privacy rights without unlawful discrimination.

These rights apply only where the relevant law applies to oakseren and the particular processing activity.

17. Children's Privacy

The Services are intended for a general shopping audience and are not specifically directed towards children.

We do not knowingly collect or process children's personal information in circumstances prohibited by applicable law.

Where parental authorisation, age verification, or another legal requirement applies to the processing of a child's personal information, we will comply with applicable requirements.

If you believe a child has provided personal information to us unlawfully or inappropriately, please contact us so that we can review the matter and take appropriate action.

18. Third-Party Websites and Services

The Services may contain links to websites, applications, platforms, or services operated by independent third parties.

Their privacy and security practices are governed by their own policies.

oakseren does not control and is not responsible for the privacy practices of independent third parties.

We encourage you to review the applicable privacy notice before providing personal information directly to an independent third party.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our operations;

• The Services;

• Technology;

• Service providers;

• Privacy practices;

• Advertising practices; or

• Legal and regulatory requirements.

When this Policy is updated, we will publish the revised version on https://oakseren.com and update the “Last updated” date.

Where applicable law requires additional notice or consent for a material change, we will provide such notice or obtain consent as required.

20. Complaints

If you have a question or concern about how oakseren handles personal information, please contact us so that we can review the matter.

You may also have the right to lodge a complaint with the United Kingdom's data-protection supervisory authority:

Information Commissioner's Office (ICO)

Contacting oakseren first does not prevent you from exercising your right to contact the ICO or another competent supervisory authority where applicable.

21. Contact Us

For privacy questions, requests, or complaints, please contact:

Privacy Contact — oakseren

Website: https://oakseren.com
Email: machucagaddy54@hotmail.com
Phone: +44 7970 686773
Business Address:
Flat 3, 14 Florence Road
London
W5 3TX
United Kingdom