Oxies Body Jewellery (“we”, “us”, “our”) operates this online store and website, including all related features, tools, products and services (collectively, the “Services”).
Our Services are hosted and powered by WooCommerce, which enables us to process payments, manage orders, and operate the site.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, make a purchase, or otherwise communicate with us.
Where there is any inconsistency between this Privacy Policy and our Terms of Service, this Policy governs how your personal data is collected and processed.

By using or accessing our Services, you confirm that you have read and understood this Privacy Policy.

1. Information We Collect

We collect and process the following categories of personal information, depending on how you interact with our Services:

• Contact details: name, billing and delivery addresses, phone number, and email address.
  
  
• Payment details: credit/debit-card numbers, payment confirmations, and transaction information.
  
  
• Account information: login credentials, security questions, preferences, and saved settings.
  
  
• Order and transaction data: items viewed, added to cart or wishlist, purchased, returned or exchanged, and past order history.
  
  
• Communications: information you provide when contacting us (e.g., customer support).
  
  
• Device and usage data: IP address, browser type, operating system, cookies, and how you navigate and interact with our website.
  
  

2. How We Collect Information

We obtain personal data:

• Directly from you when you create an account, place an order, subscribe to our emails, or contact us.
  
  
• Automatically when you browse our site (e.g., via cookies and analytics tools).
  
  
• From service providers such as payment processors, fulfilment companies, and technical partners who act on our behalf.
  
  
• From WooCommerce and trusted business partners that help us manage and improve our Services.
  
  

3. How We Use Your Information

We use your personal data only where we have a lawful basis under the UK GDPR, including performance of a contract, legitimate interests, legal obligations, or consent.
Typical uses include:

• Fulfilling orders: processing payments, arranging delivery, handling returns, and maintaining your account.
  
  
• Improving and personalising your experience: remembering preferences, showing relevant products, and tailoring recommendations.
  
  
• Customer communication: providing support, confirming orders, responding to queries, and notifying you of changes or updates.
  
  
• Marketing (with consent): sending promotional offers by email, SMS, or post; you may opt out at any time.
  
  
• Security and fraud prevention: authenticating accounts, monitoring transactions, and protecting against misuse.
  
  
• Legal compliance: responding to lawful requests, complying with record-keeping duties, and enforcing our terms or policies.
  
  

4. Sharing Your Information

We may share personal data only where necessary and lawful, including:

• With WooCommerce as our website host and e-commerce platform.
  
  
• With service providers who assist with payment processing, order fulfilment, delivery, IT, analytics, or marketing.
  
  
• With business partners for advertising or promotional purposes (only with your consent or where permitted by law).
  
  
• Within our group of affiliated companies.
  
  
• For legal or regulatory reasons (e.g., fraud prevention, subpoenas, or other lawful requests).
  
  
• In business transfers such as a merger, reorganisation, or sale of assets.
  
  

We do not sell your personal data.

5. Cookies and Tracking

We use cookies and similar technologies to enable site functionality, analyse traffic, and personalise your shopping experience.
You can manage or disable cookies through your browser settings.
More information is available in our Cookie Policy.

6. Children’s Data

Our Services are not directed at, or intended for, individuals under 18 years of age.
We do not knowingly collect data from children.
If you believe a child has provided personal data, please contact us immediately so we can delete it.

7. Data Security and Retention

We maintain appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
While we take reasonable precautions, no online system is entirely secure.

We retain personal data only as long as necessary for the purposes stated in this Policy, including:

• maintaining your account,
  
  
• completing transactions,
  
  
• complying with legal or tax obligations, or
  
  
• resolving disputes.
  
  

8. Your Data Protection Rights (UK Residents)

Under the UK GDPR and Data Protection Act 2018, you have the right to:

1. Access – request a copy of the personal data we hold about you.
   
   
2. Rectification – request correction of inaccurate or incomplete data.
   
   
3. Erasure – ask us to delete your data where no longer necessary or where you withdraw consent.
   
   
4. Restriction – request that we limit processing of your data in certain circumstances.
   
   
5. Portability – request transfer of your data to you or another organisation.
   
   
6. Object – object to processing for marketing or legitimate interests.
   
   
7. Withdraw consent – where processing is based on consent, you may withdraw it at any time.
   
   

To exercise your rights, please contact us (details below).
We may need to verify your identity before fulfilling a request.
We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

9. Your Marketing Choices

You can opt out of marketing emails at any time by clicking the “unsubscribe” link in our messages or contacting us directly.
Even if you opt out, we may still send you non-marketing communications, such as order updates or account information.

10. International Users

If you access our Services from outside the United Kingdom, your information may be processed in jurisdictions with different data-protection standards.
We will ensure appropriate safeguards are in place to protect your data in line with UK law.

11. Changes to This Privacy Policy

We may update this Policy periodically to reflect changes in our practices or legal obligations.
Any updates will appear on this page with a revised “Last Updated” date.
Where required by law, we will notify you of significant changes.

12. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or how your data is handled, please contact us:

OBODYJEWELLERS LTD – 15916925

331 Golden Hillock Road, Sparkbrook, Birmingham B11 2QL, United Kingdom
enquiries@oxiesbodyjewellery.co.uk

For data-protection purposes, Oxies Body Jewellery UK is the Data Controller of your personal information.