Oloriessence is committed to protecting the privacy and security of your personal data in compliance with UK data protection laws, including the General Data Protection Regulation (GDPR) as incorporated into UK law. This policy explains how we collect, use, and protect your information.
1. Data Controller
Oloriessence (referred to as “we,” “us,” or “our”) is the data controller responsible for your personal data.
2. Information We Collect
We collect personal data when you purchase products, book services, or interact with our website. This includes:
- Identity Data: Name, title, date of birth.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment card details (processed securely by third-party payment gateways like Stripe/PayPal; we do not store full card details).
- Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us (African foodstuffs, hairstyling services).
- Service Data (Hairstyling): Notes related to your appointment, hair history, preferences, and patch test results (where applicable).
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
3. How We Use Your Personal Data
We use your data primarily for the following purposes:
- Fulfilling Orders and Bookings: To process and deliver your foodstuff orders, and to schedule, confirm, and manage your hairstyling appointments.
- Payment Processing: To process secure payments for transactions.
- Customer Support: To manage our relationship with you, including notifying you about changes to our terms or policies, and responding to your enquiries or complaints.
- Marketing (Opt-In): To send you updates on new products, special offers, and services, only where you have explicitly opted in to receive such communications.
- Service Improvement: To analyse how customers use our services and website to improve our offerings.
4. Disclosure of Your Personal Data
We may share your personal data with the following parties:
- External Third Parties: Service providers acting as processors based in the UK/EEA who provide IT and system administration services, payment processing, and logistics/delivery services (e.g., couriers for foodstuff delivery).
- Professional Advisors: Including lawyers, bankers, auditors, and insurers.
- Regulators and Authorities: Who require reporting of processing activities in certain circumstances.
We require all third parties to respect the security of your personal data and treat it in accordance with the law.
5. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know.
6. Your Legal Rights (UK/GDPR)
Under UK data protection laws, you have rights including: the right to access, rectify, erase, restrict, object to processing, and portability of your personal data. If you wish to exercise any of these rights, please contact us using the details below.
7. Contact Details
If you have any questions about this privacy policy or our data practices, please contact us at:
Email: info@oloriessence.com, hello@oloriessence.com
