Privacy Policy

1. Introduction

At oed-uk.com, we are committed to safeguarding the privacy and personal data of our users. We recognize the importance of transparency and data protection and are fully dedicated to complying with all applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines the types of personal data we collect, how we use it, the measures we have in place to protect it, and your rights regarding that data.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users who interact with oed-uk.com and its associated services. For the purposes of data protection legislation, oed-uk.com acts as the Data Controller for the personal data collected through this website and related services. Questions or concerns regarding the handling of your information should be directed to our privacy team via email at [email protected].

3. Categories of Data Processed

We collect and process the following categories of personal data:

a) Usage Data
Includes data such as IP address, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths. This data is collected to monitor performance and prevent misuse.

b) Account Data
Includes identifiers such as your full name, physical address, email address, and telephone number, generally provided during account registration or order placement.

c) Profile Data
Encompasses your preferences, account settings, purchase history, saved items, and behavioral data based on your interaction with oed-uk.com.

d) Communication Data
Includes information you provide when you contact our support team, submit inquiries, or correspond with us through other channels. This may include chat logs, email correspondence, and customer service notes.

e) Technical Data
Includes information about the devices you use to access our site, such as hardware model, device ID, operating system, mobile network information, system configurations, and diagnostic data.

f) Transaction Data
Comprises data concerning payment details, billing information, transaction history, order fulfillment, and delivery status collected to process purchases and manage our commercial relationship.

g) Preference Data
Includes your marketing and communication preferences, product interests, opt-in/out selections, and cookie consent choices.

4. Legal Bases for Processing

We rely on the following legal bases for processing your personal data:

– Consent: For specific data uses, such as receiving marketing communications or storing preference cookies.
– Contractual Necessity: To fulfill our contractual obligations to you, such as processing transactions or providing services you request.
– Legal Obligation: To comply with regulatory requirements and obligations.
– Legitimate Interest: For purposes such as fraud prevention, improving our services, ensuring website security, and conducting analytics, insofar as such interests do not override your fundamental rights.

5. Your Rights

Under GDPR and other relevant laws, you have the following rights regarding your personal data:

– Right of Access: You may request a copy of the personal data we hold about you.
– Right to Rectification: You have the right to correct any inaccuracies in your data.
– Right to Erasure (“Right to be Forgotten”): You may request that your data be deleted, subject to legal retention requirements.
– Right to Restrict Processing: You may request the restriction of processing under certain conditions.
– Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format to transmit to another controller.
– Right to Object: You can object to the processing of your data, especially regarding direct marketing or processing based on legitimate interest.
– Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time by contacting us at [email protected].

Residents of California have additional rights under the CCPA, including the right to opt-out of the sale of personal information, the right to know the categories and specific pieces of personal data we collect and share, and the right not to be discriminated against for exercising privacy rights.

6. Security Measures

We implement a range of appropriate technical and organizational security measures to protect your personal data, including:

– End-to-end encryption of sensitive data in transit and at rest
– Role-based access control and regular access audits
– Firewalls and secure server environments
– Regular backups and disaster recovery protocols
– Staff training on confidentiality and data protection best practices

7. International Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure an adequate level of protection through the use of Standard Contractual Clauses approved by the European Commission or other legally approved mechanisms. Users accessing oed-uk.com from jurisdictions outside the UK or EEA should be aware that their data may be transferred to and processed in countries where privacy laws may be less stringent.

8. Data Retention

We retain personal data for only as long as necessary to fulfill the purposes for which it was collected, and in accordance with legal, regulatory, and operational requirements:

– Usage Data: retained for 12 months for analytics and security
– Account Data: retained while the account is active and for 6 years thereafter for legal compliance
– Profile Data: retained as long as relevant to service provision and for up to 3 years of inactivity
– Communication Data: retained for a minimum of 3 years for recordkeeping and dispute resolution
– Technical Data: retained up to 12 months for performance optimization
– Transaction Data: retained for at least 6 years for tax and auditing purposes
– Preference Data: retained until changes are made by the user or data is withdrawn or deleted

9. Cookie Policy

Oed-uk.com uses cookies and similar technologies to enhance user experience, analyze site traffic, and support marketing efforts. These cookies may be placed directly by us or by third-party service providers.

Types of cookies used:

– Essential Cookies: Necessary for website functionality including account login and checkout processes.
– Functional Cookies: Enable personalization, such as remembering preferences and user settings.
– Analytics Cookies: Help us understand user behavior to improve user experience (e.g., Google Analytics).
– Performance Cookies: Measure site performance and loading times.

10. Cookie Management and Compliance with GDPR & CCPA

In compliance with GDPR and CCPA, users are given the option to manage their cookie preferences via our cookie banner and settings interface upon first visit and at any time thereafter. You may:

– Accept all cookies
– Reject non-essential cookies
– Customize your cookie preferences

Additionally, you may modify browser settings to delete or block cookies. Please note that disabling some cookies may affect website performance or certain functionalities.

11. Special Protections for Children Under 13

Oed-uk.com does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that we have received data from a child under 13, we will promptly delete such information. Parents or legal guardians who believe their child has submitted personal data should contact us at [email protected].

12. Policy Updates & User Notifications

We reserve the right to update or amend this Privacy Policy at any time. Material changes will be communicated via appropriate channels, such as a prominent banner on our website or direct email to affected users. We encourage you to review this policy periodically to remain informed.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which we handle your personal information, please contact us at:

Email: [email protected]
Website: https://oed-uk.com

We are committed to upholding the highest standards of data protection. If you believe your data protection rights have been violated, you may lodge a complaint with the relevant supervisory authority or contact us directly for resolution.