Privacy policy

Last updated: 15 October 2026

This notice explains how Oscanna Ltd (“Oscanna”, “we”, “us”) uses personal information when you visit oscanna.co.uk, buy from us or contact us.

1. Who we are and how to contact us

Oscanna Ltd is responsible for the personal information described in this notice. For privacy questions or requests, email tim@oscanna.co.uk, or write to Oscanna Ltd, Unit 8 Wheatcroft Business Park, Edwalton, Nottingham NG12 4DG, United Kingdom.

2. Information we collect

  • Purchases and accounts: your name, contact details, billing and delivery addresses, products ordered, order and payment status, returns and account information. Payment providers process the payment credentials needed for your chosen payment method.
  • Support and reviews: messages, order references, information and images you send about a product or problem, and reviews you submit.
  • Website use: IP address, browser and device details, cookie identifiers, pages and products viewed, referral information, and interactions with the website and advertising.
  • Preferences: marketing subscriptions, consent choices and privacy requests.

We receive information directly from you, automatically through the website, and from Shopify, payment services, delivery services and connected sales channels where needed to handle your purchase. Please avoid sending sensitive information that is unnecessary for your enquiry. Without the details required for payment and delivery, we may be unable to complete an order.

3. Why we use information

  • To fulfil a contract or respond before you buy: taking payment, processing orders, arranging delivery, managing accounts and providing order-related support and returns.
  • To meet legal obligations: keeping tax and accounting records and handling consumer-rights requests.
  • For legitimate interests: securing the website, preventing fraud, resolving disputes and improving customer service. We balance these needs against your rights.
  • With consent where required: sending promotional messages and using optional advertising or analytics technologies. You can withdraw consent without affecting earlier lawful processing.

You can unsubscribe from promotional emails using the link in the message or by contacting us. Order and service messages are separate from marketing.

4. Who receives information

We share relevant information with providers needed to run the business: Shopify for the store, checkout and related services; payment providers; Royal Mail and other delivery or fulfilment services used for your order; and providers supporting invoicing, customer messages, reviews and order management. Depending on the service used, these include Invoice Hero, DMSMatrix, Shopify Messaging and Forms, SeedGrow WhatsApp Chat, Judge.me and Reputon eBay Reviews.

Review content and the display name you provide may be shown publicly when you submit a review. If you choose WhatsApp or another external service, its own privacy notice also applies. We may also disclose information to professional advisers, authorities or other parties where necessary to meet legal duties, prevent fraud or deal with a legal claim.

5. Shopify and personalised services

Shopify hosts our store and processes information when you browse or buy. We have Shopify Network Intelligence enabled. This allows Shopify to use information about interactions with our store together with interactions with other merchants and Shopify to provide enhanced services, including personalised experiences, more relevant advertising and measurement. Information may be shared with Shopify and third parties in other countries for these services.

Shopify acts on our behalf for some processing and is independently responsible for certain services. Read the Shopify Consumer Privacy Policy. Visit the Shopify privacy portal to learn about your choices, including withdrawing consent or objecting to relevant processing.

6. Cookies, analytics and advertising

Cookies and similar technologies support the basket, checkout, security and preferences. Other technologies help measure website use and advertising, and personalise content and ads. Our connected integrations include Meta (Facebook and Instagram), Google and YouTube, Pinterest, TikTok, and Judge.me. Information used may include device and cookie identifiers, browsing and purchase events, and customer information used to match events to an account.

Where consent is required, optional analytics and advertising use depends on your consent. Use “Manage preferences” in the cookie banner when it is shown, or contact us to change a choice or ask for help. You can also manage cookies in your browser; blocking essential cookies may affect shopping features. Changing a choice does not remove information already lawfully processed.

For these providers’ handling of information and available controls, see the privacy notices for Meta, Google, Pinterest, TikTok and Judge.me.

7. International processing

Shopify’s hosting location for our customer data is the European Union. Shopify and other providers may also process information elsewhere, including Canada and the United States. Hosting in the EU does not mean all processing stays there. Shopify describes its transfer arrangements, including adequacy decisions and standard contractual clauses with the UK Addendum where applicable, in its Data Processing Addendum. Contact us for information about safeguards relevant to your information.

8. How long we keep information

We decide retention according to the purpose and applicable obligations. Order and payment records are kept for the tax and accounting periods that apply, and as needed for returns, product support or legal claims. Support correspondence is kept while an enquiry or dispute remains relevant. Account information is kept while needed to provide and administer the account. Marketing information is kept while we have a lawful basis to use it; a limited suppression record may be retained to honour an opt-out. Cookie and provider retention periods vary by service and settings. We delete or anonymise information when it is no longer needed, subject to legal requirements.

9. Your rights

Depending on the law and circumstances, you can ask to access, correct, erase or receive a portable copy of your information, or restrict or object to its use. You can object to direct marketing at any time and withdraw consent where we rely on it. Some information must be retained for legal obligations. Contact tim@oscanna.co.uk; we may need to verify your identity before acting.

Payment and fraud services may use automated checks. If a check affects an order, contact us so we can investigate and explain the available review route.

You can complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint, or to your local data-protection authority where applicable.

10. Other services and updates

This notice covers our website and related customer service. Marketplaces and third-party product apps have their own privacy notices for their services. We may update this notice as our business or legal requirements change; the date above shows the latest revision.