This section summarises how we obtain, store and use information about you. It is intended to provide a very general overview only.

Data controller: Oh Polly Ltd, Glasgow, United Kingdom.

How we collect information: When you provide it to us (contacting us, placing an order, signing up for newsletters), from your use of our website via cookies, and occasionally from third parties.

Information we collect: Name, contact details, IP address, device/browser type, and geographical location.

How we use information: For administrative purposes, processing orders, improving our business, and legal obligations.

Data Retention: For no longer than necessary, taking into account legal obligations for tax and accounting.

The data controller in respect of our website is Oh Polly Ltd. If you are in the European Union, you may address privacy-related inquiries to our EU representative. For those outside the EU, inquiries can be directed to our headquarters in Glasgow, United Kingdom.

Web server log information: We use a third-party server to host our website. It automatically logs your IP address, pages accessed, date/time, and browser version. Our servers are located in Ireland.

Legal basis: Compliance with legal obligations and our legitimate interests in ensuring network security and improving website performance.

Cookies: We use essential, functional, analytical, and targeting cookies. You can reject cookies via your browser settings, though some site features may cease to function.

Email & Contact Form: We collect your name, email address, and any information contained in your message. This is necessary to respond to your enquiries or perform a contract.

Phone: We collect your phone number and conversation details. We occasionally record calls for quality and training purposes.

Post: We collect any information provided in postal communications sent to our business address.

E-Newsletter: When you opt-in, we collect your name and email address. We use technologies such as web beacons to assess engagement (open rates and clicks).

Registration: Creating an account requires your name, email, and IP address. Optional details like birthday and shipping address help us provide a more personalized service.

Mandatory Information: Name, email, billing/shipping address, and VAT number (if applicable). This is required to fulfill our contract with you and for legal accounting purposes.

Payment: We use third-party payment processors. We do not store your full credit card details on our servers; payments are processed securely via encrypted gateways.

Generally, we do not receive information from third parties unless they are group companies or business partners. We may verify your information using publicly accessible sources like business directories or social media to ensure service accuracy.

When applying for a position, we collect your email, CV, and professional history. We use a third-party provider within the European Union to store this information during the application process.

We use automated profiling (like web analytics and targeting cookies) to display relevant advertisements. This does not have a legal effect on you. You have the right to object to this by opting out of non-essential cookies.

You have the right to: access your data, request corrections, ask for deletion, restrict processing, and receive your data in a portable format. You may also object to direct marketing at any time.

We do not knowingly collect sensitive personal information (e.g., health, religion, or ethnic origin). Please do not submit this type of information to us.