Privacy Policy

Introduction

This privacy policy has been written to provide you with information about how OSCAR Pet Foods Limited (“OSCAR Pet Foods”, “we”, “us”, “our”) handles or intends to handle personal information relating to our customers and visitors to our website (https://www.oscars.co.uk/) in accordance with the UK General Data Protection Regulation (“UK GDPR”). This policy relates specifically to our collection and use of personal information of customers and website users for the purposes of running our business.

About us

We are OSCAR Pet Foods Limited. We are a private limited company (company number 02532543). Our registered office address is Unit 8 Bannister Hall Works, Higher Walton, Preston, PR5 4DZ. We are registered as a data controller with the Information Commissioner’s Office and our registration number is Z5033393.

What is the purpose of this policy?

We aim to process information about you fairly, lawfully, and in a transparent manner. The aim of this policy is to provide you with sufficient information for you to be able to understand what we are doing with your information.  If you are unsure how we are handling information about you or you think we could improve our privacy information, please let us know.

Information we collect

We collect and hold a range of information about visitors to our website. This includes:

  • Contact details such as your name, email address, postal address and telephone number.

  • Profile details such as your interests, preferences, feedback and survey responses.

  • Records of your correspondence you submit to us via our website.

  • Technical data including your IP address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

  • Your marketing and communications preferences.

How we obtain your personal data

The information we hold will either have been provided by you (e.g. when you place an order with us) or be collected by automated technologies as you interact with our website. We may also hold information provided by third parties (e.g. where you place an order with us through a third party seller). As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We also use embedded pixels - with cookies, these help us to track how many people are using our site. Collecting data about the paths that users take when navigating our website help us to ensure our site is performing well, that it's easy to navigate and that the composition is clear. We also measure page response rates (how quickly pages download).

We will only ask for personal information that is appropriate to enable us to administer our services to you. In some cases, you can refuse to provide your details if you deem a request to be inappropriate. However, you should note that this may impact our ability to provide our services to you if you refuse to provide information that stops us from doing so.

What we do with it

We have set out below a description of all the ways we plan to use your information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. We may process your information for more than one lawful ground depending on the specific purpose for which we are using your information.

Purpose/Activity To register you as a new customer

Type of Information Contact details & Details of services purchased

Lawful Basis for Processing Information Performance of a contract with you

Purpose/Activity To register your interest in OSCAR Pet Foods

Type of Information Contact details, Profile data, Marketing and communications preferences

Lawful Basis for Processing Information Consent

Purpose/Activity To administer our services to you

Type of Information Contact details, Details of services purchased

Lawful Basis for Processing Information Performance of a contract with you

Purpose/Activity To process and operate our business including managing payments and charges and collecting any money owed to us

Type of Information Contact details, Details of services purchased, Financial records

Lawful Basis for Processing Information

Performance of a contract with you

Necessary for our legitimate interests to recover any debts due to us

Purpose/Activity To manage our relationship with you which will include notifying you about changes to our terms or privacy policy and asking you to leave a review or take a survey

Type of Information Contact details, Profile data, Details of services purchased, Marketing and communications information

Lawful Basis for Processing Information

Performance of a contract with you

Necessary to comply with our legal obligations

Necessary for our legitimate interests to understand how our customers use our services to develop them and grow our business

Purpose/Activity To administer and protect our business and our website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

Type of Information Contact details, Profile data, Technical data

Lawful Basis for Processing Information

Performance of a legal obligation

Necessary for our legitimate interests of running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise

Purpose/Activity To manage our relationship with visitors to our website, including responding to correspondence

Type of Information Contact details, Profile details, Records of correspondence

Lawful Basis for Processing Information Necessary for our legitimate interests to improve our services

Purpose/Activity To use data analytics to improve our website, services, marketing, relationships and experiences

Type of Information Technical information

Lawful Basis for Processing Information Necessary for our legitimate interests to better understand visitors to our website and their use of our services, to keep our website up to date, to develop our business and to inform our marketing strategy

Purpose/Activity To make suggestions and recommendations to you about our services and our business that may be of interest to you

Type of Information Contact details, Technical data, Profile data, Marketing and communications information

Lawful Basis for Processing Information Necessary for our legitimate interests to develop our products and services and to grow our business

Our marketing communications

We may use your personal information to contact you to inform you about services we believe might be of interest to you via email or text message (we call this marketing communications).

You can ask us to stop sending you marketing communications at any by following the unsubscribe links on any marketing communications sent to you or by contacting us at any time.

Where you opt out of receiving these marketing communications, this will not apply to personal information provided to us as a result of the provision of our services and we will still be required to contact you in relation to the services we provide.

Sharing personal information

Where necessary or required, we may share your personal information as follows:

  • With third party service providers, in connection with services performed on our behalf.  For example, our email provider, our IT provider, our platform provider and analytics and search engine providers that assist us in the improvement and optimisation of our website.

  • With government bodies and law enforcement agencies.

  • With our insurers and legal advisers.

  • With third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

This list is not exhaustive as there are other circumstances where we may also be required to share information, for example:

  • To meet our legal obligations.

  • In connection with legal proceedings (or where we are instructed to do so by Court order).

Our relationships with third party service providers are governed by contractual provisions with us and they only have access to personal information to perform the described purposes and may not use it for other purposes.

Where we keep personal information

The personal information that we collect is stored within the UK and European Economic Area (EEA). However, there may be some circumstances where it is necessary to transfer and store personal information at a destination outside the UK or the EEA. In these circumstances, we will take all steps reasonably necessary to ensure that personal information is treated securely and in accordance with data protection law and, in the event that personal information is transferred outside the UK or the EEA, shall ensure that this is carried out subject to the requirements of the UK GDPR.

How long we keep it

We will only retain personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. How long information will be stored depends on the information in question and what it is being used for. Details of retention periods for different aspects of personal information are available upon request. After this period, we will securely destroy or anonymise personal information in accordance with data protection law.

We continually review what information we hold and delete what is no longer required.

Do we store credit/ debit card details?

We do not store credit or debit card details, all of our card transactions go through a third party payment processor who ensure that your data is kept securely. Our systems conform to the Payment Card Industry Data Security Standard (PCI DSS).

Are there any age restrictions?

If you are 16 or under, please get your parent/guardians permission before providing any personal information.

What are your rights?

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of access - You have the right of access to information we hold about or concerning you. 

  • Right of rectification or erasure - If you feel that any data that we hold about you is inaccurate you have the right to ask us to correct or rectify it.  You also have a right to ask us to erase information about you where you can demonstrate that the data we hold is no longer needed by us, or if you withdraw the consent upon which our processing is based, or if you feel that we are unlawfully processing your data. 

  • Right to restriction of processing – In certain circumstances, you have a right to request that we refrain from processing your data.

  • Right of portability – In certain circumstances, you have a right to receive any personal data that you have provided to us in order to transfer it onto another data controller.

  • Right to object – In certain circumstances, you have a right to object to our processing of your personal data.

  • Right to withdraw consent - In the circumstances where you may have provided consent to the collection, processing and transfer of personal information for a specific purpose has been provided, you have the right to withdraw consent for that specific processing at any time.

Please keep in mind that there are exceptions to the rights above and, though we will always try to respond to your satisfaction, there may be situations where we are unable to do so.

To exercise any of these rights, please contact our Data Privacy Manager using the contact details below.

Contact Details

For further information on how to request your personal information, exercise any of your data protection rights or request further information in relation to how and why we process your information, you can contact our Data Privacy Manager [01772 647900 – data@oscars.co.uk].

Complaints

If you have a concern about the way we are collecting or using personal information, we would ask that you raise your concern with us in the first instance by using the contact details above.

You also have a right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, should you feel that we have not handled your information in line with legislative and regulatory requirements. They can be contacted at:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

0303 123 1113 | www.ico.org.uk

Changes to this privacy policy

This policy is kept under review and will be updated as and when necessary. This privacy policy was last updated in December 2022.