OANA PRIME SHOP

Privacy Policy

Last Updated: May 2026

Oana Prime Shop ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website or make a purchase from us.

This policy is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website, you acknowledge that you have read and understood this Privacy Policy.

 

Oana Prime Shop is the data controller responsible for your personal data. If you have any questions about how we handle your data or wish to exercise your rights, please contact us using the details below:

 

Trading Name	OanaPrimeShop
Email	oanaprimeshop@outlook.com
Phone	+44 7459 783540
Address	Cross Road Connaught Lodge, Weymouth, England, DT4 9QX, United Kingdom
Data Protection Contact	oanaprimeshop@outlook.com

 

We collect personal data in several ways when you interact with our website. The categories of data we collect include:

 

3.1 Data You Provide Directly

•       Full name

•       Email address

•       Phone number

•       Billing and delivery address (United Kingdom only)

•       Payment information (processed securely via our payment provider — we do not store full card details)

•       Order details and purchase history

•       Communications you send us via email, phone, live chat, or chatbot

 

3.2 Data Collected Automatically

When you visit our website, certain technical data may be collected automatically, including:

 

•       IP address and device information

•       Browser type and version

•       Pages visited and time spent on the website

•       Referring website or source

•       Cookie data (see Section 10 for full details)

 

3.3 Data from Third Parties

We may receive data about you from third-party services, including our fulfilment partner Zendrop, payment processors, and social media platforms (Facebook, Instagram, Pinterest, YouTube, TikTok) if you interact with us through those channels.

 

We use your personal data only for lawful purposes. The table below sets out each purpose and the legal basis under UK GDPR on which we rely:

 

Purpose of Processing	Legal Basis (UK GDPR)
Processing and fulfilling your orders	Performance of a contract (Art. 6(1)(b))
Sending order confirmations and shipping updates	Performance of a contract (Art. 6(1)(b))
Processing payments securely	Performance of a contract (Art. 6(1)(b))
Handling returns, refunds, and customer enquiries	Performance of a contract (Art. 6(1)(b))
Complying with legal and tax obligations	Legal obligation (Art. 6(1)(c))
Preventing fraud and ensuring website security	Legitimate interests (Art. 6(1)(f))
Improving our website and user experience	Legitimate interests (Art. 6(1)(f))
Sending marketing communications (where consented)	Consent (Art. 6(1)(a))
Responding to live chat, chatbot, and support queries	Legitimate interests (Art. 6(1)(f))

 

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only as necessary to operate our business and fulfil your orders:

 

•       Your name and delivery address are shared with Zendrop to process and ship your order.Zendrop (fulfilment partner):

•       Payment details are handled by our secure payment gateway (e.g. PayPal, Stripe, or equivalent). We do not store full card details.Payment processors:

•       Your delivery address may be shared with shipping carriers to deliver your order.Courier and logistics providers:

•       Data entered via our live chat or chatbot may be processed by the relevant platform provider.Customer support tools:

•       We may disclose your data if required to do so by law, regulation, or legal process.Legal and regulatory authorities:

•       In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner, subject to the same privacy protections.Business transfers:

 

Some of our third-party service providers (including Zendrop and social media platforms) may process your data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), or transfers to countries with an adequacy decision.

By using our website, you consent to the transfer of your personal data as described in this section.

 

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Our standard retention periods are:

 

Type of Data	Retention Period
Order and transaction records	7 years (UK tax and accounting requirements)
Customer account data	Duration of account + 2 years after last activity
Support and communication records	3 years from last interaction
Marketing consent records	Until consent is withdrawn + 1 year
Technical/website analytics data	Up to 26 months

 

When data is no longer required, it will be securely deleted or anonymised.

 

As a data subject under UK GDPR, you have the following rights regarding your personal data:

 

•       You may request a copy of the personal data we hold about you (a Subject Access Request).Right of access:

•       You may ask us to correct inaccurate or incomplete data.Right to rectification:

•       You may request deletion of your personal data, subject to certain legal exceptions.Right to erasure:

•       You may ask us to limit how we use your data in certain circumstances.Right to restrict processing:

•       You may request your data in a structured, machine-readable format.Right to data portability:

•       You may object to processing based on legitimate interests or for direct marketing purposes.Right to object:

•       Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.Right to withdraw consent:

•       You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.Right to lodge a complaint:

 

To exercise any of the above rights, please contact us at oanaprimeshop@outlook.com. We will respond to all requests within 30 days. We may need to verify your identity before processing your request.

 

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

 

•       Secure HTTPS encryption on our website

•       Secure payment processing via PCI-DSS compliant payment gateways

•       Restricted access to personal data on a need-to-know basis

•       Regular review of our data handling and security practices

 

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by UK GDPR.

 

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience by remembering your preferences, enabling certain functions, and helping us understand how our website is used.

 

10.2 Types of Cookies We Use

 

Cookie Type	Purpose	Consent Required?
Essential	Required for core website functionality (e.g. shopping cart, checkout)	No — strictly necessary
Analytics	Help us understand how visitors use the site to improve user experience	Yes
Marketing	Used to display relevant advertisements and track campaign performance	Yes
Preference	Remember your settings and preferences for future visits	Yes

 

10.3 Managing Cookies

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. You may also manage your consent preferences through our cookie banner when you first visit our site.

 

We will only send you marketing emails or promotions if you have explicitly consented to receive them. You may withdraw your consent and unsubscribe at any time by:

 

•       Clicking the "unsubscribe" link in any marketing email we send

•       Contacting us directly at oanaprimeshop@outlook.com

 

Withdrawing your marketing consent will not affect the processing of your personal data for order fulfilment or other lawful purposes.

 

Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without parental consent, please contact us immediately at oanaprimeshop@outlook.com and we will take prompt steps to delete that information.

 

Our website may contain links to third-party websites, including our social media channels on Facebook, Instagram, Pinterest, YouTube, and TikTok. We are not responsible for the privacy practices of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

 

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated effective date. Where changes are significant, we will make reasonable efforts to notify you directly. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

 

15.1 Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

 

Email	oanaprimeshop@outlook.com
Phone	+44 7459 783540
Address	Cross Road Connaught Lodge, Weymouth, England, DT4 9QX, United Kingdom
Live Chat	Available on our website (chatbot & live support)
Response Time	Within 30 days of receipt

 

15.2 Right to Complain to the ICO

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

 

•       Website: www.ico.org.uk

•       Telephone: 0303 123 1113

•       Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF