This privacy notice is provided to demonstrate our transparency as required by the UK General Data Protection Regulation (UK GDPR). This will inform you about how and why your personal data is used and to ensure that you are aware of your rights under the data protection legislation.
We are oForest Ltd. and we are the Data Controller. Our address is Noble House, Mount Hill Lane, Gerrards Cross, England, SL9 8SU. We can be contacted at email@example.com.
The purpose for processing your data and our basis for doing so
We process your personal data so we can sell you our products through our website or retail partners, Etsy and Amazon and then ship those orders. We also process personal data to send you appropriate marketing material or to allow you to unlock discount codes on our website. We obtain your personal data directly from you or in the course of a transaction through one of our retail partners. The data we process will be your name, billing address and delivery address and email address. Your payments will be made through a secure payment provider portal and we will process the transaction ID.
When we process your personal data, we need to have a legal basis for doing so, in our case we process your data under Article 6.1.f UK GDPR – Legitimate Interest. Our legitimate interest is to maintain and expand our business.
If you fail to provide the information required, we will be unable to provide the agreed services to you.
For marketing purposes, we ask for your ‘opt in’ consent (Article 6.1.a UK GDPR) to send you direct marketing. You have the right to withdraw that consent at anytime and can do so by contacting us.
We do not undertake any automated decision making.
Recipients of your data
As a general principle, we will not transfer your personal data to other recipients without your permission. There are some exceptions to this:
- It is possible, that we might be obliged to disclose personal information in response to a court order or other lawful obligation.
- We will share limited personal data with our external accountants.
- We may share your data as part of a sale, transfer, or merge part of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.
Data processed by third parties on our behalf
We use the services of other organisations in the processing of your data. We use cloud-based email and document storage, web hosts and video conference platforms. We also utilise a marketing platform as well as a cloud based reviews platform. Approved courier services fulfil our delivery requirements.
Transferring your data outside of the UK
Some personal data is transferred outside of the UK to the USA via our marketing platform. This international transfer is conducted through standard contractual clauses with UK Addendum.
We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain any personal data required for financial audit purposes for 7 years to comply with HMRC requirements. Personal data processed for marketing purposes will be deleted 2 years after the last response from you.
The UK GDPR provides you with several rights in relation to the data which we process. The rights relevant to our activities are:
- You have the right to get access to and copies of your personal data.
- You can ask us to rectify any inaccurate information we may be holding.
- You can request we restrict our processing of your data.
- You can ask us to erase your personal data if it is no longer required for the purposes we collected it or have no legal obligation to retain it.
- You have the right to object to processing we undertake under a legitimate interest basis.
If you want to exercise any of these rights, please contact us using the above contact details.
You also have the right to lodge a complaint about our processing with a supervisory authority — the UK’s Information Commissioner’s Office.
The Information Commissioner’s Office
Wycliffe House, Water Lane,
Cheshire SK9 5AF.
Helpline number: 0303 123 1113