Privacy Policy

OYAAH Privacy Policy
Effective Date: [Insert Date]
At OYAAH, your privacy matters. This Privacy Policy explains how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website and services, you agree to the practices described below.

1. Who We Are

OYAAH Foods Ltd (“OYAAH”, “we”, “us”, or “our”) is the data controller responsible for your personal information.
Contact Details:
OYAAH Foods Ltd
[Registered Address]
Email: privacy@oyahh.com
Phone: [Insert Number]
If you have any questions about this policy or your rights, please contact us using the details above.

2. Information We Collect

We collect the following types of information:
a. Personal Information
Name, email address, phone number, delivery address, payment details
Order history, preferences, account login details (if you create an account)
b. Non-Personal Information
IP address, browser type, device information, and pages visited
Analytics data collected automatically via cookies and similar technologies

3. Lawful Basis for Processing

We process your personal data under the following lawful bases:
Contractual necessity: to process and deliver your orders.
Legitimate interests: to improve our services, prevent fraud, and ensure security.
Legal obligation: to comply with tax, accounting, and regulatory requirements.
Consent: for sending marketing communications and using non-essential cookies.

4. How We Use Your Information

We use your data to:
Process, fulfil, and deliver your orders.
Communicate with you regarding your orders, account, or customer support.
Improve our website, services, and offerings.
Send marketing emails and promotions (only if you’ve opted in).
Comply with legal obligations and prevent fraud.

5. Payment and Transaction Security

Payments are processed securely through trusted third-party payment providers.
We do not store your full card details.
All sensitive data is encrypted using industry-standard SSL technology.

6. Cookies and Tracking

We use cookies and similar technologies to improve your experience. These help us:
Remember login details and shopping cart items.
Analyse website performance.
Deliver personalised promotions (with consent).
You can manage cookie preferences through our cookie banner or your browser settings. Essential cookies are required for checkout functionality.

7. Sharing Your Information

We do not sell or trade your personal information. We only share it with:
Service providers: payment processors, delivery partners, analytics, marketing platforms, and IT providers (only for services we request).
Legal authorities: if required by law, legal process, or government request.
Business transfers: in case of merger, acquisition, or asset sale, under the same protections.

8. International Transfers

If we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as:
Adequacy decisions by the UK government, or
Standard Contractual Clauses approved under UK GDPR.

9. Data Retention

We keep your personal information only as long as necessary for the purposes outlined:
Order and transaction details: up to 6 years (for legal, tax, and accounting compliance).
Account information: until you request deletion or close your account.
Marketing data: until you withdraw consent.
Analytics data: retained in aggregated form, not linked to individuals.

10. Your Rights

Under UK GDPR, you have the right to:
Access your personal data.
Correct inaccuracies.
Delete your personal data (except where required by law).
Restrict processing of your data.
Object to processing, including direct marketing.
Data portability: request your data in a machine-readable format.
Withdraw consent at any time (for marketing and cookies).
Not be subject to automated decision-making that significantly affects you.
To exercise your rights, contact us at privacy@oyahh.com.

11. Security Measures

We take your privacy seriously and use:
SSL encryption for sensitive data.
Secure storage and monitoring systems.
Staff training on data protection and confidentiality.
However, no system is 100% secure. By using our website, you acknowledge that absolute security cannot be guaranteed.

12. Third-Party Links

Our website may include links to third-party sites. We are not responsible for their content or privacy practices. We recommend reviewing their privacy policies before use.

13. Children’s Privacy

Our services are not intended for children under 13. We do not knowingly collect data from children. If we become aware we have, we will delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our practices. Updates will be posted on this page with a revised effective date.