This Privacy Policy describes how Curious Oaf (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit or make a purchase from curiousoaf.co.uk (the “Site”).

Under the UK General Data Protection Regulation (UK GDPR), we are the data controller responsible for your personal data.

We are committed to protecting your privacy and handling your personal data in accordance with applicable UK data protection laws, including the UK GDPR. Please read the following carefully to understand what happens to personal data that you choose to provide to us, or that we collect from you when you visit this site.

Information we collect

We may collect and process the following personal information:

Information you provide

You may provide us with personal information when you:

• Place an order
• Create a customer account
• Sign up to our newsletter
• Contact us through forms or email
• Submit enquiries through the website

This information may include:

• Name
• Billing and shipping address
• Email address
• Phone number
• Order details

Information collected automatically (Device information)

When you visit the Site, certain information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Time zone
• Cookie information
• Pages viewed and interactions with the Site
• Referral source and search terms

This information helps us improve the website experience, analyse traffic, maintain security, and optimise site performance.

Legal basis for processing

We only process your personal data where we have a lawful basis to do so under UK GDPR. These include the following:

• Contractual necessity – when processing is required to fulfil your order (e.g. shipping and payments)
• Consent – when you have agreed to receive marketing emails or newsletters
• Legitimate interests – for example, to improve our website, prevent fraud, and ensure the security of our services

How we use your information

We use your information to:

• Process and fulfil orders
• Arrange shipping and provide order confirmations
• Communicate with you about your order or enquiries
• Provide customer support
• Send marketing emails or newsletters if you have opted in
• Improve and maintain the website
• Detect and prevent fraud or misuse

Disclosure of your information

We use a trusted third party website and hosting provider (Payhip) to facilitate the running and management of this website. Payhip meets high data protection and security standards and is bound by contract to keep any information they process on our behalf confidential. Any data that may be collected through this website that Payhip processes is kept secure and only processed in the manner we instruct them to. Payhip cannot access, provide, rectify, or delete any data that they store on our behalf without permission.

We will use all reasonable efforts to ensure that your personal data is not disclosed to regional/national institutions and authorities, unless required by law or other regulations.

While we take steps to protect your personal data, no method of transmission over the internet is completely secure. Once we receive your information, we use appropriate security measures to protect it from unauthorised access.

Third-party services

We use trusted third-party services to operate this website and process orders, including:

• Payhip (store platform and hosting)
• PayPal and/or Stripe (payment processing)
• MailerLite (email marketing)
• shipping providers (such as Royal Mail or other couriers)

These services may process your personal information in accordance with their own privacy policies, which you can access on their websites.

Some of our third-party service providers may process your data outside the UK. Where this occurs, appropriate safeguards are in place.

We do not sell, rent, or trade your personal information to third parties.

Newsletter and marketing emails

If you subscribe to our newsletter, your email address may be stored and processed through MailerLite.

Marketing emails will only be sent if you have chosen to subscribe. You can unsubscribe at any time using the unsubscribe link included in emails.

We retain your email address for marketing purposes until you unsubscribe or opt out of marketing communications.

Cookies

When you visit our website, cookies may be used to help the site function properly and improve your browsing experience. Cookies are small amounts of information stored on your device.

We use cookies that are necessary for the operation of the website, such as enabling shopping functionality and maintaining your session while you browse or make a purchase.

You can usually control or disable cookies through your browser settings. However, please note that disabling cookies may affect the functionality of some parts of the website.

Information about how to manage or delete cookies can be found at www.aboutcookies.org.

Data Retention

When you place an order through the Site, we will retain your personal information for our records in order to fulfil orders, comply with legal obligations, and resolve disputes, unless and until you ask us to erase this information. For more information on your right of erasure, please see the “Your Rights” section below.

Your rights

Under UK data protection law (UK GDPR), you have rights regarding how your personal data is processed. You may exercise these rights by contacting us using the details provided below.

Your rights may include:

• The right to access your personal data
• The right to request correction of inaccurate or incomplete data
• The right to request deletion of your personal data
• The right to withdraw consent for marketing communications at any time
• The right to object to certain types of data processing

To make a request regarding your personal data, please contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how your data has been handled.

Third-party links

This website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies before providing personal information.

Changes to this privacy policy

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page.

Contact

If you have any questions about this privacy policy or how your data is handled, please contact us at hello@curiousoaf.co.uk

Last updated: 29 May 2026