Privacy Policy

In this policy, “we”, “us” and “our” refer to Oxford Biodynamics PLC. For more information about us, see Section 14.

We are committed to safeguarding the privacy of our website visitors and customers.

This policy applies where we are acting as a data controller with respect to the personal data of such persons; in other words, where we determine the purposes and means of the processing of that personal data.

  1. Credit

  2. Cookies

    • We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website and services, we will ask you to consent to our use of cookies when you first visit our website please visit our cookies policy to read more
  3. The Personal Data That We Collect

    – In section 3 we have set out the general categories of personal data that we process and information about the source and specific categories of that data.

    1. We may process your website user account data (“account data“). The account data may include your account ID, name, email/shipping/billing addresses, default credit card numbers, account creation and modification dates, website settings and marketing preferences. Although some elements of the account data may be generated by our website.
    2. We may process information relating to transactions, including purchases of goods and/or services, that you enter into with us and/or through our website (“transaction data“). The transaction data may include your name, your contact details, your payment card details (or other payment details) and the transaction details. The source of the transaction data is you and our payment services provider.
    3. We may process information contained in or relating to any communication that you send to us or that we send to you (“communication data“). The communication data may include the communication content and metadata associated with the communication also may include your name, email address, telephone number. Our website will generate the metadata associated with communications made using the website contact forms.
    4. We may process data about your use of our website and services (“usage data“). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.
  4. Purposes Of Processing– In section 4, we have set out the purposes for which we may process personal data.

    • Operations – We may process your personal data for the purposes of operating our website, the processing and fulfilment of orders, providing our services, supplying our goods, generating invoices, bills and other payment-related documentation, and credit control.
    • Research And Analysis – We may process usage data and/or transaction data for the purposes of researching and analysing the use of our website and services, as well as researching and analysing other interactions with our business.
    • Record Keeping – We may process your personal/order/transaction data for the purposes of creating and maintaining our databases, back-up copies of our databases and our business records generally.
    • Security – We may process your personal data for the purposes of security and the prevention of fraud and other criminal activity.
    • Legal Claims – We may process your personal data where necessary for [the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
  5. Providing Your Personal Data to Others

    • Your personal data held in our website database stored on the servers of our hosting services providers.
    • Financial transactions relating to our website and services are handled by our payment gateway services provider we use, we are currently (Nov/2020) using ‘Stripe’ payment gateway provider. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers’ privacy policies and practices at https://stripe.com/gb/legal.
    • We do not store Financial transactions in our own database which means we need not meet the burdensome security standards required for storing customers’ credit card numbers. All financial transactions are stored in our service provider Stripe which means when you choose ‘Save payment information to my account for future purchases’ during check out. Your credit cards information is stored in our payment provider. Please read more from https://stripe.com/docs/payments/save-during-payment and https://stripe.com/gb/payments/payment-methods-guide#for-e-commerce-and-marketplaces
    • When you are opt-in to receive ‘Marketing Email from us, we will store your personal data you provided to us in the subscription form in our current external mailing distribution provider Mailchimp (NOV2020). Please see the marketing email subscription section below.
  6. Personal Data Disclose 

    • we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
  7. Security of your personal information

    • We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
    • Of course, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
  8. Retaining and deleting personal data– This Section 7 sets out our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data

    • Personal data we process for any purpose or purposes will be retained as follows. (Please see section 3 to the types of accounts definition)
      • Account data unless you contact us to erase your account.Note: The orders records and transaction data linked to your account you had made with us previously after account deletion will be retained for record use
      • Orders records and transaction data which will be always retained for record use.
      • Communication data which will be retained for record use.
      • Marketing email subscription data unless you opt-out (Please see marketing email subscription section below)
      • usage data which will mostly not be retained but may be retained for record use
    • Notwithstanding the other provisions of this Section 7, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
  9. Marketing Email Subscription

    • When you are opt-in to receive ‘marketing email’ from us, we will store your personal data you provided to us in the subscription form in our current external mailing distribution provider Mailchimp (NOV2020) in order to notify you of any Oxford Biodynamics products, general announcement or others depending on channels you choose to opt-in. These marketing emails will be sent out as a newsletter. If you decide to opt-out marketing newsletters, please click on “unsubscribe” on any marketing email you receive from us your personal data will be archived from our service provider Mailchimp. We will not use your personal data for sending marketing emails. Click here to learn more about Mailchimp policy
  10. Your rights

    • In this Section 9, we have listed the rights that you have under data protection law.
    • Your principal rights under data protection law are:
      • The Right to Rectification – you can ask us to rectify inaccurate personal data and to complete incomplete personal data;
      • The Right to Erasure – you can contact us to erase your personal data. Please read more from section 7.
      • the Right to Withdraw Consent – to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.
      • The Right To Opt-Out Marketing Email Subscription– to opt-out marketing newsletters, please click on “unsubscribe” on any marketing email you receive from us. Read more from section 8.
  11. Right of Data Subject

  12. Privacy Policy Amendments

    • We may update this policy from time to time by publishing a new version on our website.
    • We will not notify you of changes to our privacy policy. You should check this page occasionally to ensure you are happy with any changes to this policy.
  13. Our details

    • The full name of our company is Oxford BioDynamics Plc.
    • We are registered in England & Wales under registration number 6227084
    • Our registered address is First Floor, Building 7600 C, The Quorum, Alec Issigonis Way, Oxford Business Park North, Oxford OX4 2JZ
    • You can contact us by email to info@oxfordbiodynamics.com