Privacy Policy
Last updated · September 2026
This policy explains what we do with your personal information when you visit locean.co.uk or place an order. We have written it in plain English on purpose.
1. Who is responsible
The data controller is:
[[FULL REGISTERED ADDRESS]]
[[TOWN]], [[POSTCODE]], United Kingdom
Registered in England & Wales, company number [[00000000]]
VAT registration number [[GB000000000]] (delete this line if you are not VAT registered)
Email: loceanuk@gmail.com
If you have any question about your data, email us and we will answer within one working day.
2. What we collect, why, and on what legal basis
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, delivery address, email, phone | To take payment, deliver your order and handle returns | Performance of a contract | 6 years (tax records) |
| Order and payment records | Accounting and HMRC obligations | Legal obligation | 6 years from end of the tax year |
| Emails you send us | To answer you and keep a record of the issue | Legitimate interests — running a shop and evidencing what was agreed | 3 years |
| Email address for marketing | To send the discount code and occasional updates | Consent | Until you unsubscribe, then 1 year on a suppression list |
| Analytics data (pages viewed, device type) | To see which parts of the site work | Consent (via the cookie banner) | 14 months |
We do not collect special category data. We do not carry out profiling or automated decision-making that produces legal effects. We never sell your personal data, and we never share it for anyone else’s marketing.
3. Card payments
Payments are processed by Stripe Payments UK Ltd. Your card number is entered on Stripe’s systems and is never sent to us. We receive only the fact of payment, the amount, and the contact and delivery details you gave at checkout. Stripe acts as an independent controller for fraud prevention; see Stripe’s privacy policy.
4. Who else sees your data
- Our delivery carrier — name, address and, where you provide it, phone or email for delivery notifications.
- Our hosting and email providers — acting on our instructions under written contracts.
- Our accountant and HMRC — order records, as required by law.
Some of these providers process data outside the UK. Where that happens, transfers are protected by UK adequacy regulations or by the International Data Transfer Addendum to the EU Standard Contractual Clauses.
5. Cookies
| Type | What it does | Consent needed |
|---|---|---|
| Essential | Remembers your cookie choice and keeps the checkout working | No — strictly necessary |
| Analytics | Counts visits and shows which pages people read | Yes — off until you accept |
Analytics cookies do not load unless you press “Accept analytics”. Choosing “Essential only” leaves the site fully usable. To change your mind, clear this site’s storage in your browser and the banner will reappear. We do not use advertising or tracking cookies on this site.
6. Marketing emails
We only email you marketing if you ticked the box and gave us your address, or if you bought from us and we are telling you about the same kind of product — and even then every message carries a one-click unsubscribe. We will never pass your address to another company.
7. Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have data erased where we no longer need it;
- restrict or object to how we use it, including any use based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting what we did before you withdrew it.
Email loceanuk@gmail.com to exercise any of these. We respond within one month and there is no charge.
8. Security
The site is served over HTTPS. Access to order data is limited to the people who need it, protected by strong passwords and two-factor authentication. If a breach ever put your rights at risk, we would tell you and the ICO without undue delay.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
10. Changes
If we change this policy we will update the date at the top. Material changes affecting how we use your data will be notified by email where we hold your address.
← Return to L'OCÉAN