Privacy Policy

Information we collect

Depending on how you use the site, we may collect:

• contact details, such as your name, email address, billing address, delivery address, and phone number where needed for an order;
• order details, including products purchased, delivery method, order notes, gift messages, refunds, returns, and customer service history;
• account details, including your username, encrypted password, saved addresses, loyalty points, favourites, subscription/club preferences, and partnership or referral information where applicable;
• newsletter details, such as your email address, sign-up date, and marketing preferences;
• payment information needed to process your order, although full card details are handled by the payment provider selected at checkout and are not stored by My Oud Box;
• technical information, such as IP address, browser type, device information, pages visited, referral source, cookie identifiers, and basic security logs;
• messages you send to us by email, forms, social media, or order notes.

How we use your information

We use personal information to:

• process, pack, deliver, refund, and manage orders;
• create and manage customer accounts, subscriptions, loyalty points, favourites, and partnership accounts;
• respond to enquiries, support requests, return requests, and complaints;
• send service emails about orders, accounts, subscriptions, password resets, and important site updates;
• send marketing emails only where you have signed up or where the law allows us to contact existing customers about similar products;
• improve our website, products, stock planning, customer experience, and fraud prevention;
• meet legal, tax, accounting, and regulatory obligations.

Our lawful reasons for using data

We rely on different lawful bases under UK data protection law depending on what we are doing:

• Contract: to process orders, deliver products, manage accounts, and provide requested services.
• Legal obligation: to keep records required for tax, accounting, consumer rights, and regulatory purposes.
• Consent: for optional marketing sign-ups, non-essential cookies, and analytics cookies where consent is required.
• Legitimate interests: to run and improve our business, keep the site secure, prevent fraud, understand customer demand, and answer enquiries.

Cookies and similar technologies

Our website uses cookies and similar technologies to keep the shop working properly. These may include cookies for basket contents, checkout, account login, security, favourites, referral tracking, and remembering site preferences.

Some cookies are essential for the website to function. Optional cookies, such as analytics cookies, will be used only where enabled and where any required consent has been given.

Google Analytics

We do not currently use Google Analytics on the site, but we expect to add it in future to help us understand how visitors use the website and how we can improve it.

If Google Analytics is enabled, it may collect information such as pages viewed, links clicked, approximate location, device and browser details, referral source, and cookie identifiers. We would use this information in an aggregated way to review site performance and improve the shopping experience, not to directly identify individual customers.

Google may process analytics data on our behalf. You can read more about how Google uses information from sites and apps that use its services at policies.google.com/technologies/partner-sites.

Who we share information with

We only share personal information where needed to run the website, fulfil orders, or meet legal obligations. This may include:

• website, hosting, security, email, and ecommerce service providers;
• payment providers used to process checkout payments;
• delivery and courier services used to send orders;
• professional advisers, insurers, regulators, or authorities where required;
• analytics providers if analytics tools are enabled in future.

We do not sell your personal information.

How long we keep information

We keep personal information only for as long as needed for the reason it was collected, including legal, accounting, tax, fraud prevention, and customer service purposes.

• Order records are normally kept for up to six years after the end of the relevant tax year.
• Account information is kept while your account remains open, unless we need to keep some information for legal or business records.
• Marketing preferences are kept until you unsubscribe or ask us to remove them.
• Customer service messages are kept for as long as needed to manage your enquiry and maintain accurate records.

Your rights

Under UK data protection law, you may have the right to request access to your personal information, correction of inaccurate information, deletion, restriction, portability, or to object to certain uses. Where we rely on consent, you can withdraw that consent at any time.

To make a request, contact hello@myoudbox.com. We may need to verify your identity before responding.

You also have the right to complain to the Information Commissioner?s Office at ico.org.uk.

Security

We use reasonable technical and organisational measures to protect personal information. No website or email system is completely secure, so please take care when sharing information online and keep your account details private.

Changes to this policy

We may update this Privacy Policy as the website, services, or legal requirements change. The latest version will always be available on this page.