What happens to your data?

Who we are

Oohlala Studio, found at https://www.oohlala.studio (“Website”), is governed by the following privacy policy (“Privacy Policy”).

The purpose of this Privacy Policy is to inform you what personally identifiable information we may collect and how it may be used. This statement applies to your use of our Website (including contacting us or posting comments/reviews on our Website), when you purchase goods from our Website and when you engage us to provide you with branding or website services (collectively, “Services”).

We respect your privacy and are committed to protecting it. As such, we comply with the EU law retained version of the General Data Protection Regulation (2016/679), together with the UK Data Protection Act 2018. If any of these laws are replaced or superseded, we will also comply with those too.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (https://ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance by emailing us at hi@oohlala.studio.

This Privacy Policy was last updated in October 2021. We reserve the right to update this Privacy Policy from time to time so please check back regularly. If we make material changes to this Privacy Policy and we need your consent to those changes, we will contact you by email to do so.

What personal data we collect and why we collect it

Personal data, or personal information, is any information about an individual from which that person can be identified. It doesn’t include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you when you engage with us. Whenever we collect personal data about you, we must have a legal ground (lawful basis) to do so.

Services

Before being able to provide you with our Services, we will need to collect personal information from you. The information we need will depend on the nature of the Services, but may include the following: name, email address, phone number, home address, business name and job role. We’ll also need to use this information to contact you about any customer service issue raised. Our lawful basis for collecting this information is that it enables us to provide our Services to you and that you have consented.

Further to this, we may also use your name and email address to send you information about our Services or issue raised (including to provide you with updates on changes to this Privacy Policy or security information). Our lawful basis for using your name and email address in this way is to provide you with relevant information relating to the security of your online account, to ensure you have up-to-date information on how we handle your personal data, and to perform our contract with you (as we have outlined above).

Purchases on our Website

Our Website has an online shop and when you make a purchase we need to collect personal information from you, such as your name, email address, phone number and home address. Payments are either taken by third-party payment processor, currently Google Pay, Apple Pay, Stripe, or you can log into your PayPal account (depending on which browser you use). PayPal, for instance, uses the SSL “Secure Socket Layer” protocol, which means all information is encrypted by software and so neither we nor third parties can access this information during the processing of your payment. However you make a payment, we never have sight of your payment details.

These third-party payment processors’ privacy policies will apply to your purchase and so you should read this before making a payment.

If for any reason you are entitled to a refund, we won’t see your full payment details but we may need to confirm the last four digits of your payment card.

Since we will be posting your purchase to you, we will share your name and address to the delivery provider. Our lawful basis for the collection (and sharing) of this personal information is to fulfil our contract with you so that we can sell and deliver your purchase. You have also consented to the collection of this information.

Comments or reviews

When you leave comments or reviews on our Website we collect the data shown in the comments form, and also your IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment or review.

We collect information about visitors who comment on our Website that use our Akismet anti-spam service. The information we collect depends on how the user sets up Akismet for the Website, but typically includes the commenter’s IP address, user agent, referrer, and website URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

Media

If you upload images to our Website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to our Website can download and extract any location data from images on our Website.

Information you voluntarily submit to our Website

We may collect personal information from you such as your name or email address. For example, you may voluntarily submit information to our Website by leaving a comment or review, subscribing to a newsletter, or submitting a contact form. Our lawful basis is that it’s necessary for our legitimate interest to present relevant content, products and services to you (only where you have provided your consent that we do so) and that you have consented.

Automatically-collected information

We automatically collect certain information about you and the device with which you access our Website. For example, when you use our Website, we will log your IP address, operating system type, browser type, referring website, pages you viewed, and the dates/times when you accessed our Website. We may also collect information about actions you take when using our Website, such as links clicked.

We may use the information collected in the following ways:
To operate and maintain our Website;
To create your account, identify you as a user of our Website, and customise our Website for your account;
To send you promotional information, such as newsletters. Each email promotion will provide information on how to opt-out of future mailings;
To send you administrative communications, such as administrative emails, confirmation emails, technical notices, updates on policies, or security alerts;
To respond to your comments or inquiries;
To provide you with user support;
To track and measure advertising on our Website;
To protect, investigate, and deter against unauthorised or illegal activity.

Cookies

If you leave a comment on our Website you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to our Website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

You are free to withhold consent to cookies, but it means that we might not be able to provide the full website experience to you, including some elements of video advertising.

Our lawful basis for collection of this information is that it’s necessary for us to perform our contract with you, i.e. to give you access to the service our Website provides. We also need this information to study how you use our Website, in order to improve and develop the services we provide, and better inform our marketing strategies.

Embedded content from other websites

Articles on this Website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

What happens when we link to other websites

This Privacy Policy relates only to our Website. We might have links on/within our Website to other websites, and these websites will have their own terms and conditions and privacy policies. We have no control over how your data is collected, stored or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our Website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on our Website, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data
Third-party use of personal information

We may share your information with third parties when you explicitly authorise us to share your information.

Additionally, our Website may use third-party service providers to service various aspects of our Website. Each third-party service provider’s use of your personal information is dictated by their respective privacy policies over which we have no control.

Our Website currently uses the following third-party service providers:

Google Analytics

This service tracks Website usage and provides information such as referring websites and user actions on our Website. Google Analytics may capture your IP address, but no other personal information is captured by Google Analytics. Our lawful basis for collection of this information is that it is necessary for our legitimate interest to present relevant content, products and services to you.

Mailchimp

This service is used for delivery of email updates and newsletters. We store your name and email address for purposes of delivering such communications. Please refer to Mail Chimp’s privacy policy for further information. As we have advised above, our lawful basis is that you have consented to the collection of this information and it’s in our legitimate interest so we can provide you with relevant content, services and products.

At this time, your personal information is not shared with any other third-party applications. This list may be amended from time to time at our sole discretion.

Except when required by law, we will not sell, distribute, or reveal your email addresses or other personal information without your consent; however, we may disclose or transfer personal information collected through our Website to third parties who acquire all or a portion of our business, which may be the result of a merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or re-organisation proceeding brought by or against us.

Advertising

Facebook / Instagram / Meta Ads

We use Cookies and Pixels on our website – our website uses the Meta Pixel tracking. Information such as page views, clicks and sign up activity is collected through hashed data.

The Purpose of Ad Data Collection is so that we can create ads specific to you and use retargeting ads and custom audiences.

Data from the pixel is shared with Meta. You can modify your preferences through your platform settings.

Oohlala Studio complies with Meta advertising policies.

Oohlala Studio complies with GDPR policies.

Display Ads

We use third-party advertising companies to serve content and advertisements when you visit our Website, which may use cookies, as noted above.

Retargeting Ads

From time to time, our Website may engage in remarketing efforts with third-party companies, such as Google, Facebook, or Instagram, in order to market our Website. These companies use cookies to serve ads based on someone’s past visits to our Website.

Affiliate Program Participation

Our Website may engage in affiliate marketing, which is done by embedding tracking links into our Website. If you click on a link for an affiliate partnership, a cookie may be placed on your browser to track any sales for purposes of commissions.

Newsletters

On our Website, you may subscribe to the newsletter, which may be used for advertising purposes. The newsletters sent may contain tracking pixels. The pixel is embedded in emails and allows an analysis of the success of online marketing campaigns. Because of these tracking pixels, we may see if and when you open an email and which links within the email you click. Also, this allows our Website to adapt the content of future newsletters to the interests of the user. This behaviour will not be passed on to third parties.

Our lawful basis for collection of this information (under the advertising heading) is that it is in our legitimate interest so that we can present relevant content, product and services to you.

How I store your personal data

Your personal data is stored on our servers within the United Kingdom.

We may transfer your collected data to storage outside the European Economic Area (EEA) or the United Kingdom. It may be processed outside the EEA or the United Kingdom so you can receive our Website and deal with payment. If we do store or transfer data outside the EEA or the United Kingdom, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the United Kingdom.

This means that sometimes we may need to use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements.

Data security is of great importance to me, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected through our Webite. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We will still be responsible for protection of your personal data, even where it has been transferred outside the EEA or the United Kingdom.

We regularly review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged to.

Notice for California residents of privacy practices and rights

If you are a California resident, California law may provide you with additional rights regarding your personal data. 

Your rights

The California Consumer Privacy Act of 2020 (“CCPA”) gives you the following rights:

Right to know about the personal information we collect and share:

• The CCPA gives you the right to request that we disclose the specific pieces of personal information we have collected about you;
• Please see above for information on the data we collect on you, and how we process it; and
• We do not sell your personal information. However, we do disclose your personal data to limited third parties, as described above

Right of deletion:

• You have the right to request that we delete your personal information, subject to certain exceptions

If you wish to delete your personal data, please contact us at hi@oohlala.studio. Please note that we may require certain information from you in order to verify your identity before proceeding with your request.

Disclosures about your personal information

We collect the categories of personal information from you in connection with your use of our Website as described above.

Non-discrimination

We will not discriminate against you for exercising any of your CCPA rights.

Rights relating to your personal information

Opt-out

You may opt-out of future email communications by following the unsubscribe links in our emails. You may also notify us at hi@oohlala.studio to be removed from our mailing list.

Access

You may access the personal information we have about you by submitting a request us at hi@oohlala.studio

Amend

You may contact us at hi@oohlala.studio to amend or update your personal information.

Forget

In certain situations, you may request that we erase or forget your personal data. To do so, please submit a request at hi@oohlala.studio

Please note that we may need to retain certain information for record keeping purposes or to complete transactions, or when required by law.

Sensitive personal information

At no time should you submit sensitive personal information to our Website. If you elect to submit such information to us, it will be subject to this Privacy Policy.

Contact me

At any time, please contact us at hi@oohlala.studio with any questions related to this Privacy Policy.