Privacy Policy

Last Updated: July 2026

Oneskee Clothing Ltd ("Oneskee", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website at www.oneskee.com or make a purchase from us. It also explains your rights under applicable data protection law.

Oneskee Clothing Ltd (Company No. 15771968), registered at 4 Edison Village, Nottingham, England, NG7 2RF, is the Data Controller for the personal data we collect.

1. WHAT DATA WE COLLECT

We may collect and process the following personal data about you:

• Identity data: name
• Contact data: email address, telephone number, delivery address
• Transaction data: details of purchases you have made, order history
• Payment data: payment card details (processed securely via our payment provider — we do not store card details ourselves)
• Technical data: IP address, browser type, device information, pages visited, and how you interact with our website (collected via cookies and analytics tools)
• Marketing data: your preferences for receiving marketing from us and your communication preferences
• Communications data: messages you send us via email, contact forms, or social media

2. HOW WE COLLECT YOUR DATA

We collect data in the following ways:

• Directly from you when you create an account, place an order, contact us, or sign up to our mailing list
• Automatically when you visit our website, through cookies and analytics tools (see Section 8)
• From third parties such as payment processors and delivery carriers, to fulfil your order

3. LAWFUL BASIS FOR PROCESSING

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. We rely on the following:

• Contract: to process and fulfil your orders, manage returns and refunds, and communicate with you about your purchase
• Legal obligation: to comply with our legal and regulatory obligations, including tax and accounting requirements
• Legitimate interests: to improve our website, prevent fraud, and send marketing to existing customers about similar products and services — where this does not override your rights
• Consent: to send marketing emails to new subscribers who have opted in, and to use non-essential cookies. You may withdraw consent at any time.

4. HOW WE USE YOUR DATA

We use your personal data to:

• Process and fulfil your orders, including arranging delivery and handling returns
• Communicate with you about your order, including updates and after-sales support
• Send you marketing communications where you have opted in or where we have a legitimate interest to do so
• Improve and personalise your experience on our website
• Detect and prevent fraud and unauthorised transactions
• Comply with our legal and regulatory obligations

5. MARKETING COMMUNICATIONS

We operate an email newsletter to inform subscribers about products, promotions and news. You can subscribe via our website. We send marketing emails in compliance with the Privacy and Electronic Communications Regulations 2003 (PECR). If you are an existing customer, we may send you marketing about similar products and services under our legitimate interests, unless you have opted out.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. Opting out of marketing will not affect communications related to your orders.

6. DATA SHARING AND THIRD PARTIES

We do not sell or rent your personal data to third parties. We may share your data with trusted third-party service providers who process data on our behalf, including:

• Shopify Inc. — our e-commerce platform provider (data may be processed in the US)
• Payment processors (e.g. Stripe, PayPal) — to handle payment transactions securely
• Delivery and logistics carriers — to fulfil and track your orders
• Google Analytics — to analyse website traffic and usage (data may be processed in the US)
• Klaviyo — to manage and send our newsletter
• Swap — to manage the returns process

All third-party processors are required to process your data securely and only for the purposes we specify. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. INTERNATIONAL DATA TRANSFERS

Some of our third-party service providers are based outside the UK, including in the United States. When we transfer your personal data internationally, we ensure it is protected by appropriate safeguards, such as standard contractual clauses approved by the ICO, or by transferring only to countries with an adequacy decision. For more information on the safeguards in place, please contact us.

8. COOKIES

Our website uses cookies to improve your experience and to help us understand how visitors use our site. Cookies are small files stored on your device. We use:

• Essential cookies: necessary for the website to function (e.g. your shopping basket)
• Analytics cookies: to understand how visitors interact with our site (e.g. Google Analytics)
• Marketing cookies: to track referrals and measure the effectiveness of our advertising
• On your first visit, you will be asked to consent to non-essential cookies. You can change your cookie preferences at any time. For full details, please see our Cookie Policy.

9. DATA RETENTION

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Order and transaction data: retained for 7 years to comply with legal and tax obligations
• Customer account data: retained for as long as your account is active, plus a reasonable period thereafter
• Marketing data: retained until you unsubscribe or withdraw consent
• Website analytics data: retained for up to 26 months (Google Analytics default)
• General correspondence: retained for up to 3 years

10. YOUR RIGHTS

Under UK GDPR, you have the following rights regarding your personal data:

• Right to access: you can request a copy of the personal data we hold about you (a Subject Access Request). This is provided free of charge and we will respond within one month.
• Right to rectification: you can ask us to correct inaccurate or incomplete data
• Right to erasure: you can ask us to delete your personal data where there is no compelling reason for us to continue processing it
• Right to restrict processing: you can ask us to pause processing of your data in certain circumstances
• Right to data portability: you can ask us to transfer your data to another organisation or directly to you in a structured, machine-readable format
• Right to object: you can object to processing based on legitimate interests, or to direct marketing at any time
• Rights related to automated decision-making: you have the right not to be subject to decisions made solely by automated processing that have a significant effect on you

To exercise any of these rights, please contact us via the Contact Us page on our website or by writing to 4 Edison Village, Nottingham, England, NG7 2RF. We will respond within one month of receiving your request.

11. COMPLAINTS

If you have concerns about how we handle your personal data, please contact us in the first instance so we can try to resolve the matter. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

• Website: www.ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. EXTERNAL LINKS

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and recommend you review their privacy policies before providing any personal data.

13. SOCIAL MEDIA

We maintain accounts on Facebook, Instagram, TikTok, and YouTube. Any interactions you have with us through these platforms are subject to the respective platform's own privacy policy and terms of use. We will never ask for personal or sensitive information through social media — please contact us directly if you need to share sensitive details.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We recommend reviewing this page periodically.

15. CONTACT US

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Via our website: www.oneskee.com/pages/contact-us
• By post: Oneskee Clothing Ltd, 4 Edison Village, Nottingham, England, NG7 2RF