Privacy Policy

Privacy Policy (OakLea House LTD)

Last updated: 20.02.2026

1) Who we are

OuakLoa House LTD (“we”, “us”, “our”) operates this website and processes personal data related to our sales and order fulfillment.
Contact (privacy): sales@lichfieldlabels.co.uk

2) What this policy covers

This policy explains how we collect, use, store, share, and protect personal data, including Amazon Information we receive when fulfilling Amazon orders via Amazon’s Selling Partner API (SP-API).

3) Personal data we collect

We may process the following categories of data:

  • Order and shipping data (Amazon / SP-API): customer name, shipping address, order details needed for fulfillment and delivery.

  • Customization data: customer-provided information required to create personalized products (e.g., text for engraving/printing or other custom order inputs).

  • Customer support data: information you send us when contacting support (messages, email address, order references).

  • Website and security data: limited technical data such as IP address, device/browser details, and security events used to protect our systems.

4) How we collect data

  • From Amazon (SP-API): for orders we fulfill, we receive shipping-related data required to deliver the order.

  • From you directly: when you contact us or submit customization details (where applicable).

  • Automatically: limited technical data may be collected for security and website operation.

5) Why we use your data (purposes)

We process personal data to:

  • Fulfill orders and deliver shipments (including generating shipping labels and handing parcels to carriers).

  • Produce customized products using customer-provided customization details.

  • Provide customer support, handle complaints, returns, or delivery issues.

  • Maintain security, prevent fraud/abuse, and keep our systems reliable (monitoring and audit trails).

  • Meet legal obligations (e.g., accounting/tax/regulatory requirements, where applicable).

6) Legal bases (where GDPR applies)

We rely on one or more of the following:

  • Performance of a contract (processing needed to fulfill and deliver your order).

  • Legal obligation (where law requires retention/processing, e.g., tax/accounting).

  • Legitimate interests (security monitoring, preventing abuse, maintaining service reliability).

7) Amazon Information and permitted use

When we process Amazon customer information received via SP-API, we use it only as necessary to:

  • fulfill and deliver orders,

  • provide customer support related to the order,

  • meet legal obligations (such as tax or regulatory requirements where applicable).
    We do not use Amazon customer information for unrelated marketing or advertising purposes.

8) Who we share data with

We share personal data only as needed to operate our services, such as:

  • Shipping providers/carriers (to deliver your order).

  • Service providers supporting our infrastructure (e.g., hosting, databases, security monitoring), under access controls and confidentiality obligations.

  • Legal/professional advisors if required for compliance or incident handling.

We do not sell personal data.

9) Data retention

  • Amazon customer PII (shipping details): retained only as long as necessary for fulfillment/support and then deleted or anonymized, typically no longer than 30 days after delivery, unless a longer period is required by law.

  • Customization/order details: retained only as needed to produce the product, resolve disputes, provide support, and meet legal obligations.

  • Security logs: retained for security and audit purposes (e.g., to investigate suspicious activity). We retain logs for up to 12 months.

10) Security measures

We use technical and organizational safeguards to protect data, including:

  • encryption in transit and encryption at rest where applicable,

  • role-based access controls and least-privilege access,

  • monitoring/alerting for suspicious activity,

  • secure credential and key management,

  • procedures for incident response and recovery.

11) Your rights (where applicable)

Depending on your location and applicable law, you may have rights to:

  • access your data, correct it, delete it, or restrict processing,

  • object to processing and request data portability,

  • file a complaint with your data protection authority (if applicable).
    To exercise rights, contact: greenym29@icloud.com

12) International processing

We may use service providers that process data in different countries/regions. Where required, we apply appropriate safeguards to protect personal data.

13) Changes to this policy

We may update this policy from time to time. The latest version will be posted on this website with an updated “Last updated” date.

14) Contact

For privacy questions or requests, email: sales@lichfieldlabels.co.uk