Privacy Policy
Last updated: 16 October 2026
This policy explains what personal data we collect when you visit our website or buy from us, why we use it, who we share it with and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Oak & Kitchen is the controller of the personal data described in this policy. For any question about your data, email contact@homeappliances.co.uk.
2. What we collect
- Order details: your name, email address, delivery address and, if you give it, your phone number.
- Checkout details before payment: what you type in the checkout form is saved as you go, even if you don't finish paying, so we can help if something goes wrong and remind you about an unfinished order.
- Payment details: your card or wallet payment is handled by Stripe. We receive confirmation of the payment and limited details such as the card type and last four digits, never your full card number.
- Approximate location: at checkout we use your IP address to suggest your country and town so the form is quicker to fill in. We do not store this.
- Technical data: our hosting provider keeps short-term server logs (such as IP address, browser type and pages requested) to keep the site running and secure.
- Visit statistics: which steps of the shop a visit reached (product, basket, checkout) and the advert or link that brought you, kept on our own systems. You can switch this off with Essential Only.
- Your cookie choice and, if you accept them, data from advertising cookies. See our Cookie Policy.
- Messages you send us, for example about an order, a return or a warranty claim.
3. How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking payment, processing and delivering your order | Performance of our contract with you |
| Customer service, returns, refunds and warranty claims | Performance of our contract with you |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the website secure | Our legitimate interests |
| Saving checkout details before payment and reminding you about an unfinished order | Our legitimate interests (you can object at any time) |
| Visit statistics to improve the shop | Our legitimate interests (switch off with Essential Only) |
| Advertising cookies on our website | Your consent (only if you choose Accept All) |
| Telling our advertising partners that a purchase happened, so we can measure our adverts | Our legitimate interests (you can object at any time) |
When we confirm a purchase to an advertising partner, we send the order value, the items bought and a scrambled (hashed) version of your email address and phone number, not the readable versions. If you chose Accept All, we also send the advert click identifier, the partner's cookie identifier, your IP address and browser type, so the partner can match the purchase to the advert you saw. We do not sell your personal data, and we only send you marketing emails if you have asked to receive them.
4. Who we share it with
- Stripe, to process payments and prevent fraud.
- Vercel, which hosts our website.
- Supabase, which stores our order records.
- Resend, which sends our order emails.
- Delivery companies, who receive your name, address and phone number to deliver your order.
- TikTok and Meta, for advertising measurement as described above, when these tools are switched on.
- Professional advisers and public authorities, such as our accountants or HMRC, when the law requires it.
5. International transfers
Some of these providers process data outside the UK, including in the United States and the European Economic Area. Where they do, the transfer is protected by UK adequacy regulations or by approved contract terms such as the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- Order and payment records: 6 years after the end of the tax year of the order, as required for UK tax purposes.
- Checkouts that were never paid: up to 12 months.
- Visit statistics: up to 13 months.
- Customer service messages: up to 2 years after the matter is closed, or longer if a warranty claim is still open.
- Your cookie choice: until you change it or clear your browser data.
7. Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time. To use any of these rights, email contact@homeappliances.co.uk. We will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to sort it out first.
8. Security
Our website uses an encrypted connection (HTTPS), and payments are handled by Stripe, a certified PCI Level 1 payment provider. Access to order data is limited to the people who need it to serve you.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.