This policy explains what personal data this website collects, why, and what you can ask us to do with it. It describes the site as it works today: a studio website with a contact form. When shop checkout, analytics or other tools are switched on, this page will be updated before they go live.
Who is responsible
The controller of your personal data is the company named in the identity block at the end of this page. You can contact us about privacy through the contact form on the home page or the email address shown in that block when available.
What we collect
Contact form: your name, your email address, the type of enquiry you select and the message you write. We ask for nothing else.
Preferences stored in your browser: your language choice and your cookie choices. These stay on your device and are not sent to us.
Server logs: the hosting server records technical data such as IP address, browser type and the time of a request, to keep the site secure and working.
Why we use it, and on what legal basis
To answer your enquiry and, where you ask for it, to prepare a proposal: steps taken at your request before a contract, or our legitimate interest in replying to messages sent to us.
To tell you when the product collection opens, only if you ask for that notice: your consent, which you can withdraw at any time.
To keep the site secure: our legitimate interest in protecting the service.
To keep records required by tax, accounting or consumer law once you buy something: legal obligation.
What we do not do
We do not sell personal data. We do not run advertising trackers. Analytics and marketing cookies are off unless you switch them on, and none are active on this version of the site.
Payment card data will be handled by the payment provider used at checkout. This website will never store full card numbers.
Who receives your data
Our hosting and email provider, a managed server in Germany (EU) that runs this website and delivers form messages to our mailbox on our instructions. Professional advisers or authorities where the law requires it. We will list any further processor here before it is used.
International transfers
If a provider processes data outside the UK or the European Economic Area, we will rely on an adequacy decision or standard contractual clauses and name the mechanism on this page.
How long we keep it
Enquiries that do not lead to work: up to 12 months after our last message, then deleted.
Client and order records: for the period required by tax and accounting law.
Collection-opening notices: until the notice is sent or you withdraw consent, whichever comes first.
Your rights
Under UK and EU data protection law you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Where processing relies on consent you can withdraw it at any time.
Residents of California and other US states with privacy laws have similar rights to know, delete and correct their data and to not be discriminated against for using them. We do not sell or share personal data for cross-context advertising.
You can also complain to your local data protection authority. We would appreciate the chance to resolve the issue with you first.
Changes
We will update this page when the way we handle data changes, and change the date below.
Company details
Oceaner Limited Agency LTD
Company number: [Company number]
Registered office: [Registered office address]
Tax ID: [VAT / Tax ID]
Email: info@oceanerlimited.com
Phone: [Phone]