Draft. This document is awaiting legal review and is not yet final.
Last updated: [DATE]
1. Who we are
[OUS LABEL LIMITED] (“OUS Label”, “we”, “us”) is the controller of the personal information we collect through ouslabel.com. Our registered office is [REGISTERED ADDRESS]. [ICO registration number: ZXXXXXXX.] If you have any questions about this policy or your information, email [hello@ouslabel.com].
2. The information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email address, phone number, billing and delivery addresses | You, when you order, create an account, sign up to the guest list or contact us |
| Order and transaction | Products bought, order history, payment status, gift card details and messages, returns | You and our payment provider |
| Payment | Card type and last four digits. We do not see or store your full card details. | Stripe |
| Account | Password (encrypted), saved for later items, preferences | You |
| Marketing | Whether you have joined the guest list, email opens and clicks | You and our email platform |
| Technical | IP address, browser, device, pages viewed, cookies | Your device (see Cookie Policy) |
| Communications | Emails and contact form messages | You |
We do not knowingly collect information from children under 13 and our products are sold to adults.
3. How we use your information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, including sharing your name, address and order details with our fulfilment and delivery partners | Performance of a contract |
| Taking payment and preventing fraud | Performance of a contract; legitimate interests (preventing fraud) |
| Managing returns, refunds, complaints and customer service | Performance of a contract; legal obligation (consumer law) |
| Running your account and saved for later list | Performance of a contract |
| Sending gift cards to the recipient you name | Legitimate interests (delivering a gift you have bought for them) |
| Sending marketing emails, including the 10% guest list offer | Consent, or for existing customers, the soft opt-in for similar products (you can opt out at any time) |
| Keeping accounting and tax records | Legal obligation |
| Improving our website and understanding how it is used | Consent for non-essential cookies; legitimate interests for essential security and performance |
| Protecting our legal rights | Legitimate interests |
4. Who we share it with
We do not sell your personal information. We share it only with trusted service providers who process it on our behalf and under contract:
| Provider | Purpose | Location |
|---|---|---|
| Printful | Producing, packing and shipping your order | UK, EU and USA |
| Delivery carriers (for example Royal Mail, DPD, DHL) | Delivering your order | UK and destination country |
| Stripe | Card and wallet payments, fraud prevention | UK, EU and USA |
| [HOSTING PROVIDER] | Website and database hosting | [LOCATION] |
| [EMAIL MARKETING PLATFORM] | Guest list and marketing emails | [LOCATION] |
| [EMAIL DELIVERY SERVICE] | Order and account emails | [LOCATION] |
| [ANALYTICS PROVIDER, IF USED] | Website analytics | [LOCATION] |
| Professional advisers | Accountants, legal advisers | UK |
We may also share information where required by law, to protect our rights, or with a buyer if our business is sold.
5. International transfers
Some of our providers are based outside the UK, including in the USA. Where we transfer personal information outside the UK, we make sure it is protected, for example by relying on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
| Information | Retention |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the financial year of the order (tax and accounting law) |
| Customer account | Until you delete your account, or 3 years after your last activity |
| Marketing preferences | Until you unsubscribe, then a suppression record so we do not contact you again |
| Customer service emails and contact forms | 2 years from the last contact |
| Gift card records | 6 years after the card is fully redeemed or cancelled |
7. Your rights
You have the right to access your information, have it corrected, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. You can unsubscribe from marketing using the link in any email. To exercise your rights, email [hello@ouslabel.com]. We will respond within one month.
8. Security
Our website uses encryption (HTTPS). Payments are handled by Stripe, which is PCI DSS compliant. Access to personal information is limited to people who need it.
9. Complaints
If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk, 0303 123 1113.
10. Changes
We may update this policy. The latest version will always be on this page with the date it was last updated.