OKA Direct Limited is the data controller of your personal data and is responsible for the collection, use, disclosure, retention and protection of your personal information in accordance with the General Data Protection Regulation.
OKA may transfer your personal information outside of the UK or the European Economic Area, to group companies and authorised third parties. Where we use third party service providers based outside of the UK or the European Economic Area, we may use specific contracts (or an equivalent mechanism) approved by the European Commission which give personal data the same protection it has in the UK and the European Economic Area.
Information we collect
We collect personal information that identifies you, when you place an order
- Email address
- Telephone number
- Payment informations
- Order details
We also receive personal data from third parties or other sources.
We process personal data for purchases, payments, customer support and fulfilment to enable us to perform our contract with you; where your contact details and transactional information are processed.
We use personal information we collect to: provide and improve our services, provide you with a personalized experience on our sites, contact you about your account, provide you customer service, provide you with personalized advertising and marketing, and detect, prevent, mitigate and investigate fraudulent or illegal activities. We process personal data relating to your interaction (transactions, site visits, app usage) with OKA to enable us to personalize your experience with OKA. This processing constitutes profiling under the Data Protection Act 2018 and we process your personal data in this way as it is in our legitimate interest to offer you a personalized experience on our sites and to provide you with personalized advertising and marketing.
We retain your personal information as long as it is necessary and relevant for our operations. In addition, we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. Where a legal requirement obliges the retention of personal data for a specific minimum period, we will retain data for at least that period. When we determine the maximum retention duration of any personal data we hold we do so with regard to our legitimate interests to retain data, our obligation under the Data Protection Act 2018, to minimise data we hold with what we do hold as personal data being kept proportionate; the nature, and sensitivity of the personal data and the potential risk of harm from unauthorised use or disclosure of your personal data.
We use and retain your personal information to provide, improve and personalize our service. We offer you site content that includes items and services that you may like and to keep track of your basket. We also customise, measure and improve our services, and hold views between web and mobile sites, deep linking and device linking. We also provide other services requested by you as described when we collect the information, such as participation in competitions. We use your browsing behaviour to detect, diagnose and resolve errors that occur on our website. In addition, we use this information to improve our website and the services we offer.
We use and retain your personal information to prevent, detect, mitigate and investigate fraudulent or illegal activities. This will involve the machine learning based statistical analysis which permits the identification of buying patterns. Where we have the right to do so, we shall use and retain your personal information to personalize communications, to contact you, either via email, telephone, social media, text messages or postal mail in order to inform you of account activity, delivery fulfilment and marketing related activity.
The Data Protection Act 2018 provides you with the following rights:
The right of access
Your right to obtain confirmation as to whether or not personal data are being processed, and, where that is the case, access to the personal data along with details regarding the nature of processing.
The right of rectification
Your right to obtain the rectification of inaccurate personal data.
The right of portability
Your right to receive the personal data provided to us, in a structured, commonly used and machine-readable format.
The right of erasure
Your right to erase your personal data.
The right to restrict processing
Your right for your data to be effectively ‘frozen’; stored and not further processed.
The right to object
You can submit your rights servicing request here.
If your request refers to your right not to be profiled, please contact customer services.
If you do not wish to receive marketing communications from us, you can unsubscribe from the link in the email you received, or by informing customer care. You can also contact the Mail Preference Service, the Corporate Telephone Preference Service, and the Telephone Preference Service if you wish to opt out of postal or phone marketing from any retailer.
Disclosure and security
Where legally compelling grounds exist, we may also disclose your personal information to governmental and law enforcement agencies, and otherwise in the defence of legal claims.
We endeavour protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We minimise the amount of personal information we disclose to what is directly relevant and necessary to accomplish the specified purpose.
We protect your information using measures that reduce the risks of loss, misuse, unauthorised access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
n doing so we may disclose your personal information to authorised third party service providers who help us to provide our services such as payment services to facilitate purchases; fulfilment providers to facilitate order management, packaging and delivery; marketing and advertising providers in order to personalize your experience.
If you have not objected, we will share your information with Epsilon International UK Ltd, Experian Ltd and Conexance Ltd, for the purpose of postal marketing.
We work with Epsilon Abacus (registered as Epsilon International UK Ltd), a company that manages the Abacus Alliance on behalf of UK retailers. The participating retailers are active in the clothing, collectables, food & wine, gardening, gadgets & entertainment, health & beauty, household goods, and home interiors categories. They share information on what their customers buy. Epsilon Abacus analyses this pooled information to understand consumer’s wider buying patterns. From this information, retailers can tailor their communications, sending people suitable offers that should be of interest to them, based on what they like to buy.
Your personal data is shared with Experian Ltd for the purposes of managing a service called Club Canvasse, a home shopping and direct retailer data co-operative of which Oka are members. By sharing information on what customers buy and pooling that with contributions from other members of the co-operative, the service allows Oka to better understand our customers and to communicate with you more effectively. Please note, your personal information is not shared with any of the other members of the co-operative, and only aggregated data on the number and value of purchases is provided to members e.g. we will receive a report which states how many customers who have bought from us in the last 0-12mths, and who have also bought from other members of the co-operative in the last 0-12mths, or the last 24mths, last 36mths etc. To understand more please click through to experian.co.uk/cip to understand more about their marketing services.
To find new customers for our business we are a member of a large co-operative of like-minded UK retail brands that pool and share transactional information. We work with a program called IBehavior, part of the Company Conexance that processes customer transactional data on behalf of each Member. This process highlights spending patterns and allows us to identify suitable prospects to receive an offer or introduction from us via the post. Thus, we send postal offers and information only to prospective customers that are likely to be interested in buying from us. Co-op Member brands operate in numerous categories, including apparel, home and garden, collectables, food and wine, gadgets and gifts, entertainment, health and beauty, travel and leisure.
If you are a US customer and have not objected, we will share your information with Oracle, for the purpose of third party postal marketing. Oracle pools this information with that from other retailers to understand consumer’s wider buying patterns. From this information, retailers can tailor their communications, sending people suitable offers that should be of interest to them, based on what they like to buy. If you would like to opt out of third party postal marketing, please email customer service or you can also register with the ANA Mail Preference Service.
You can contact the OKA Data Protection Officer here
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the data protection supervisory authority in the UK (www.ico.org.uk).