Effective date: 28.11.2025

This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Our website address is:
https://ohmydoh.uk

Ohmydoh is operated by Doughnuts Ltd, a company registered in the United Kingdom.

If you have any questions about this policy or your data, you can contact us at:
info@ohmydoh.uk

2. What Personal Data We Collect

When you place an order, create an account, contact us, or opt into marketing, we may collect:

  • Full name
  • Billing and delivery address
  • Email address
  • Phone number
  • Order details and purchase history
  • IP address and basic technical data (for security and fraud prevention)

3. Guest Checkout

Customers may place orders as a guest without creating an account.

For guest checkout, we collect only the information required to:

  • Process payment
  • Fulfil your order
  • Arrange delivery or collection
  • Contact you regarding your purchase if needed

4. How We Use Your Data

We collect and use your data only for the following purposes:

  • Processing and fulfilling orders
  • Delivering products
  • Customer service and communication
  • Legal and accounting compliance
  • Fraud prevention and system security
  • Sending marketing emails (only where consent is given)

We do not sell, rent, or trade your personal data to third parties.

5. Payments & Saved Cards

All payments on our website are processed securely via Stripe.

  • We do not store full card details on our website or servers.
  • If you choose to save your card details for future use, this information is stored securely by Stripe, not by Doughnuts Ltd or Ohmydoh.
  • Stripe processes payment data in accordance with PCI-DSS security standards and UK GDPR.

You can manage or remove saved payment methods at any time through your Stripe account or by contacting us.

6. Marketing Emails & Communications

If you choose to opt in, we may send you:

  • Product updates
  • Promotions and special offers
  • Event announcements

You can unsubscribe at any time using the link in any email or by contacting us directly.

Once you opt out, your email address is removed from marketing systems and retained only where legally required for transactional records.

7. Who We Share Your Data With

We may share limited data only with trusted third parties where necessary, including:

  • Delivery and courier companies
  • Payment processor (Stripe)
  • Accounting and tax advisers
  • Website hosting and security providers

All third parties are required to process your data in compliance with UK GDPR.

8. Data Retention – How Long We Keep Your Data

We retain personal data only for as long as legally required:

  • Order and invoice records: 6 years (UK HMRC legal requirement)
  • Customer contact data (for fulfilment): Stored for active business use, then archived
  • Marketing email data: Until you unsubscribe
  • Guest checkout data: Retained only for legal, accounting, and fulfilment purposes
  • Saved payment methods: Stored securely by Stripe only, not by Ohmydoh

Once data is no longer required, it is securely deleted or anonymised.

9. Cookies

We use cookies only to:

  • Enable website and checkout functionality
  • Maintain shopping cart sessions
  • Support site security and performance

We do not use intrusive tracking or advertising cookies without consent.

10. Where Your Data Is Stored

  • Website and order data is stored on secure servers within the UK and/or European Union.
  • Payment data is processed and stored securely by Stripe.
  • We use appropriate technical and organisational measures to protect your personal information.

11. Your Rights Under UK GDPR

You have the right to:

  • Request access to the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where legally permitted)
  • Withdraw consent for marketing
  • Request data portability

Requests can be made by contacting us at:
info@ohmydoh.uk

12. Changes to This Polic

This Privacy Policy may be updated from time to time to reflect legal or operational changes. The most recent version will always appear on our website.