Privacy policy
Privacy Policy
Last updated: 8 October 2026
This Privacy Policy explains how OOSC Clothing Limited ("OOSC", "we", "us" or "our") collects, uses and shares your personal information when you visit or make a purchase from oosc-clothing.com (the "Site"), our UK online store.
OOSC Clothing Limited is the controller of your personal information. We process it in line with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations ("PECR").
Contact us
If you have any questions about this policy or how we use your information, or you want to exercise your rights, please contact us:
- Email: hello@oosc-clothing.com
- Phone: +44 20 4538 0866
- Post: OOSC Clothing Limited, Whittington Hall, Whittington Road, Worcester WR5 2ZX, United Kingdom
Information we collect
Device and browsing information
What we collect: browser type and version, IP address, time zone, cookie identifiers, the pages and products you view, search terms, how you arrived at the Site (including any affiliate or advertising link you clicked), and how you interact with the Site.
Why: to load the Site correctly for you and keep it secure. With your consent, we also use it to understand how the Site is used, to measure and improve our advertising, and to credit affiliate partners who refer you to us.
How: collected automatically using cookies, log files, tags and pixels. See "Cookies" below.
Shared with: Shopify (our e-commerce platform). If you consent, also with Google, Meta (Facebook/Instagram), TikTok, Microsoft, Rakuten Advertising, Klaviyo, Attentive, Amplitude, Convert, Datadog and Gorgias.
Order information
What we collect: name, billing address, delivery address, email address, phone number, the items you order and any discount code you use. Payments are processed securely by our payment providers, including Shopify Payments and Klarna, and we never see or store your full card number.
Why: to process your order and payment, arrange delivery, send order confirmations and invoices, contact you about your order, and screen orders for fraud.
How: provided by you at checkout.
Shared with: Shopify and our payment providers, FulfilmentCrowd and their delivery partners (to pick, pack and deliver your order), and Rakuten Advertising (limited order details only, if you arrived through an affiliate link; see "Affiliate marketing" below).
Customer support information
What we collect: your name, contact details, order details and anything you tell us when you contact us by email, phone or live chat.
Why: to answer your query and resolve any issue with your order.
How: provided by you.
Shared with: Gorgias, our customer support and live chat platform, and our email and telephone service providers, only as needed to deliver those services.
Marketing emails and text messages
If you sign up to our marketing emails or text messages, we use your email address or mobile number to send you news, offers and new products. We use Klaviyo for our email sign-up forms and marketing emails, and Attentive for our text message sign-ups and marketing texts. If you have opted in to texts, we may also send you reminders about items left in your basket or checkout.
You can unsubscribe from emails at any time using the link in any email, and from texts by replying STOP. You can also contact us to unsubscribe. We do not share your opt-in details with anyone other than the providers that help us send these messages.
How we use your information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, handling returns and refunds | Performance of our contract with you |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping the Site secure | Legitimate interests |
| Answering customer support queries | Performance of contract / legitimate interests |
| Functional, analytics, advertising and affiliate tracking cookies | Consent |
| Marketing emails and text messages | Consent (or, for existing customers, legitimate interests as permitted by PECR, with an easy opt-out) |
Affiliate marketing
We work with Rakuten Advertising to run our affiliate programme. If you arrive at our Site via a link from one of our affiliate partners and you have consented to marketing cookies, Rakuten Advertising will place a cookie on your device to record that referral. If you then make a purchase, we share limited order details (order ID, order value, items purchased and any discount code used) with Rakuten Advertising so that the referring partner can be paid commission. We do not share your name, address or payment details with Rakuten Advertising for this purpose.
You can read how Rakuten Advertising uses personal information in its Services Privacy Policy.
Advertising and analytics
With your consent, we use the following services to understand how our Site is used and to show you relevant adverts on other websites and apps:
- Google Analytics: Google Privacy Policy. You can also opt out using the Google Analytics opt-out add-on.
- Meta (Facebook and Instagram): Meta Privacy Policy. You can manage your ad settings in your Facebook ad preferences.
- TikTok: TikTok Privacy Policy.
- Google Ads: to measure the performance of our Google adverts. See the Google Privacy Policy and manage your Google ad settings.
- Attentive: to show sign-up offers and measure our email and text marketing. See Attentive's privacy policy.
- Klaviyo: to show email sign-up forms and product recommendations, and to measure and personalise our marketing emails. See Klaviyo's privacy policy.
- Microsoft Clarity: to record how visitors interact with our pages (clicks, scrolling and mouse movement) and produce heatmaps, so we can improve the Site. Clarity masks sensitive information, and payment details are never recorded. See the Microsoft Privacy Statement.
- Amplitude: to understand how visitors use the Site.
- Convert: to test different versions of pages and improve the Site.
- Datadog: to monitor Site performance and errors.
Some of these services are loaded through Google Tag Manager, which only runs them once you have given the relevant consent.
You can withdraw your consent at any time through our cookie settings (see below).
Cookies
Cookies are small files placed on your device when you visit a website. Similar technologies, such as scripts, pixels and local storage, work in a similar way, and this section covers them too. We use strictly necessary cookies to run the store and checkout. These are always active because the Site cannot work without them.
When you first visit our Site, we ask for your consent before setting any non-essential cookies (functional, analytics and marketing cookies). If you decline, we do not set them. You can change or withdraw your consent at any time using the cookie settings link or icon on our Site. We use Consentmo to manage your cookie choices.
Strictly necessary
| Cookie | Provider | Purpose |
|---|---|---|
| _secure_session_id | Shopify | Navigation through the storefront |
| cart, cart_sig, cart_ts | Shopify | Shopping cart and checkout |
| checkout_token, secret | Shopify | Checkout |
| secure_customer_sig, storefront_digest | Shopify | Customer login |
| _shopify_u | Shopify | Updating customer account information |
| _tracking_consent | Shopify | Stores your cookie consent choice |
| _ab | Shopify | Store administration access |
| _shopify_essential | Shopify | Essential store functions and security |
| localization, cart_currency | Shopify | Remembers your country and currency |
| geoip-inline-* | OOSC (theme) | Shows the correct store region |
| kiwi-sizing-token | Kiwi Sizing | Provides our size charts and size guidance |
| _ks_scriptVersionChecked | Kiwi Sizing | Makes sure the latest version of our size guide loads |
| Consent cookie | Consentmo | Stores your cookie choices so we do not ask you again on every visit |
Functional (consent required)
| Cookie / script | Provider | Purpose |
|---|---|---|
| Gorgias chat widget | Gorgias | Provides our live chat and customer support widget |
If you decline functional cookies, our live chat will not load, but you can still contact us by email or phone.
Analytics (consent required)
| Cookie | Provider | Purpose |
|---|---|---|
| _shopify_y, _shopify_s, _y, _s | Shopify | Store analytics |
| _landing_page, _orig_referrer | Shopify | Records how you arrived at the Site |
| _ga, _ga_* | Google Analytics: distinguishes visitors and sessions | |
| AMP_* | Amplitude | Site usage analytics |
| _conv_s, _conv_v | Convert | A/B testing: records which version of a page you saw |
| _dd_s | Datadog | Site performance and error monitoring |
| _clck, _clsk, CLID, MUID | Microsoft Clarity | Session recording and heatmaps: identifies returning visitors and links pages viewed in a visit |
Marketing and advertising (consent required)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| rmStore / rmStore[ID] | Rakuten Advertising | Stores affiliate click information for conversion tracking | 30 days |
| lsclick_mid* | Rakuten Advertising | Records the date of the click and the referring affiliate | Up to 2 years |
| lsn_statp | Rakuten Advertising | Affiliate analytics | 1 year |
| _shopify_sa_p, _shopify_sa_t | Shopify | Marketing and referral analytics | Up to 30 minutes |
| _fbp | Meta | Ad delivery and measurement | 3 months |
| _ttp | TikTok | Ad delivery and measurement | Up to 13 months |
| _gcl_au | Google Ads | Ad conversion measurement | 3 months |
| __attentive_*, _attn_ | Attentive | Text message sign-up forms and marketing measurement | Up to 13 months |
| __kla_id | Klaviyo | Email sign-up forms, personalisation and email marketing measurement | 2 years |
Most of these cookies are persistent and expire between 30 minutes and two years after they are set. You can also block or delete cookies through your browser settings, although some parts of the Site may not work properly if you do.
Sharing your information
We do not sell your personal information. We share it only with the service providers named in this policy, so they can help us run our business, and only as far as they need it. These include:
- Shopify, which powers our online store. See Shopify's privacy policy.
- Payment providers, including Shopify Payments and Klarna, to process your payment.
- Gorgias, to provide customer support and live chat.
- Klaviyo and Attentive, to send marketing emails and texts you have signed up for.
- FulfilmentCrowd, our fulfilment partner, and the couriers they use, to store, pack and deliver your order.
- Rakuten Advertising, Google, Meta, TikTok, Microsoft, Amplitude, Convert and Datadog, as described above and only with your consent.
We may also share your information where required by law, for example in response to a court order or a lawful request from a public authority, or to protect our rights.
International transfers
Some of our service providers, including Shopify, process personal information outside the UK, for example in Canada and the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
How long we keep your information
- Order and transaction records: 6 years from the end of the financial year in which the order was placed, to meet our tax and accounting obligations.
- Customer support correspondence: up to 2 years after your query is resolved.
- Marketing data: until you unsubscribe or ask us to delete it.
- Cookies: for the durations shown in the tables above.
Automated decision-making
We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect on you.
Our platform provider, Shopify, uses limited automated fraud prevention that does not have a legal or similarly significant effect on you, for example:
- temporarily blocking IP addresses associated with repeated failed transactions, for a small number of hours; and
- temporarily blocking payment cards associated with blocked IP addresses, for a small number of days.
Your rights
Under UK data protection law, you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to our use of your information, including for direct marketing;
- receive your information in a portable format;
- withdraw your consent at any time, where we rely on consent (this does not affect anything we did before you withdrew it).
To exercise any of these rights, contact us at hello@oosc-clothing.com. We will respond within one month. We may need to verify your identity before acting on your request.
Children
Our Site is not intended for children under 16, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us personal information, please contact us and we will delete it.
Do Not Track
There is no consistent industry standard for responding to "Do Not Track" browser signals, so we do not change our practices when we detect one. You can control non-essential cookies using our cookie settings.
Changes to this policy
We may update this policy from time to time to reflect changes to our practices or for legal or regulatory reasons. The date at the top shows when it was last updated.
Complaints
If you have a concern about how we use your information, please contact us first and we will do our best to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.