OTLY 869 Customer Privacy Notice

This privacy notice tells you what to expect us to do with your personal information.

  • Contact details
  • What information we collect, use, and why
  • Lawful bases and data protection rights
  • Where we get personal information from
  • How long we keep information
  • Who we share information with
  • Sharing information outside the UK
  • How to complain

Contact Details

Post: 40 Nowell Avenue, Leeds, West Yorkshire, LS9 6HZ, United Kingdom

Email: paul@otly869.co.uk

What Information We Collect, Use, and Why

To Provide Services and Goods (including delivery)

  • Names and contact details
  • Addresses
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Website user information (including user journeys and cookie tracking)

To Comply With Legal Requirements

  • Name
  • Contact information
  • Financial transaction information

For Dealing With Queries, Complaints or Claims

  • Names and contact details
  • Address
  • Purchase or service history
  • Financial transaction information
  • Correspondence

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. Which lawful basis we rely on may affect your data protection rights.

Your Rights

  • Right of access: You can ask for copies of your personal information.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal information.
  • Right to restrict processing: You can ask us to limit how we use your data.
  • Right to object: You can object to processing of your personal data.
  • Right to data portability: You can ask us to transfer your data to another organisation.
  • Right to withdraw consent: When consent is used, you can withdraw it anytime.

If you make a request, we must respond within one month.

Our Lawful Bases for Processing Data

Contract

We collect or use personal information so we can enter into or carry out a contract with you.

Legal Obligation

We collect or use your information to comply with the law.

Legitimate Interests

We process personal information to respond to customer enquiries, complaints or claims. This helps us operate our business effectively and provide customer support.

Where We Get Personal Information From

  • Directly from you

How Long We Keep Information

We keep personal information only for as long as necessary to fulfil the purposes we collected it for.

  • Order and transaction records: kept for six years to comply with UK tax laws.
  • Customer enquiries and correspondence: kept for up to 12 months after resolution.

Who We Share Information With

Stripe Payments Europe Ltd (Ireland)

Used as our payment processor to securely process customer payment information.

Printful, Inc (United States)

Used as a print-on-demand fulfilment provider to print and ship orders.

Sharing Information Outside the UK

Where necessary, we transfer personal information outside the UK while complying with UK GDPR and ensuring appropriate safeguards are in place.

  • Stripe Payments Europe Ltd – Ireland (Adequacy Regulations / UK Data Bridge)
  • Printful, Inc – United States (EU Standard Contractual Clauses Addendum)

How to Complain

If you have concerns about how we use your personal data, please contact us using the details above. If you remain unhappy, you may complain to the Information Commissioner’s Office (ICO).

ICO Address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: www.ico.org.uk

Last Updated: 25 February 2026