Privacy Policy
This Privacy Policy explains how OMC Medical Ltd (“we”, “us”, “our”), trading as O&K MUBY, collects, uses, stores, and shares your personal information when you visit our website at www.oandkmuby.co.uk or purchase from us.
We are committed to protecting your privacy and handling your data in an open and transparent way, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
Data Controller: OMC Medical Ltd
Registered Address: Planet House, Heath Lane Business Park,
Horsham, West Sussex
RH12 5QE
What Personal Data We Collect
–> When you place an order
- Name and billing/shipping address
- Email address and telephone number
- Payment information (processed securely by our payment provider — we do not store card details)
- Order and purchase history
–> When you contact us
- Name and email address
- Content of your message or enquiry
–> When you browse our website
- IP address and browser information
- Pages visited and time spent on site
- Cookie data (see Section 9)
–> How We Use Your Personal Data
- To process and fulfil your orders
- To communicate with you about your order, delivery, or product queries
- To process warranty claims
- To comply with our legal and regulatory obligations
- To improve our website and customer experience (using aggregated, anonymised analytics data)
- To send you marketing communications — only if you have given explicit consent
–> Legal Basis for Processing
We process your personal data under the following legal bases (UK GDPR Article 6):
- Contract — to fulfil your purchase and provide post-sale support
- Legal obligation — to comply with tax, consumer law, and product safety requirements
- Legitimate interests — to improve our services and prevent fraud
- Consent — for marketing emails (which you may withdraw at any time)
How Long We Keep Your Data
Order records are retained for 7 years to comply with HMRC requirements. Contact and enquiry data is retained for 3 years or until resolved, whichever is sooner. Marketing consent records are retained until you withdraw consent.
Who We Share Your Data With
We do not sell your personal data. We share it only with trusted service providers who process it on our behalf:
- Shopify — e-commerce platform (data processing agreement in place)
- Payment processors (e.g., Stripe, PayPal) — for secure payment handling
- Delivery and logistics partners — for order fulfilment
- Email service providers — for transactional emails only
All third parties are contractually required to process your data in accordance with UK GDPR. No data is transferred outside the UK/EEA without appropriate safeguards.
Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Object to or restrict processing of your data
- Data portability — to receive your data in a commonly used format
- Withdraw consent for marketing at any time
To exercise any of these rights, email us at muby@oandkmuby.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL/TLS encryption and our e-commerce platform (Shopify) is PCI DSS compliant.
Cookies
Our website uses cookies — small files stored on your device — to:
- Maintain your shopping session and cart
- Remember your preferences
- Analyse traffic and improve the website (analytics cookies — only with your consent)
You can control cookie settings via our cookie consent banner when you first visit the site, and update your preferences at any time in the website footer. Strictly necessary cookies cannot be disabled as they are essential for the website to function.
Changes to This Policy
We may update this Privacy Policy from time to time. The “last updated” date at the top of this page will reflect any changes. We recommend reviewing this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
Contact Us About Privacy
For any privacy-related queries,
please contact: muby@oandkmuby.co.uk