Privacy Policy

We collect and process your personal data under one or more of the following lawful bases:

• Consent:
  When you have given us clear permission — for example, by signing up for newsletters or marketing updates.
• Contractual Obligations:
  When processing your data is necessary to perform a contract or agreement with you — such as fulfilling an order or managing a competition entry.
• Legal Compliance:
  When we are required by law to process or retain certain information.
• Legitimate Interests:
  When processing is necessary for our legitimate business interests, such as improving our services, provided this does not override your rights or freedoms.

We collect personal data when you:

• Subscribe to newsletters, updates, or alerts
• Register for an event, competition, or offer
• Submit content, such as comments or reviews
• Apply for a role or collaborate with us
• Contact us by email or through forms on the Sites

The personal data we collect may include your name, email address, postal address, telephone number, and any other details you choose to share.

We also automatically collect certain technical information when you use our Sites, such as your IP address, device information, browser type, and browsing activity. This is done through cookies and similar tracking technologies. Please see our Cookie Policy.

The Sites may allow you to connect or log in via social networks such as Instagram, Facebook, Pinterest, or LinkedIn.

If you do so, you give us permission to access certain information from your public profile, such as your name, email address, and profile image, in accordance with that platform’s terms.

You can manage what information you share or disconnect your social media accounts at any time through the settings of the relevant platform.

We use your personal data to:

• Provide, personalise, and improve our Sites and services
• Send newsletters, updates, or marketing communications (when you have opted in)
• Process enquiries, orders, and event registrations
• Respond to messages or feedback
• Administer competitions and promotions
• Analyse website performance and user engagement
• Prevent fraud and ensure the security of our Sites
• Comply with legal obligations or enforce our Terms of Use

We will only use your data for the purposes for which it was collected unless we reasonably consider that we need to use it for another purpose compatible with the original one.

Your personal data may be processed or stored in the United Kingdom or other countries where we or our trusted service providers operate.We take steps to ensure that transfers outside the UK and EEA are protected by appropriate safeguards, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

We will only use your data for the purposes for which it was collected unless we reasonably consider that we need to use it for another purpose compatible with the original one.

We may share your data with:

• Service providers who support our business operations, such as hosting providers, email marketing services, or analytics platforms
• Affiliated companies within Oxford Digital Collective Limited for internal business purposes
• Legal authorities when required by law or to protect our rights and users

These third parties are required to handle your information securely and in accordance with this Privacy Policy.

We never sell your personal data to third parties for marketing purposes.

We retain your personal data only as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

You may request deletion of your data at any time (see Section 11 below).

We use appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, alteration, or disclosure.

Only authorised personnel and approved service providers have access to personal data, and they are required to treat it as confidential.

While we take reasonable precautions, no online service can be completely secure, and we cannot guarantee absolute security.

The Sites are not directed at children under the age of 13. We do not knowingly collect personal data from anyone under this age.

If you believe we have inadvertently collected information from a child, please contact us so that we can delete it promptly.

Children aged 13–17 should obtain a parent or guardian’s consent before providing any personal information.

Depending on your location, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of your data (“the right to be forgotten”)
• Object to or restrict processing of your data
• Withdraw consent at any time (where processing is based on consent)
• Request data portability

To exercise these rights, please contact us at hello@honeyandjoy.co.uk

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last revised” date.

If we make significant changes to how we use your data, we will notify you via email or a notice on the website.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Honey & Joy
Oxford Digital Collective Limited
19 Lynn Close
Oxford OX3 0JH
United Kingdom
hey@honeyandjoy.uk