Privacy policy
Last updated: 13 July 2026
Who we are
Oxon Deer Limited (company number 11460082) is the data controller for this website. Contact: oxondeer@outlook.com.
What we collect and why
When you create an account we hold your name, email address and password (stored by Google Firebase; we never see your password). When you order we also hold your phone number, delivery address and order history, which we use to fulfil the order, take payment and meet our legal record-keeping obligations. Your basket is stored in your own browser until you check out.
Payments
Card payments are processed by Square. Your card details are entered directly with Square and never reach our servers; we hold only a payment reference. Square's own privacy policy applies to the card data it processes.
Who we share data with
We use Google Firebase (accounts and order storage), Square (payments), Brevo (order emails) and Vercel (website hosting) to run the shop. Each processes data on our behalf. We do not sell your data or share it for marketing.
How long we keep it
Order records are kept for six years to meet accounting and tax requirements. Account details are kept until you ask us to delete your account.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, and object to or restrict our use of it. Email oxondeer@outlook.com and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).