Data Protection Policy

---

Effective Date: 01/05/2024

Unity Oils Ltd ("we," "our," "us") is committed to protecting the privacy and security of your personal data. This Data Protection Policy outlines how we collect, use, store, and protect personal information in compliance with the General Data Protection Regulation (GDPR) and other relevant UK data protection laws.

This policy applies to all personal data processed by Unity Oils Ltd, including data related to customers, suppliers, employees, and any other third parties. We take our responsibilities under data protection laws seriously and are committed to safeguarding personal information.

We may collect and process the following types of personal data:

• Identity Data: Name, title, date of birth, and gender.
• Contact Data: Billing address, delivery address, email address, and phone numbers.
• Financial Data: Bank account details and payment card information.
• Transaction Data: Details about payments to and from you, and other details of products and services you have purchased from us.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

We use personal data for the following purposes:

• To Process Orders: To manage and deliver your orders, process payments, and communicate with you about your purchases.
• Customer Service: To provide you with customer support and respond to your inquiries.
• Marketing: To send you promotional materials and updates if you have opted in to receive them. You can opt out at any time.
• Compliance: To comply with legal obligations, including tax, accounting, and anti-fraud regulations.

We will only process your personal data when we have a lawful basis to do so. This includes:

• Consent: Where you have provided consent for us to process your personal data for specific purposes.
• Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where we are required to process your personal data to comply with legal obligations.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided that these interests do not override your rights and freedoms.

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, loss, or disclosure. These measures include:

• Encryption: We use encryption to protect sensitive data during transmission and storage.
• Access Control: Access to personal data is restricted to authorized personnel only.
• Regular Audits: We conduct regular audits and assessments of our data protection practices.

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Retention Period: We determine the appropriate retention period for personal data based on the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process your data.

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to your personal data and obtain a copy of the data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
• Right to Erasure: You have the right to request the deletion of your personal data where there is no lawful basis for us to continue processing it.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where you have provided consent for the processing of your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at accounts@unityoils.co.uk or call 02038332783.

We do not sell or rent your personal data to third parties. However, we may share your data with trusted third parties who provide services on our behalf, including:

• Payment Processors: To facilitate transactions.
• Delivery Partners: To deliver your orders.
• IT and System Administration Services: To maintain our website and IT systems.
• Legal and Regulatory Authorities: Where required by law.

Your personal data may be transferred to, and processed in, countries outside of the UK and the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place to protect your data.

Our website uses cookies to improve user experience and analyze website traffic. For more information on how we use cookies, please refer to our Cookies Policy.

We may update this Data Protection Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with an updated "Effective Date."

If you have any questions or concerns about this Data Protection Policy or our data practices, please contact us at:

Unity Oils Ltd
71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Email: accounts@unityoils.co.uk
Phone: 02038332783