Privacy policy
Who we are
This policy explains how Oath Food Co collects, uses and protects your personal data when you visit oathfood.co, place an order, subscribe or contact us.
SINTG Ltd, trading as Oath Food Co, is the data controller for your personal data. We are registered in England and Wales under company number 14805465, with our registered office at Flat 52 Verulam House, Hammersmith Grove, London, W6 0NW.
Contact us about your data
- Email: hello@oathfood.co
- WhatsApp: +44 7872 474286 (messages and calls)
- Post: the registered office address above
We are a small business and are not required to appoint a Data Protection Officer. Ryan Carter, our founder, is responsible for data protection.
What data we collect
Data you give us
- Identity and contact: name, email address, phone number, delivery and billing address
- Order details: products bought, order history, delivery instructions, gift notes and the recipient's name and address
- Account and subscription: login details, subscription frequency, skip, pause and cancellation choices
- Payment: handled securely by our payment providers. We never see or store your full card number, security codes, or other details.
- Communications: emails and WhatsApp messages, including photos or videos you send about an order
- Reviews: your name, rating, review text and any photos you post
- Marketing preferences: whether you've signed up to emails or offers
Data collected automatically
When you use our website, we and our partners collect device and usage data, such as IP address, browser type, pages viewed, items added to your basket, and how you arrived at our site. We do this using cookies and similar technologies (see "Cookies" below).
Data from others
- DPD: delivery status and proof of delivery, including photos
- Payment providers: confirmation of payment and fraud checks
- The person who sends you a gift: your name and delivery address
We don't collect special category data such as health information. If you tell us about allergies or dietary needs, we use this only to answer your question, and we ask you not to send medical details. None is stored.
How we use your data
UK data protection law requires a lawful basis for each use of your data. Ours are below.
| What we do | Lawful basis |
|---|---|
| Take payment, prepare, pack and deliver your order, and manage your subscription | Contract |
| Send order confirmations, dispatch and tracking updates with courier | Contract |
| Handle questions, complaints, claims and refunds | Contract; legitimate interests |
| Keep tax, accounting and food-traceability records | Legal obligation |
| Prevent fraud and keep our website secure | Legitimate interests |
| Send marketing emails and offers | Consent, or soft opt-in for existing customers (you can unsubscribe any time) |
| Show reviews on our website | Consent |
| Understand how the site is used and improve it (analytics) | Consent (cookies) |
| Show you Oath adverts on social media | Consent (cookies) |
| Contact you about a product safety issue or recall | Legal obligation; legitimate interests |
We don't sell your personal data, and we don't make decisions about you based solely on automated processing.
Who we share it with
We share only what each partner needs to do its job, and they must protect your data.
| Partner | Why |
|---|---|
| Shopify (including Shop Pay and the Shop app) | Runs our website, checkout, accounts and subscriptions |
| Payment providers: Shopify Payments and PayPal | Process payments and check for fraud |
| DPD | Delivers your order and sends tracking updates |
| Lidgates of London, our butchery partner | Make and pack your order (name, contact details, order contents and delivery details only) |
| Klaviyo | Sends our emails, notifications and newsletters, and measures how they perform |
| Judge.me | Collects and displays product reviews, with consent |
| WhatsApp (Meta) | Customer service messages and calls |
| Professional advisers and authorities | Our accountants and lawyers; HMRC, Trading Standards, Environmental Health or police where the law requires |
If we sell or restructure the business, your data may be transferred to the new owner, who must follow this policy.
International transfers
Some of these partners, such as Shopify and Klaviyo, store or access data outside the UK, including in the US. Where that happens, we rely on UK adequacy regulations (including the UK–US Data Bridge) or the UK International Data Transfer Agreement or Addendum, so your data stays protected.
Cookies
Cookies are small files stored on your device. We use:
- Essential cookies: needed for the basket, checkout, login and security. These are always on.
- Analytics cookies: help us understand how people use our site.
- Marketing cookies: let Klaviyo measure our emails and show you relevant adverts.
We only use analytics and marketing cookies if you accept them in our cookie banner. You can change your choice at any time using the Cookie preferences link in our footer, or by clearing cookies in your browser.
Marketing emails
We'll only send you marketing emails if you've signed up, or if you're a customer and didn't opt out at checkout. These cover new products, recipes and offers.
Every email has an unsubscribe link, or you can email hello@oathfood.co. Unsubscribing won't stop emails about your orders or subscription.
How long we keep your data
| Data | How long |
|---|---|
| Orders, invoices and payment records | 6 years after the end of the financial year (tax law) |
| Customer account | Until you close it, or 6 years after your last order |
| Customer service messages, claims and order photos | 2 years after the issue is closed (6 years if it becomes a formal dispute or legal claim) |
| Marketing list | Until you unsubscribe, or 3 years without opening or clicking an email |
| Reviews | While they're shown on our site, or until you ask us to remove them |
| Cookies | As set out in our cookie banner |
After that, we delete your data or make it anonymous.
Keeping your data safe
Our website and checkout use encryption (HTTPS). Payments are processed by PCI-compliant providers, and access to customer data is limited to people who need it. If a data breach puts your rights at risk, we'll tell you and the ICO as the law requires.
Children
Our website and products are for adults. You must be 18 or over to order, and we don't knowingly collect data from children.
Your rights
Under UK data protection law, you have the right to:
- Access a copy of the personal data we hold about you
- Correct data that is wrong or incomplete
- Delete your data, where we don't need to keep it by law
- Restrict how we use your data
- Object to our use of your data based on legitimate interests, and to direct marketing at any time
- Move your data to another provider (data portability)
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@oathfood.co. We'll reply within one month, and there's usually no charge. We may ask you to confirm your identity first.
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, and we'll tell you by email about any significant changes.
Last updated: 26.10.2026