Privacy Policy
Last updated: 19 September 2026
This policy explains what happens to information when you visit this website, and what happens to information you send us.
Who is responsible
The data controller for this website is the business that operates the Opal&Oak brand. Contact details are on the contact page, which is also where to raise any question about this policy.
Cookies
The site itself does not set cookies. There is no advertising, no analytics and no profiling cookie.
Our hosting provider, Cloudflare, delivers the site and may set a security cookie as part of protecting it against automated traffic, and may keep security and diagnostic logs. That processing is carried out by Cloudflare as infrastructure rather than by us, and Cloudflare’s own privacy documentation describes how it handles it.
Information you send us
If you email one of the addresses on the contact page, we receive your email address, whatever you write, and any attachments you include.
We use that information to answer you and to keep a record of the correspondence. We do not sell it, we do not add you to a mailing list, and we do not use it for advertising.
We keep correspondence only for as long as it is useful — typically while a query is open, and for a reasonable period afterwards for warranty or accounting purposes. You can ask us to delete it sooner.
When we share information
We do not sell personal information. We share it only:
- with the retailer you bought through, when resolving a query about an order, and only what is needed to resolve it;
- with service providers who help us run the business, where strictly necessary; and
- where the law requires it.
Your rights
Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected, or to have it deleted. To make a request, use the address on the contact page. We will respond within the period required by applicable law.
Security
We keep the amount of information we hold to a minimum, which is the most effective protection available. Correspondence is held in email accounts protected by access controls and, where available, two-factor authentication.
Children
This website is not directed at children and we do not knowingly collect information from them.
Changes to this policy
If this policy changes, the “last updated” date at the top will change with it. Material changes will be described on this page.
Contact
Questions about this policy, or about information you have sent us, go to the address on the contact page.