Shin to Winover £125,000 in instant cash prizes. Find promo packs in storeFind out more
Home › About › Privacy & cookies

Privacy & cookies

Last updated: 23 October 2026

1. Who we are

oseyo.co.uk is run by GKSS Limited, trading as Oseyo, a company registered in England and Wales (company number 09688205). Our registered office is Unit 4-5, 25 The Broadway, Wimbledon, London SW19 1PS. We are the "controller" of the personal information described here, and we are registered with the Information Commissioner's Office (ICO) under number ZA169616.

Questions or requests about your information: privacy@oseyo.co.uk, or write to us at the address above.

This policy covers this website only. You can't create an account, order, pay or sign up for a newsletter here.

2. What we collect, why, and our lawful basis

Messages you send through our forms

Our Contact Us, Business enquiry and Supplier enquiry forms ask for your name, email address, your message and, depending on the form, the type of enquiry or store, your company name and job role. You can also attach files (PDF, Word (.docx), JPG/JPEG, PNG or HEIC, up to 5 MB).

  • Why: to read and answer your message, deal with feedback or complaints about a store, and consider business or supplier proposals.
  • Lawful basis: our legitimate interests in answering people who contact us and running our business. For business and supplier enquiries, also taking steps before a possible contract.
  • How it's handled: each message is emailed to our team through our email provider (One.com) and a copy is kept in our website's database.
  • Please don't send sensitive information (for example about your health) unless it's needed. If you mention an allergy or health problem in a complaint, we use it only to deal with that complaint.

Spam protection on forms (Google reCAPTCHA)

Our forms use Google reCAPTCHA v3, which loads on every page, to tell people from bots. Google collects your IP address, device and browser details and how you use the page. Google's Privacy Policy and Terms apply.

  • Lawful basis: our legitimate interests in keeping the website and forms secure.

Website statistics (Google Analytics)

We use Google Analytics 4 (through the MonsterInsights plugin) to see which pages are popular, how people find us and roughly where they are (country or city). Google Analytics only sets its cookies if you click Accept in our cookie banner. Until you accept, or if you click Reject, it runs in a cookieless mode (Google Consent Mode): it sets no cookies and saves nothing on your device, and only tells Google that a page was viewed, with your IP address and device and browser details, which Google uses to estimate visitor numbers without recognising you. If you accept, its cookies also let it recognise repeat visits. We use this only to understand and improve our website. We don't use Google's advertising features, and Google Analytics' demographics and interests reports are switched off.

  • Lawful basis: for Google Analytics cookies, your consent. You can change your mind at any time with Cookie Settings at the bottom of every page; if you withdraw consent, its cookies are removed and it goes back to the cookieless mode. For the cookieless mode, our legitimate interests in knowing how many people use our website.

Our own visit counter (no cookies)

We also count page visits anonymously on our own website, without cookies. When a page opens, your browser tells our server which page it was and which website sent you there, if any (only the website's name, for example google.com), plus anything you typed into our site search. Our server works out whether you're on a phone, tablet or computer and then discards your browser details. We don't store your IP address, browser details or any ID, and nothing is saved on your device, so we can't tell who you are or link one visit to another. To block floods of fake visits, the server keeps a scrambled code made from your IP address for up to two minutes, then deletes it. We keep daily totals; hourly figures and site-search words are deleted after 13 months.

  • Lawful basis: our legitimate interests in understanding how our website is used.

Store finder and maps (Google Maps)

Our store pages and store finder use Google Maps. When the store finder opens, your browser asks if you want to share your location so we can show the nearest stores; you can say no and type a postcode or town instead. That location or search is sent to Google to show results; we don't store it. Google may also collect your IP address when the map loads.

If you type a postcode or place into the store finder search, it is sent to postcodes.io (a free UK postcode lookup) only to find your nearest stores; we don't store it.

  • Lawful basis: our legitimate interests in helping you find a store. Your location is only shared if you allow it in your browser.

Job applications (HiBob)

Our jobs pages link to our careers site at oseyo-c916b6e4132742.careers.hibob.com, run for us by HiBob. Applications are made there, not on this website, and HiBob's privacy notice for applicants also applies. Store opening hours and job listings shown on this website come from our own systems and contain no personal information.

Applications sent through job forms that used to be on this website are kept in our website database for the period in section 5.

Keeping the website secure

Like any website, our server records technical details of each visit (IP address, browser, pages requested and time). Our Wordfence firewall uses these to block attacks, and our activity log (WP Activity Log) records logins and changes made by staff, including failed login attempts and their IP addresses.

  • Lawful basis: our legitimate interests in keeping the website available and secure.

Emails and social media

If you email us or message us on social media, we use what you send to reply (legitimate interests). Our website only links to our Facebook, Instagram, TikTok, YouTube, LinkedIn and X pages; it doesn't embed their content. Once you follow a link, that company's privacy policy applies.

3. Cookies

Cookie Set by What it does How long
cookieyes-consent Us (CookieYes) Remembers your cookie choices 1 year
_GRECAPTCHA Google reCAPTCHA Spam and bot protection on forms Up to 6 months
_ga, _ga_CVCDK8R3KH Google Analytics Website statistics, only if you click Accept (see section 2) Up to 2 years
Google Maps cookies Google Showing maps on store pages Set by Google

Wordfence may set security cookies for logged-in staff only. Change your choices any time with Cookie Settings, or delete cookies in your browser.

Some choices are also saved only on your device (your browser's local storage), not in a cookie, and are never sent to us: the store you choose or your nearest store from the store finder (just the store's name, not your location), so the header can show its opening hours, and your shopping list. Clear them any time by clearing this site's data in your browser.

4. Who we share it with

We share personal information only when needed, with:

  • providers who work for us under contract: Hostinger (website hosting), One.com (email), Google (reCAPTCHA, Analytics, Maps), Defiant (Wordfence security) and HiBob (recruitment)
  • our store and head-office teams, so the right person can reply
  • advisers, insurers, police, courts or regulators, when the law requires it or to protect our rights.

We don't sell your information, and we don't make automated decisions about you that have legal or similar effects.

Outside the UK: Hostinger stores this website in the EU. Google and Defiant are based in the United States, and HiBob may process data in Israel, the EU or the United States. Where your information goes outside the UK, it is protected by a UK adequacy decision, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.

5. How long we keep it

Information How long
Form messages and attachments saved on the website 6 months, then deleted automatically
Copies of form messages in our email inboxes Until the enquiry is dealt with, then up to 2 years
Old job applications from the website's former job forms 6 months, then deleted automatically
Google Analytics data 14 months
Our own anonymous visit counts Daily totals are kept. Hourly figures and site-search words: 13 months, then deleted automatically
Activity log (logins and changes) 6 months
Firewall and login security records Up to 12 months
Job applications on HiBob 30 days after you withdraw your application or the job advert closes, then deleted automatically. If you tick the box to be contacted about future jobs, up to 12 months (you can withdraw this consent at any time)

6. Your rights

You have the right to ask for a copy of your information, have it corrected or deleted, restrict or object to how we use it, withdraw your consent to statistics cookies, and to have information you gave us transferred. Contact us using the details in section 1. We usually reply within one month and may need to check who you are. It's normally free.

If you're unhappy, please tell us first so we can try to put it right. You can also complain to the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113.

7. Children and changes

The website is for a general audience and isn't aimed at children under 13. Alcohol is only for adults aged 18 or over. We may update this policy; the date at the top shows the latest version.

error: