Your privacy matters
Oh Mama is a trading name of Theloftwarehouses Ltd, company number 17459340. We are the controller of the personal information described here. Contact us at homeofohmama@gmail.com or write to 2 Heathfield Rise, Rishworth, Sowerby Bridge, HX6 4RS, United Kingdom.
Information we use
We receive the information you give us when ordering or contacting us: your name, email, telephone number where supplied, billing and delivery addresses, products ordered and correspondence. Our website also processes technical information such as IP addresses, browser details and security logs. Please avoid sending medical or other sensitive information in enquiries.
Why we use it
- To process orders, arrange delivery and handle returns: performance of our contract with you, or steps you request before ordering.
- To keep accounting records and meet legal duties: legal obligation.
- To answer enquiries, resolve complaints, protect the website and prevent fraud: our legitimate interests in running a secure business and providing customer support, balanced against your rights.
Information necessary to fulfil an order must be supplied before we can process it. We do not sell your personal information or use solely automated decisions that have legal or similarly significant effects on you.
Who receives information
Our shop runs on WordPress and WooCommerce and is hosted through Fasthosts. Website hosting and technical service providers process information needed to operate and secure the site. Contact Form 7 handles contact form submissions, and our business email uses Gmail (Google). Royal Mail receives delivery information needed to send your parcel. Our staff, professional advisers and authorities may receive information where necessary for their work or required by law.
PayPal is our planned payment provider and is not yet connected. Once enabled, PayPal will process payment information under its own privacy notice, linked at checkout. We will update this notice when payment processing is enabled.
How long we keep information
We retain information only as long as necessary for the purpose collected. Order and financial records are retained for applicable tax and accounting requirements and to handle contractual claims. Enquiries are retained while needed to answer you and resolve follow-up matters or disputes. Security logs are retained as needed to investigate incidents. We review records and remove or anonymise information no longer needed, allowing for legal obligations and unresolved claims. You can contact us for the retention criteria applying to your information.
Overseas processing
Some service providers, including Google, operate internationally and may process information outside the UK. Where a restricted transfer is made, UK data protection law requires an applicable adequacy arrangement or other lawful safeguard, such as approved contractual protections. Contact us for details of the providers and safeguards relevant to your information.
Cookies and similar technologies
The shop uses cookies needed for basket, checkout and session functions. WooCommerce basket cookies include woocommerce_cart_hash and woocommerce_items_in_cart, generally lasting for the browsing session, and wp_woocommerce_session_, generally lasting two days. WordPress also uses cookies for signed-in sessions. Your browser lets you clear or block cookies; blocking essential cookies may prevent the basket or checkout working.
Optional advertising or tracking services require an appropriate lawful basis and, where required, your consent. We will update this notice and provide appropriate choices before introducing such services. Links to Instagram and Facebook open external services whose privacy policies apply there.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email us to exercise your rights. We normally respond within one month and may need to verify your identity.
Concerns and complaints
Please email us if you have a concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
Last updated: 8 October 2026. We review this notice when our services or practices change.