Privacy Policy

Last updated: 29 April 2026

Who We Are

Online And Ltd, Company No. 13563891, VAT No. 391 0206 26. Contact: online@onlineand.direct

What Information We Collect

We collect information you provide when placing an order, creating an account, or contacting us: name, email, delivery address, phone number, and payment information. Payment card details are processed securely by our payment provider and not stored on our systems. We also collect browsing data automatically via cookies.

How We Use Your Information

We use your data to process and deliver orders, communicate about your order, provide support, send marketing (where consented), improve our services, and comply with legal obligations.

Sharing Your Information

We share data with delivery partners to fulfil your order and with suppliers to process purchases. We use Shopify as our e-commerce platform. We do not sell your personal information.

Cookies

We use essential cookies to operate our website and optional cookies for analytics and marketing. Manage preferences via the cookie banner on your first visit.

Your Rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your data. Email online@onlineand.direct to exercise any right. You have the right to complain to the ICO at ico.org.uk.

Data Retention

Order data is retained for 7 years in line with HMRC requirements. Account and marketing data is retained until deletion is requested or you unsubscribe.

Changes

We may update this policy. Significant changes will be notified by email or site notice.