Privacy policy
Last updated: 21 April 2026
This Privacy Policy describes how Omnitub Ltd ("Omnitub", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use, or make a purchase on www.omnitub.co.uk, interact with any related products or services (the "Services"), or otherwise communicate with us. Omnitub Ltd is the data controller responsible for your personal information.
Our Services are powered by Shopify. Shopify also collects and processes personal information in connection with your use of the Services, both on our behalf and, for certain activities, as an independent controller. Where our Services rely on third-party payment processors, those processors also process personal information as independent controllers for their own regulatory and legal obligations. This is explained in more detail below.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
Personal information we collect
When we use the term "personal information", we mean information that identifies or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer be linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information:
- Contact details including your name, billing address, shipping address, phone number, and email address.
- Payment and transaction information including payment card details, payment confirmation, transaction details, form of payment, and order history. Full payment card numbers are handled by our payment processors (see below) and are not stored by Omnitub.
- Account information including your username, password, preferences, and settings (if you create an account with us).
- Transaction information including the items you view, add to your cart or wishlist, purchase, return, exchange, or cancel.
- Communications including the contents of messages you send us (for example, customer support enquiries, review submissions, or WhatsApp messages).
- Device information including your IP address, browser type, operating system, and other unique identifiers.
- Usage information including how you interact with and navigate the Services, and inferences we may draw from that activity.
How we collect personal information
We collect personal information from the following sources:
- Directly from you when you create an account, place an order, communicate with us, or otherwise provide us with information.
- Automatically through the Services, including via cookies and similar technologies on your device.
- From our service providers, including Shopify, our payment processors, and third parties we engage to support the Services.
- From partners or other third parties, including advertising and analytics partners.
How we use your personal information and our legal bases
We process your personal information for the purposes set out below. Where you are based in the UK or European Economic Area (EEA), we rely on one or more of the following legal bases under UK GDPR and the EU GDPR: performance of a contract, legitimate interests, consent, and compliance with legal obligations.
- To provide, tailor, and improve the Services. We process your personal information to take and fulfil your order, process payments, arrange shipping, manage returns and exchanges, maintain your account, remember your preferences, and enable reviews and recommendations. Legal basis: performance of a contract; legitimate interests in running and improving our business.
- Marketing and advertising. We may send you marketing communications by email and, where you have consented, show you online advertisements for our products on third-party platforms. You can unsubscribe from marketing emails at any time using the link in any email we send you. Legal basis: consent, or legitimate interests where permitted by law.
- Security and fraud prevention. We process personal information to authenticate your account, protect the Services, and detect or investigate fraudulent, unlawful, or malicious activity. Legal basis: legitimate interests in protecting our business and customers; compliance with legal obligations.
- Customer service and communication. We process your information to respond to enquiries, provide support, and maintain our relationship with you. Legal basis: performance of a contract; legitimate interests.
- Legal and regulatory compliance. We process your information to comply with applicable law, respond to lawful requests from public authorities, enforce our terms, and establish, exercise, or defend legal claims. Legal basis: compliance with legal obligations; legitimate interests.
How we disclose personal information
We may disclose your personal information to third parties in the following circumstances:
- To Shopify, which hosts our store and provides the underlying commerce, analytics, and payment infrastructure.
- To our payment processors. Payments made on our Services are processed by one of the following providers, any of whom Shopify may route your transaction to: Stripe Payments Europe Ltd, PayPal UK Ltd, or Adyen N.V. Each acts as an independent data controller in respect of payment processing and the associated legal and regulatory obligations, including know-your-customer (KYC), anti-money-laundering (AML), sanctions screening, and fraud prevention. Their own privacy notices apply to that processing:
- To vendors and service providers who perform services on our behalf, such as shipping and fulfilment partners (including Pallet-Track, DHL, and FedEx), IT providers, cloud hosting, email delivery, analytics, and customer support tools.
- To business and marketing partners to provide advertising and marketing services, including personalised advertising. Our business and marketing partners use your information in accordance with their own privacy notices. Depending on where you live, you may have the right to opt out of personalised advertising — see "Your rights and choices" below.
- Where you direct, request, or consent to disclosure, for example when you ask us to ship an item to you or use a social login or third-party widget.
- Within our corporate group, including with any affiliates.
- In connection with a business transaction such as a merger, acquisition, reorganisation, or insolvency, and to comply with legal obligations or protect our legal rights.
Shopify and the enhanced features
Our Services are hosted and powered by Shopify. Information you submit to the Services is transmitted to and shared with Shopify, including Shopify entities located outside the UK (including in Ireland, Canada, and the United States), to deliver and improve the Services.
In addition, we use certain Shopify enhanced features (for example, fraud prevention, personalised advertising, and cross-merchant analytics) that rely on data collected by Shopify from your interactions with our store, with other Shopify merchants, and with Shopify itself. For those features, Shopify acts as an independent controller of the personal information involved and is responsible for how it is processed, including for responding to any rights requests relating to that processing. To learn more, see the Shopify Consumer Privacy Policy and, where available, the Shopify Privacy Portal at https://privacy.shopify.com/en.
Third-party websites and links
The Services may contain links to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of those sites, and their inclusion does not imply endorsement. If you follow such a link, we recommend you review that site's own privacy policy and terms before providing any personal information.
Children's data
The Services are not intended for use by children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us using the details below and we will take steps to delete it.
Security and retention
We use reasonable technical and organisational measures to protect the personal information we hold. However, no security measure is perfect, and we cannot guarantee the security of information transmitted to or from us. You should not use insecure channels to send us sensitive or confidential information.
We retain personal information for as long as necessary to provide the Services, comply with our legal obligations (including accounting, tax, and consumer-protection record-keeping requirements), resolve disputes, and enforce our agreements. In general:
- Order and transaction records are retained for at least six years after the end of the relevant financial year, to meet UK tax and accounting requirements.
- Customer account data is retained for as long as your account is active, and for a reasonable period afterwards.
- Marketing records (including consent and unsubscribe status) are retained for as long as we continue to send marketing communications and for a reasonable period afterwards.
- Support and correspondence records are retained for as long as needed to address the matter, and for a reasonable period afterwards.
International transfers
Your personal information may be transferred to, stored, and processed outside the UK and the EEA, including in Ireland, the United States, and Canada, by Shopify, our payment processors, and other service providers.
Where we transfer your personal information out of the UK or EEA, we rely on recognised transfer mechanisms, including the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the European Commission's Standard Contractual Clauses, unless the transfer is to a country that has been determined to provide an adequate level of protection.
Your rights and choices
Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may only apply in certain circumstances:
- Right of access — to request a copy of the personal information we hold about you.
- Right to erasure — to ask us to delete personal information we hold about you.
- Right to rectification — to ask us to correct inaccurate personal information.
- Right to data portability — to receive a copy of your personal information in a portable format and, where applicable, have it transferred to another controller.
- Right to object or restrict processing — to object to or ask us to restrict certain processing activities, including direct marketing.
- Right to withdraw consent — where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
- Right to opt out of "sale", "sharing", or targeted advertising — depending on where you live, you may have the right to opt out of the "sale" or "sharing" of your personal information, or of processing for targeted advertising. If you visit our website with the Global Privacy Control opt-out signal enabled, we will treat this as a request to opt out on the device and browser you are using.
- Marketing preferences — you can unsubscribe from marketing emails at any time using the link in those emails. We may still send you non-marketing communications, such as order updates.
To exercise any of these rights, contact us using the details below. We may need to verify your identity before processing your request. You can also designate an authorised agent to make a request on your behalf; we will require evidence of that authorisation.
We will not discriminate against you for exercising any of these rights.
To learn more about how Shopify uses your personal information and the rights you may have in relation to data processed by Shopify, visit https://privacy.shopify.com/en.
Complaints
If you have a complaint about how we handle your personal information, please contact us first using the details below so we can try to resolve it.
You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) — https://ico.org.uk. For the EEA, a list of supervisory authorities is available on the European Data Protection Board website.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we do, we will post the revised version on this page and update the "Last updated" date above. Where required by law, we will provide additional notice.
Contact
If you have any questions about this Privacy Policy, our privacy practices, or would like to exercise any of your rights, you can reach us at:
Omnitub Ltd
Unit 5A Batch Business Park
Lympsham
BS24 0ES
United Kingdom
Email: info@omnitub.co.uk
For the purposes of UK GDPR and, where applicable, EU GDPR, Omnitub Ltd is the data controller of your personal information.