Privacy Policy

Old School Oval (available at https://oldschooloval.com/) is operated by AVO Suffolk Ltd. ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy in compliance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the Privacy and Electronic Communications Regulations (PECR).

This Privacy & Cookie Policy explains how we collect, use, store, and share your personal information when you visit our website or purchase car parts from us.

1. Data Controller Information

The data controller responsible for your personal data is:

2. What Personal Data We Collect

When you visit or interact with our store, we may collect, use, store, and transfer different kinds of personal data about you, categorized as follows:

• Identity Data: Name, username, or similar identifiers.
• Contact Data: Billing address, delivery address, email address, and telephone number.
• Transaction Data: Details of car parts and products you have purchased from us and payment records.
• Technical & Usage Data: IP address, browser type and version, device information, operating system, and how you interact with our website (via cookies and log files).
• Marketing & Communications Data: Your preferences in receiving marketing emails from us (where opt-in consent is provided).

3. How and Why We Use Your Personal Data

We process your personal data under specific legal bases required by data protection laws:

4. How We Share Your Information

We do not sell, rent, or trade your personal data to third parties. We share data only with trusted service providers necessary to operate our business and fulfill your orders:

1. Delivery & Logistics Partners: Courier and shipping services (e.g., Royal Mail, DPD, DHL) to deliver orders to your address.
2. Payment Processors: Secure gateway providers (e.g., PayPal, Stripe) to execute payment transactions.
3. E-Commerce & Platform Hosting: Technical providers hosting or maintaining our e-commerce platform.
4. Professional Advisers & Authorities: Accountants, legal advisors, or law enforcement agencies when legally required.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements:

• Order & Transaction Records: Retained for up to 6 years following the end of the financial year to comply with UK tax obligations.
• Customer Accounts: Retained until you request account deletion or after 3 years of continuous inactivity.
• Technical Logs: Retained temporarily for security and diagnostics, typically deleted within 30–90 days.

6. Your Rights Under GDPR

Under data protection laws, you have rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer required.
• Right to Restrict Processing: Ask us to suspend the processing of your data in specific scenarios.
• Right to Data Portability: Obtain and transfer your data to another provider in a structured, machine-readable format.
• Right to Object: Object to direct marketing or processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at sales@oldschooloval.com.

7. Cookie Policy

What Are Cookies?

Cookies are small text files placed on your computer or mobile device when you browse websites. They help websites function efficiently, improve user experience, and provide analytical insights to site owners.

Cookies Used on This Website

Our website e-commerce platform utilizes essential and performance cookies:

• Strictly Necessary Cookies (Essential): Required for core functionality, such as storing items in your shopping cart, session identification, secure logins, and checkout navigation. Legal Basis: Legitimate Interest / Performance of a Contract. These do not require consent.
• Analytical & Performance Cookies (Optional): Help us understand how visitors interact with the site (e.g., pages visited, loading speed) so we can improve site usability. Legal Basis: Consent. Enabled only if accepted via our cookie banner.
• Functionality & Payment Cookies: Used by embedded services (e.g., PayPal, payment widgets) to remember preferences and ensure secure transactions.

Managing Cookies

You can control or block non-essential cookies at any time by updating your preferences in our Cookie Banner or setting your browser parameters to refuse cookies. Note that disabling essential cookies may prevent certain site features (such as the shopping cart and checkout) from functioning correctly.

8. Third-Party Links

Our website may contain links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

9. Security of Your Data

We employ appropriate physical, administrative, and technical security measures—including SSL encryption across our entire site—to protect your personal data from unauthorized access, accidental loss, alteration, or disclosure.

10. Complaints & Regulatory Contact

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK data protection authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk/

Last updated: August 2026