PRIVACY POLICY

Last updated: 07/09/2025

1. INTRODUCTION

OCTAVE BANANA LTD trading as DoWear (“we”, “us”, “our”) operates dowear.co.uk (the “Website”). We are committed to protecting your privacy and handling your personal data transparently and lawfully. This Privacy Policy explains what information we collect, how we use it, the legal bases for processing, how long we keep it, and the rights you have under applicable law (including the UK GDPR).

2. COMPANY INFORMATION (DATA CONTROLLER)

• Company: OCTAVE BANANA LTD (trading as DoWear)
• Company Number: 15545416
• Registered Address: 52 Surrey St, Norwich, United Kingdom, NR1 3PA
• Email: info@dowear.co.uk
• Phone: +44 7537 135782

3. INFORMATION WE COLLECT

We may collect and process the following categories of data:

• Identity & Contact Data: name, email address, billing and shipping addresses, phone number, account username (hashed password stored).
• Order & Payment Data: items purchased, order totals, VAT, delivery preferences, and limited payment metadata. Card payments are processed by our payment providers (e.g., Visa/Mastercard processors); we do not store full card numbers or CVV on our servers.
• Communications Data: messages sent via our contact forms, email correspondence, support requests, reviews.
• Technical & Usage Data: IP address, device identifiers, browser type, operating system, referral URLs, pages viewed, time on page, and other analytics data (e.g., via Google Analytics or similar).
• Cookie & Similar Technologies: as described in our Cookie Policy.

4. HOW WE USE YOUR INFORMATION (PURPOSES)

• Order fulfilment: to process, ship and deliver your orders; handle returns and refunds; issue invoices.
• Customer service: to respond to enquiries, provide support and manage your account.
• Payments: to process transactions securely via our payment providers (Visa/Mastercard). We do not store full card details.
• Security & fraud prevention: to protect our Website, services and customers.
• Legal compliance: to comply with tax, accounting and other legal obligations.
• Improving our Website & products: to analyse performance and usage (e.g., analytics) and enhance user experience.
• Marketing (with consent where required): to send newsletters or promotions; you can opt out at any time.

5. OUR LEGAL BASES FOR PROCESSING

We process personal data under one or more of the following legal bases:

• Contract: to perform a contract with you (e.g., fulfil your order).
• Consent: for certain marketing/analytics cookies or communications. You may withdraw consent at any time.
• Legal obligation: to comply with laws (e.g., tax, accounting, consumer protection).
• Legitimate interests: to run and protect our business, prevent fraud, improve services (balanced against your rights and freedoms).

6. PAYMENTS

We accept card payments processed by third-party payment providers (e.g., Visa/Mastercard processors). Transactions are encrypted. We receive confirmation of payment status and limited metadata but do not store full card numbers or CVV on our systems.

7. SHARING & DISCLOSURE

We may share personal data with:

• Service providers: payment processors, hosting, email/SMS providers, IT support, analytics, customer support tools.
• Shipping & logistics partners: to deliver your order worldwide (£9.99 flat rate; free on orders £50+).
• Professional advisers & authorities: lawyers, accountants, regulators or law enforcement where required.
• Business transfers: in connection with a merger, acquisition or sale of assets (subject to confidentiality).

We do not sell your personal data. We do not share data with affiliates for their independent marketing.

8. COOKIES & SIMILAR TECHNOLOGIES

We use cookies, pixels and similar technologies to operate the Website, measure performance and personalise content. For details and controls, please see our Cookie Policy and the on-site cookie settings.

9. INTERNATIONAL TRANSFERS

As we sell worldwide, your data may be transferred outside the UK/EEA. Where we transfer data internationally, we rely on appropriate safeguards, such as adequacy regulations or UK/EU Standard Contractual Clauses, and implement additional measures where necessary to protect your information.

10. DATA SECURITY

We implement technical and organisational measures designed to protect your data (e.g., encryption in transit, access controls, backups). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting or reporting requirements. Typical retention periods include: orders & invoices (up to 7 years for tax/accounting), support tickets (up to 3 years), and marketing preferences (until you opt out or your consent is withdrawn). We may retain limited information to prevent fraud or enforce our terms.

12. YOUR RIGHTS (UK GDPR)

Subject to conditions and exemptions, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) where applicable.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests or to direct marketing.
• Portability – receive data in a structured, commonly used format and transmit it to another controller where technically feasible.
• Withdraw consent where processing is based on consent (this does not affect prior lawful processing).
• Lodge a complaint with the UK ICO: ico.org.uk.

To exercise your rights, contact us at info@dowear.co.uk. We may request proof of identity and will respond within the timeframes set by law.

13. MARKETING PREFERENCES

We may send you marketing communications if you have opted in or if permitted by law. You can opt out at any time by using the unsubscribe link in our emails or contacting info@dowear.co.uk. Even if you opt out, we may still send non-promotional messages (e.g., order updates, service notices).

14. CHILDREN’S PRIVACY

Our Website is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data to us, please contact us so we can delete it.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. We will post the updated Policy on this page and adjust the “Last updated” date above. Please review this page periodically.

---

© 2025 OCTAVE BANANA LTD. All rights reserved.