Privacy Policy

Effective Date: 1st January 2025

At Opal & Oak, we are committed to protecting your privacy and handling your personal data with transparency, care, and in accordance with the UK General Data Protection Regulation (UK GDPR).

By engaging with our services or visiting our website, you consent to the practices described in this Privacy Policy.

1. Who We Are

Opal & Oak is a UK-based provider of virtual and in-person support services for independent hospitality businesses. For the purposes of data protection law, we act as the “data controller” of your personal data.

2. What Information We Collect

We may collect and process the following types of personal data:

  • Name, business name, email address, and contact number

  • Payment and billing information

  • Communication history and feedback shared by you

  • Business information relevant to your services

  • Website usage data (via cookies and analytics)

We do not collect or store sensitive personal data unless it is essential to service delivery and explicitly provided by you.

3. How We Use Your Information

Your information may be used to:

  • Provide and manage services based on your package or agreement

  • Communicate service updates, meeting arrangements, or project progress

  • Process invoices, retain payment records, and manage account queries

  • Improve our services, systems, and website functionality

  • Fulfil legal obligations (e.g., tax, recordkeeping, fraud prevention)

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another related reason that is compatible with the original purpose.

4. Legal Bases for Processing

We rely on the following lawful bases under the UK GDPR to process your data:

  • Contractual obligation – where data is needed to provide agreed services

  • Consent – for optional communications or marketing (you can withdraw consent at any time)

  • Legal obligation – for compliance with applicable laws and HMRC reporting

  • Legitimate interests – to operate and improve our business in ways that are expected and minimally intrusive

5. How We Store and Protect Your Data

We use secure, password-protected cloud storage systems and encrypted communication tools to store and transmit your data.

Where paper records are used, these are stored securely and disposed of via shredding when no longer required.

We retain your data for up to 6 years after the end of your service for financial and legal purposes, unless you request earlier deletion and no legal obligations prevent it.

6. Sharing of Data

We do not sell or rent your information to third parties.

We may share your data:

  • With trusted subcontractors or consultants under confidentiality terms, for delivery of agreed services

  • With secure third-party services (e.g. accounting platforms, payment processors) to facilitate business operations

  • When legally required, such as by HMRC or to prevent fraud or abuse

7. Your Rights

Under the UK GDPR, you have the right to:

  • Request access to personal data we hold about you

  • Correct inaccurate or incomplete data

  • Request deletion of your data where appropriate

  • Withdraw consent for marketing or non-essential communications

  • Object to certain types of processing

  • Request that your data be transferred to another provider (data portability)

To exercise any of these rights, please email hello@opalandoakvs.co.uk. We aim to respond within 30 days.

8. Cookies and Website Tracking

Our website uses cookies and Google Analytics to enhance user experience and collect anonymous visitor data. You can manage or disable cookies through your browser settings.

By using our website, you consent to the use of cookies in accordance with this policy.

9. External Links

Our website may contain links to third-party websites. This Privacy Policy applies only to Opal & Oak’s services and website. We are not responsible for the privacy practices or content of external websites.

10. Contact Us

If you have any questions about this policy or wish to exercise your rights under data protection law, please contact:

hello@opalandoakvs.co.uk

If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk

Thank you for trusting Opal & Oak. We are committed to safeguarding your privacy every step of the way.

Effective Date: 1st January 2025

At Opal & Oak, we are committed to protecting your privacy and handling your personal data with transparency, care, and in accordance with the UK General Data Protection Regulation (UK GDPR).

By engaging with our services or visiting our website, you consent to the practices described in this Privacy Policy.

1. Who We Are

Opal & Oak is a UK-based provider of virtual and in-person support services for independent hospitality businesses. For the purposes of data protection law, we act as the “data controller” of your personal data.

2. What Information We Collect

We may collect and process the following types of personal data:

  • Name, business name, email address, and contact number

  • Payment and billing information

  • Communication history and feedback shared by you

  • Business information relevant to your services

  • Website usage data (via cookies and analytics)

We do not collect or store sensitive personal data unless it is essential to service delivery and explicitly provided by you.

3. How We Use Your Information

Your information may be used to:

  • Provide and manage services based on your package or agreement

  • Communicate service updates, meeting arrangements, or project progress

  • Process invoices, retain payment records, and manage account queries

  • Improve our services, systems, and website functionality

  • Fulfil legal obligations (e.g., tax, recordkeeping, fraud prevention)

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another related reason that is compatible with the original purpose.

4. Legal Bases for Processing

We rely on the following lawful bases under the UK GDPR to process your data:

  • Contractual obligation – where data is needed to provide agreed services

  • Consent – for optional communications or marketing (you can withdraw consent at any time)

  • Legal obligation – for compliance with applicable laws and HMRC reporting

  • Legitimate interests – to operate and improve our business in ways that are expected and minimally intrusive

5. How We Store and Protect Your Data

We use secure, password-protected cloud storage systems and encrypted communication tools to store and transmit your data.

Where paper records are used, these are stored securely and disposed of via shredding when no longer required.

We retain your data for up to 6 years after the end of your service for financial and legal purposes, unless you request earlier deletion and no legal obligations prevent it.

6. Sharing of Data

We do not sell or rent your information to third parties.

We may share your data:

  • With trusted subcontractors or consultants under confidentiality terms, for delivery of agreed services

  • With secure third-party services (e.g. accounting platforms, payment processors) to facilitate business operations

  • When legally required, such as by HMRC or to prevent fraud or abuse

7. Your Rights

Under the UK GDPR, you have the right to:

  • Request access to personal data we hold about you

  • Correct inaccurate or incomplete data

  • Request deletion of your data where appropriate

  • Withdraw consent for marketing or non-essential communications

  • Object to certain types of processing

  • Request that your data be transferred to another provider (data portability)

To exercise any of these rights, please email hello@opalandoakvs.co.uk. We aim to respond within 30 days.

8. Cookies and Website Tracking

Our website uses cookies and Google Analytics to enhance user experience and collect anonymous visitor data. You can manage or disable cookies through your browser settings.

By using our website, you consent to the use of cookies in accordance with this policy.

9. External Links

Our website may contain links to third-party websites. This Privacy Policy applies only to Opal & Oak’s services and website. We are not responsible for the privacy practices or content of external websites.

10. Contact Us

If you have any questions about this policy or wish to exercise your rights under data protection law, please contact:

hello@opalandoakvs.co.uk

If you are dissatisfied with our handling of your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk

Thank you for trusting Opal & Oak. We are committed to safeguarding your privacy every step of the way.