Omni Cartix

1. Who We Are

Omni Cartix Ltd (“we”, “us”, “our”) is a company registered in England and Wales (Company No. 12345678), VAT No. GB123456789. Our registered address is 123 Innovation Street, London, EC1A 1BB, United Kingdom.

We are registered with the Information Commissioner's Office (ICO) under reference ZA123456.

2. Data We Collect

Under UK GDPR (Article 13), we inform you that we collect:

Account data: name, email address, hashed password
Order data: purchase history, billing address, payment tokens (not card numbers)
Technical data: IP address, browser type, pages visited
Marketing data: email preferences (only with your consent)

3. Legal Basis for Processing

Contract performance: processing orders, delivering products
Legal obligation: VAT records, financial compliance
Legitimate interests: fraud prevention, site security
Consent: marketing emails (you can withdraw at any time)

4. Data Retention

We retain order and financial data for 7 years (HMRC requirement). Account data is kept while your account is active. You may request deletion subject to legal obligations.

5. Your Rights

Under UK GDPR you have the right to: access your data, correct inaccuracies, erasure, portability, object to processing, and lodge a complaint with the ICO (ico.org.uk).

6. Cookies

We use strictly necessary cookies (session, cart) and optional analytics cookies. You can manage your preferences via our cookie banner.

7. Third Parties

We share data with: Stripe (payments), PayPal (payments), Supabase (database), Cloudflare R2 (file storage), Resend (email), Vercel (hosting). All are GDPR-compliant processors.