This Privacy Policy describes how and when we collect, use, and share information when you purchase an item from us, contact us, or otherwise use or view our services through our own websites: www.oakfieldlearning.co.uk and www.plavalmat.com, related sites (such as our social media posts, videos and articles/blogs).

Our websites may contain links to other sites and online materials which we feel may be of interest to you. Once you have used these links and leave our website, please note that Oakfield Learning Ltd does not have any control over that website and therefore cannot be responsible for the protection or privacy of any information which you provide whilst visit such sites as they are not governed by this Privacy Policy.

This Privacy Policy does not apply to the practices of third parties that we do not own or control. In addition to our own privacy policy, you may also wish to read the Disclaimer, Terms and Conditions for Google and Amazon.

We processes payments using third party secure payment gateways in order to process payments (e.g. PayPal, Google Pay, Apple Pay and Stripe for example).

Oakfield Learning Ltd is committed to doing all we can to keep your data secure. We have systems and processes in place to prevent unauthorised access or disclosure of your data. Our websites has an SSL certificate which encrypts out site’s traffic so you can feel safe knowing that what you are viewing and any personal information you share with us cannot be seen by others. We use anti-virus security software and scan files and emails for security threats such as viruses. Our system databases are regularly updated.

Privacy Policy

Information and Data We Collect:

To fulfil your order, you must provide us with certain information such as your name, email address, postal address, payment information, and the details of the product(s) you wish to purchase.

The personal data we collect from you includes:
·  questions, enquiries, feedback or reviews you leave when you contact us via email, phone, social media, letter or in person

· your name, business name, address, delivery address, email address and telephone number, when order products and services listed on this website

· your email address and subscription preferences when you sign up to our email alerts

· how you use our emails – for example whether you open them and which links you click on

· your Internet Protocol (IP) address, and details of which version of web browser you used

· information on how you use the site, using cookies and page tagging techniques

· your marketing preferences

Where you provide your consent, we use Google Analytics cookies to collect information about how you use our website. This includes IP addresses.

Google Analytics processes information about: the pages you visit on this site, how long you spend on a website page, how you got to the site and what you click on while you’re visiting the site.

If you contact us using the live messaging facility on our website, please note that this is protected by reCAPTCHA.

We make sure you cannot be directly identified by Google Analytics data. We do this by using Google Analytics’ IP address anonymisation feature and by removing any other personal data from the titles or URLs of the pages you visit.

We will not combine analytics information with other data sets in a way that would directly identify who you are.

Why We Need Your Information and How We Will Use It:

Oakfield Learning Ltd relies on a number of legal bases to collect, use, and share your information, including:

– as needed to provide services, such as when we use your information to process and fulfil your order, complete internal records, to settle disputes, or to provide customer support e.g. respond to feedback or enquiries you send at your request;

– if you have asked us to source educational products from other suppliers, we may need to pass on your information such as name and delivery address in order to fulfil your order;

-when you have given your consent, which you may withdraw at any time, such as by signing up for our mailing list;

– if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and

– as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving our services. We will use your information to provide the services you requested and in our legitimate interest to improve our services; and 2) Compliance with our other policies and Terms of Use. Oakfield Learning will use your information as necessary to comply with our obligations under our Shipping/Delivery Policy, Returns Policy and Terms and Conditions.

How we use EU customer information VAT Compliance and Data Collection
To ensure compliance with European Value-Added Tax (VAT) regulations, we use a third party service provided by EAS Project (easproject.com) for VAT reporting. This service
collects and processes certain sales data from our checkout process solely for the purpose
of VAT reporting to European tax authorities. The information collected includes:

• Transaction details (e.g., product or service purchased, amount paid)
• Customer information (e.g., billing and shipping address, VAT identification number
  if applicable)
  Purpose of Data Collection
  The collected data is used exclusively for:
• Calculating and reporting VAT owed to European tax authorities
• Ensuring compliance with relevant VAT laws and regulations
  Data Security
  EAS Project employs robust security measures to protect your data during transmission
  and storage. We have entered into a data processing agreement with EAS Project to
  ensure that your data is handled securely and in accordance with applicable data
  protection laws.
  Data Sharing
  We do not share your personal data with EAS Project for any purpose other than VAT
  compliance. Your data will not be sold, rented, or disclosed to third parties for marketing or
  other purposes.
  More information
  For any questions or concerns regarding the handling of your VAT data, please contact
  EAS directly at support@easproject.com or visit their website at easproject.com for more
  information.

Information Sharing and Disclosure:

Information about our customers is important us.  We will not sell, rent or share your data to third parties.  Will we only share your personal information for very limited reasons and in limited circumstances, as follows:

– To provide you with our services and comply with our obligations.

– Service providers: We engage certain trusted third parties to perform functions and provide services, for example for shipping and IOSS VAT scheme. Your personal information will be shared with these third parties, but only to the extent necessary to perform these services.

– Business transfers: If we decide to sell or merge our business, we may disclose your information as part of that transaction, only to the extent permitted by law.

Compliance with laws: We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.

Data Retention:

We retain your personal information only for as long as necessary to provide you with our services. However, we may also be required to retain this information to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. We generally keep your data for the following time period: 4 years.

If you have signed up to receive marketing such as newsletters or email subscriptions, we will continue to keep the data required for these services until you unsubscribe.  If you no longer wish to be contacted for marketing purposes please email marketing@oakfieldlearning.co.uk

Children’s Privacy Policy:

Whilst we provide educational products for use by children aged 6+, our services are not designed for, or intentionally targeted at children. We do not intentionally collect or maintain data about children.

When sharing experiences of using our plavalmat products on social media, such as videos or photos, you are responsible for taking the reasonable steps for protecting children’s privacy and you must obtain relevant permissions from parents/carers and pupils before publishing. Where required, we will seek permission before re-posting or sharing such content.

Your Rights:

If you reside in certain territories, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below:

– Access: You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.

– Change, restrict, delete: You may also have rights to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like where we are required to store data for legal reasons) We will generally delete your personal information upon request.

– Object: You can object to (i) processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

– Complain: If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

Supplemental Notice for California Residents (CCPA/CPRA):

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information.
Notice of Collection: We collect minimal online identifiers (such as IP addresses via cookies) to analyze website performance and ensure site security.
Right to Opt-Out of Sale or Sharing: We do not sell your personal data to third parties, nor do we share it for cross-context behavioral advertising. Therefore, a “Do Not Sell or Share My Personal Information” link is not required on this website.
Right to Know and Delete: You have the right to request access to or deletion of any personal data we may hold about you. To exercise these rights, please contact us via our standard contact channels.

Data Protection Policy

What is GDPR? 

GDPR (General Data Protection Regulation) is a European law which enforces the safe and responsible use of personal data. This law protects all European citizens which in turn means that any company that directly or indirectly deals with European citizens with have to comply. The regulations determine that any entity must be able to demonstrate it’s legal right to process data on one of 6 bases: Consent, Contractual, Legally, for Vital interests, in a public function or if it is in the legitimate interest of the data subject. In this instance the entity would be a “Data Processor”. In addition where an entity controls and circulates data to third parties regarding data subjects they become a “Data Controller” and are responsible for ensuring that the data is handled responsibly and legally. Similarly the entity must demonstrate a legal basis for controlling data.

What data is held?

There are two categories of data that can be held:

• Personal data: Name, Address, Phone Number, Email address etc….

• Special Category Personal Date: Age, Gender, Religion, Health, Biometric etc…

Oakfield Learning and its supplier hold personal data on customers but do not hold special category data for customers or engaged third parties.

What is done with the data that is held? 

Customers’ personal data is held to contractually fulfil orders, deliver services and comply with IOSS scheme for collection and remittance of EU VAT. As part of this (see Privacy Policy), only strictly necessary personal data such a name, address and contact number will be passed on to other third parties (such as suppliers or courier companies). In situations such as this, these customers act as Data Controllers and Oakfield Learning Ltd would be the Data Processor. Where ever possible the collection of data will be minimised on any data subjects.

Promise

Oakfield Learning Ltd will not use customer or third party personal data in proactive marketing and sales initiatives unless there is a legal basis to do so. Customer or third party personal data is not used to systematically profile data subjects for any purpose. Customer or third party personal data is never sold to other companies.

Data Security

Oakfield Learning Ltd believes strongly that data integrity is the foundation of the future of business and the security of that data is paramount. All personal data that Oakfield Learning processes or controls is securely stored on encrypted servers on reputable e-commerce providers websites and any files that contain personal data are password protected.

Who has responsibility for this policy? 

Oakfield Learning Ltd is registered with the Information Commissioner’s Office. Our data protection officer is Mrs C Minshall.

How do we keep our data compliant?

Oakfield Learning Ltd will conduct regular audits of data to supplement active, continuous data integrity.

What do you know about me? 

Oakfield Learning Ltd believes in transparency and are happy to comply with subject access requests within the confines of the law and within a reasonable time period.

What if I don’t want you to know about me? 

If you are a customer or third party and you’d like to be forgotten or erased from our records then this will be complied with within the confines of the law, policy and if it is contractually permitted to do so. If this will conflict with your vital or best interests then you will be informed. Your privacy will always be respected.

What if there is a data breach or personal data is lost? 

Oakfield Learning Ltd is registered with the Information Commissioner’s Office (ICO).

In accordance with our legal obligations, any data breaches will be reported including to the ICO.

Complaints 

If you believe your personal information has been misused or mishandled, you have the right to complain to us and or the Information Commissioner’s Office:

Email us: dataprotection@oakfieldoakfieldlearning.co.uk

Letter: Data Protection, Oakfield Learning Ltd, 2 Oakfield Place, Clapton Lane, Portishead, North Somerset, BS20 7RB

Use this link to: Make a complaint with the Information Commissioner’s Office

Privacy and Data Protection Policy Last Updated: 1st January 2026

In addition to our Privacy and Data Protection Policies, please also read the following policies:
Shipping/Delivery Policy
Returns Policy
Our Terms and Conditions
Disclaimer