Privacy Policy – Oak & Madison

Last updated: 1 February 2026

1. Introduction

At Oak & Madison, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our services.

This policy applies to all personal data processed through our website.

2. Data Controller

Oak & Madison is responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR).

📧 Contact email: info@oakandmadison.com

3. Data Security

Our website uses SSL/TLS encryption to ensure secure transmission of personal data. You can recognize a secure connection by “https://” and the lock icon in your browser.

4. Personal Data We Collect

4.1 Website visits

When you visit our website without actively providing personal data, we may collect:

  • IP address (anonymized where possible)

  • Browser type and version

  • Device type

  • Operating system

  • Date and time of access

  • Pages visited

  • Referrer URL

Purpose: website functionality, security, and optimization
Legal basis: legitimate interest (Art. 6(1)(f) GDPR)

4.2 Contact requests

When you contact us via email or a contact form, we process:

  • Name

  • Email address

  • Any information you voluntarily provide

Purpose: responding to inquiries
Legal basis: legitimate interest or pre-contractual measures
Retention: up to 12 months after resolution

4.3 Orders and customer accounts

When placing an order or creating an account, we may process:

  • Name

  • Billing and shipping address

  • Email address

  • Phone number

  • Order details

  • Payment confirmation (no full payment data stored)

Purpose: order processing and contract performance
Legal basis: Art. 6(1)(b) GDPR
Retention: according to applicable legal obligations

5. Cookies

Oak & Madison uses cookies and similar technologies.

5.1 Types of cookies

  • Strictly necessary cookies

  • Analytical cookies (only with consent)

  • Marketing cookies (only with consent)

When you first visit our website, you will be asked to provide consent for non-essential cookies via a cookie banner. You may change your preferences at any time.

6. Analytics

Google Analytics 4 (GA4)

We use Google Analytics 4 to analyze website usage and improve our services.

  • IP addresses are anonymized

  • Data is not used for advertising personalization

  • No combination with other Google services

Legal basis: consent (Art. 6(1)(a) GDPR)

You can opt out here:
https://tools.google.com/dlpage/gaoptout

7. Marketing & Newsletters

7.1 Email newsletter

If you subscribe to our newsletter:

  • We use a double opt-in

  • Only your email address is required

  • You can unsubscribe at any time

Legal basis: consent
Retention: until you unsubscribe

7.2 Marketing emails to existing customers

If you have previously made a purchase, we may send emails about similar products.

Legal basis: legitimate interest
Opt-out: available at any time via email or unsubscribe link

8. Payments

Payments are processed through third-party payment providers such as:

  • PayPal

  • Credit Card

  • Stripe

We do not store full payment details. Payment processing is handled directly by the provider.

Legal basis: contract performance (Art. 6(1)(b) GDPR)

9. Social Media & Advertising

Meta (Facebook & Instagram) Pixel

With your consent, we use Meta technologies to:

  • track conversions

  • optimize advertisements

  • perform remarketing

Data is not directly identifiable to us but may be processed by Meta according to their own privacy policies.

Legal basis: consent

Google Ads Remarketing

With your consent, we may display ads based on your previous interactions with our website.

Legal basis: consent

10. Data Transfers Outside the EU

Where personal data is transferred outside the European Economic Area, this is done in compliance with GDPR using:

  • Standard Contractual Clauses (SCCs)

  • appropriate technical and organizational safeguards

11. Your Rights

You have the right to:

  • access your personal data

  • request correction or deletion

  • restrict processing

  • request data portability

  • object to processing

  • withdraw consent at any time

To exercise your rights, contact us at:
📧 info@oakandmadison.com

12. Complaints

You have the right to lodge a complaint with a competent data protection authority in your country of residence.

13. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described or to comply with legal obligations.

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The most current version will always be available on our website.

15. Contact

📧 info@oakandmadison.com