Privacy policy

Last Updated: October 3, 2025

At Odins Valley, we are deeply committed to protecting your privacy and ensuring transparency in how we handle your personal data. This Privacy Policy details precisely what information we collect, how and why we use it, and how we protect it when you visit our website, odinsvalley.com.

We operate in full compliance with the General Data Protection Regulation (GDPR), the ePrivacy Directive (Cookie Law), and Google Merchant Center guidelines, ensuring your control over your personal information.

1. Our Commitment to Data Privacy and Consent

Your privacy is paramount. Our website adheres to a strict "privacy-by-design" approach:

• Before Consent (No Tracking):

  • Absolutely no personal data is collected or processed before you explicitly give your consent through our Cookie Banner.

  • No non-essential tracking technologies (such as cookies, pixels, or trackers for analytics, marketing, or personalisation) are initiated or placed on your device until you accept.

  • This ensures that your browsing activity is completely private until you make an informed choice.

• After Consent (Internal Use Only):

  • If you choose to accept our cookies and tracking technologies via the banner, any data collected will be used exclusively for internal purposes.

  • This data helps us improve our website's performance, understand customer behaviour to enhance your shopping experience, and optimize our services.

  • Crucially, we do not sell, share, or transfer this collected data to third parties for their own marketing, advertising, or other uses. All analytics are for Odins Valley's benefit only.

2. Information We Collect

We collect data only when it's necessary and relevant to provide our services and improve your experience.

A. Information You Provide Directly to Us (Mandatory for Purchases/Account)

This information is collected when you create an account, place an order, or communicate with us:

• Identity & Contact Information: Your name, billing address, shipping address, email address, and telephone number.

• Financial Information: Details necessary for payment processing (e.g., credit/debit card details). Please note that your full payment card information is processed securely by our certified payment providers, and we do not store sensitive payment card data on our servers.

• Communication Content: Records of any inquiries or feedback you send to our customer support.

B. Information Collected With Your Explicit Consent (Tracking Data)

This type of data is only collected if and after you provide your explicit consent through our Cookie Banner:

• Website Usage Data: Information about how you navigate and interact with our website, including the pages you view, products you browse, items in your cart, time spent on pages, and referring websites.

• Technical Device Data: Anonymised IP address (where possible), device type, browser type and version, operating system, and geographic location (general, not precise).

3. How We Use Your Information and Our Legal Basis (GDPR)

We use your personal data strictly for the purposes for which it was collected, under specific legal bases required by the GDPR:

• To Process & Fulfil Your Orders:

  • Purpose: Managing payments, dispatching products, delivering goods, and handling returns or exchanges.

  • Legal Basis: Necessary for the performance of a contract with you.

• To Manage Your Account:

  • Purpose: Creating, maintaining, and providing access to your online account for easier shopping.

  • Legal Basis: Necessary for the performance of a contract with you.

• For Customer Support:

  • Purpose: Responding to your inquiries, resolving issues, and providing assistance.

  • Legal Basis: Necessary for the performance of a contract or based on our legitimate interest to offer excellent customer service.

• For Internal Website Improvement & Analytics:

  • Purpose: To understand how our website is used (e.g., popular products, navigation paths) to enhance its functionality, fix bugs, and optimize the overall user experience.

  • Legal Basis: Your explicit Consent provided via the Cookie Banner.

• For Security & Fraud Prevention:

  • Purpose: Protecting our website, transactions, and customers from fraudulent activities and unauthorized access.

  • Legal Basis: Necessary for our legitimate interest to operate a secure and trustworthy platform.

• To Comply with Legal Obligations:

  • Purpose: Fulfilling any legal, regulatory, or tax requirements applicable to our business.

  • Legal Basis: Necessary to comply with a legal obligation.

4. Our Strict Cookie and Tracking Policy

Absolutely No Non-Essential Tracking Before Consent:

Our approach to cookies and tracking technologies strictly adheres to the ePrivacy Directive (Cookie Law) and GDPR.

• Essential Cookies: These are strictly necessary for the website to function (e.g., maintaining your shopping cart, security). They are placed automatically and do not require consent as they are vital for providing the service you request.

• Non-Essential Cookies & Trackers (Analytics, Functional): These include cookies and similar technologies for website analytics (like Google Analytics) or to remember your preferences. These are only activated and placed on your device if and when you provide your explicit consent through our Cookie Banner.

Use of Collected Tracking Data (Post-Consent):

When you accept these non-essential cookies, the Usage Data and Technical Data collected (e.g., via Google Analytics) are processed exclusively by Odins Valley for internal purposes. This means the data helps us:

• Improve our website's design and navigation.

• Understand which products are most popular.

• Measure the effectiveness of our website features.

We do not share this analytics data with third parties for their independent use, advertising, or any other commercial purposes.

You have the ability to manage your cookie preferences at any time via your browser settings. Blocking certain types of cookies may impact your experience on our website.

5. Data Sharing

We value your privacy and do not sell, rent, or lease your personal data to third parties. We only share data when it is essential for operating our business and delivering our services, under strict data protection agreements:

• Payment Gateway Providers: To securely process your financial transactions (e.g., Visa, Mastercard, Apple Pay, Google Pay, Shop Pay providers). They operate under their own strict privacy policies and PCI DSS compliance.

• Shipping & Delivery Partners: To deliver your purchased products to your specified address.

• Essential Service Providers: Third-party companies that provide services critical to our operations, such as website hosting, email communication services, and internal data analysis tools. These providers are contractually bound to process your data only according to our instructions and to maintain its confidentiality and security.

• Legal and Regulatory Authorities: If legally required, or to protect our rights, property, or safety, and those of our customers or the public.

6. Data Security and Your Rights

A. Data Security

We implement robust technical and organizational security measures to protect your personal data from unauthorized access, accidental loss, destruction, or alteration. Key measures include:

• SSL (Secure Sockets Layer) Encryption: All data transmitted between your web browser and our website, especially during checkout and account login, is secured using SSL encryption.

• Access Controls: Strict access controls are in place to limit who can access personal data within our organisation.

• Secure Infrastructure: We use secure hosting and IT infrastructure, regularly updated and monitored.

While we strive for maximum security, no method of transmission over the Internet or electronic storage is 100% secure.

B. Your Data Protection Rights (GDPR)

Under the GDPR, you have significant rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Ask us to correct any inaccurate or incomplete personal data.

• Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data, under certain conditions.

• Right to Restrict Processing: Request us to limit the way we use your data, under certain conditions.

• Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.

• Right to Object: Object to the processing of your personal data in certain circumstances (e.g., for direct marketing).

• Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, as required by law.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any significant changes by posting the updated policy on this page and revising the "Last Updated" date. We encourage you to review this policy periodically.

8. Contact & Company Information

If you have any questions or need help with your return, please reach out to our customer support team:

Shop name: Odins Valley
Company name: LEYWOOD PROPERTIES LTD
Company number: 13373628
Address: 10-12 Mulberry Green, Harlow, CM17 0ET, United Kingdom.
Telephone: +44 020 4578 8248
Email: info@odinsvalley.com

We are available during the following hours:
Monday to Friday: 9 a.m. to 5 p.m.
Saturday and Sunday: closed.

We will respond within 24 hours.