Your data
Privacy notice
This notice explains what Ooh Goody collects when you use this site. Operator and data-controller contact details appear below. Use the listed email for privacy questions or to exercise your data rights.
What we collect
- Outbound click counts. When you click a "Shop at…" button, we record which product and retailer was clicked and the time. We do not store your IP address, browser details, cookies or any identifier with this record. We use it only to understand which products are useful.
- Server logs. Our hosting provider may keep short-lived technical logs for security and reliability.
- Published-site analytics. Hosting analytics are currently enabled for a future published site, not this editor preview. They record visited pages, referrers, country, browser, visit duration, performance, errors and clicked button/link positions. They use no cookies or device storage and cannot recognise returning visitors or identify who a visitor is. Detailed records are retained for 90 days and daily summaries for one year. This is separate from consented interest profiles and our minimal affiliate click counts.
Retailers and affiliate networks
When you leave this site for a retailer or pass through an affiliate network such as Awin, their own privacy and cookie policies apply. They may set cookies to attribute your purchase. Please read their policies. No affiliate programmes or connected feeds are currently being claimed.
Your rights
Under UK GDPR you can ask for access to, correction or deletion of personal data we hold. You can turn alerts off or delete this device’s subscription in Alert settings. You can complain to the Information Commissioner's Office (ico.org.uk).
Operator and data controller
Ooh Goody is operated by Robert Oxford, a UK sole trader trading as Jacob and Lewis Publishing.
Jacob and Lewis Publishing is a trading name, not a registered limited company.
Legal operator and data controller: Robert Oxford
Email: oxfordrob9@gmail.com
Opt-in new-find marketing alerts
If you deliberately enable alerts, we store your device’s push destination and encryption keys privately, selected topics and frequency, consent version/time and permission state. No name or email is required. This is used only to send requested marketing roundups and maintain unread message counts. Your browser’s push provider processes delivery under its own terms.
An essential private device cookie lets you manage that subscription. Security rate limiting uses a rotating hashed network identifier for at most 24 hours, not a stored IP address. Messages expire after 30 days; inactive devices are removed after 90 days. Withdraw consent or delete device data and linked consent records anytime in Alert settings. Browser permission revocation stops display; our off switch removes the server subscription.
The owner must review provider permissions and UK marketing compliance before delivery. App-icon badge support depends on your device.
Optional personalisation
Remembering interests is off until you explicitly agree in Personalisation settings. We then use only the broad shopping categories you select, category browsing, product views and exact broad category searches. Raw search terms are not stored. We do not infer diagnoses, health needs, protected traits or sexual interests, use fingerprinting or third-party tracking, or obtain purchase histories from retailers.
An HttpOnly first-party interest cookie controls only your anonymous device profile. Category weights decay over 30 days; scores and at most 100 recent product IDs expire with the profile after 30 days unless you save your choices again. Expired profiles are excluded immediately and purged during daily delivery maintenance. The owner sees aggregate profile totals only.
Personalised marketing push requires a separate explicit choice plus an active opted-in push subscription. Pausing personalisation stops learning and personalised sending; withdrawing deletes your profile and its linked subscription and consent records. Search and ordinary browsing remain available. You can inspect, edit and delete your interests in Personalisation settings. No cross-device synchronisation is provided.
Personalisation is consent-based under UK GDPR and PECR. The owner must review this notice and UK marketing compliance before enabling marketing delivery.