Controller and contact
MAWA OXFORD LTD operates MAWA OXFORD. We are registered in England and Wales under company number 16552502. Our registered office is Conway House, Old Road, Oxford, United Kingdom, OX3 8SZ. Email: reservations@mawaoxford.online. Telephone: +447533986011. The registered office is provided for legal correspondence and is not a confirmed collection, return or meeting location unless separately stated. This company is the controller of personal information collected through this website. Contact reservations@mawaoxford.online for privacy questions or to exercise your rights.
Information collected
We receive your name, email, optional phone number and message when you contact us. An order request also records selected items, quantities, currency, delivery details where required, requested dates and any notes you provide. We retain a snapshot of the accepted terms and item descriptions. Our server also processes IP addresses, browser request information, session identifiers and security logs. Do not submit identity documents, health information, payment card numbers, classified information or other sensitive material through public forms.
Purposes and legal bases
We use enquiry and order information to take steps at your request before a contract, and to perform an accepted contract. Our legitimate interests in operating a reliable service and preventing abuse support limited security monitoring and relevant business correspondence, after considering your rights. We keep required business records to meet legal obligations. Marketing is not enabled on this website; we do not treat an enquiry as marketing consent. Where consent is required for a future optional purpose, we will request it separately and explain how to withdraw it.
Recipients and payments
Information is accessible to authorised people working for the company and service providers that support website hosting, email and IT operations. Where an order is accepted, necessary delivery information is shared with the relevant fulfilment or delivery provider. When enabled, payments are processed on the official Stripe gateway for WooCommerce. Stripe receives payment, billing and transaction information and processes it under its applicable privacy terms (https://stripe.com/privacy). We receive transaction identifiers, amount, currency and payment status; we do not receive or store complete card numbers or card security codes. We may disclose information where legally required or needed to establish, exercise or defend legal claims. We do not sell personal information or use advertising trackers.
International processing
Our service providers may process information outside your country. Where UK or EEA transfer rules require safeguards, the company must use an applicable adequacy arrangement or approved contractual safeguards with any required supplementary measures. Contact us for information about the current hosting location, recipients and applicable transfer safeguards. If an EEA representative is legally required for the company’s activities, its details must be supplied with the applicable service information before that activity begins.
Retention
General enquiries are normally retained for up to 12 months after resolution. Unaccepted, unpaid requests are normally removed after 90 days. Accepted order and business records are normally kept for six years where needed for accounting or legal purposes. Information needed for an active dispute, legal hold or mandatory retention period may be kept longer. Temporary rate-limit records expire after the applicable short security window; routine server logs should be rotated within 30 days. Retention reviews and the maintenance process are the company’s responsibility.
Your rights
Depending on the circumstances, you can request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. These rights have legal conditions and exceptions. You can withdraw consent without affecting earlier lawful processing. We normally respond to a rights request within one month, subject to permitted extensions and proportionate identity checks. You may complain to the UK Information Commissioner at https://ico.org.uk/make-a-complaint/ or the relevant EEA supervisory authority. Contacting us first is welcome but is not required.
Security, children and decisions
Access to administration is password-protected and payment card entry, where enabled, takes place with the payment provider. No transmission or system is guaranteed completely secure. This website is not directed at children and we do not knowingly seek their information. We do not make solely automated decisions with legal or similarly significant effects through this website. The payment provider may carry out its own fraud and security checks.
Providing information and changes
Contact details are needed to answer an enquiry; order and delivery fields marked as required are needed to process the requested service. Without necessary information we may be unable to proceed. We update this notice when the website’s processing changes and show the revision date on this page.
Website systems
WordPress and WooCommerce store administrative accounts, private enquiries and order requests, contact and delivery details, selected currency, product and policy snapshots and payment references. Administrative access is limited to authorised users. Optional usage tracking and order attribution are disabled. No advertising pixels are enabled.