Privacy notice
A static site collects very little. Here is exactly what, and what to do about it.
Last updated August 2026
This notice explains how OatDrinks handles personal data under the UK GDPR and the Data Protection Act 2018. The site is operated from the United Kingdom.
What we collect
- Newsletter email addresses, if and only if you submit the subscription form. Used to send the newsletter, nothing else, and never sold or shared. Every email carries a one-click unsubscribe.
- Messages you send us by email, kept for as long as needed to deal with them.
- Analytics, via Google Analytics 4. Pages viewed, how you arrived, approximate location derived from your IP address, and device and browser type. We also record which outbound product links get clicked, and from which article — this tells us which recommendations readers act on. None of it identifies you by name, and we never upload customer lists or link this data to anything else.
Cookies
Analytics cookies, only if you allow them. If you accept, Google Analytics sets
first-party cookies (named _ga and _ga_<id>) to recognise a
returning browser and to work out whether two page views belong to the same visit. They last up
to two years unless you clear them. If you decline, none are set — we use Google Consent Mode,
which starts with analytics storage denied and only enables it on your say-so. We set no
advertising cookies at all, and Google Signals, which would link browsing to signed-in Google
accounts, is not enabled.
Affiliate cookies. When you click an affiliate link and leave for a retailer, that retailer typically sets a cookie recording that you arrived from us, so any purchase is credited correctly. That cookie is set by the retailer under their own privacy policy, and usually expires between 24 hours and 30 days later.
Your choice, and how to change it
Analytics cookies are off until you allow them. On your first visit a banner asks; nothing is stored on your device for analytics unless you choose "Allow analytics". Declining is one click, exactly like accepting, and nothing on this site stops working if you decline.
We record your answer in your browser's local storage — not a cookie — so that we do not have to ask again on every page. That record expires after six months, at which point the banner asks once more.
To change your mind at any time, use Cookie settings in the footer of any page. You can also block cookies for this site in your browser, use a tracker blocker, or install Google's official Analytics opt-out browser add-on.
Third parties
Google. Analytics is provided by Google, acting as our processor, and fonts are served by Google Fonts — both receive your IP address as part of the request. Google may process this data on servers outside the UK, under the transfer safeguards set out in its own terms.
Email delivery and hosting are handled by third-party processors under contract. Outbound affiliate links are handled by the retailers and networks listed on the disclosure page.
Your rights
You can ask for a copy of any personal data we hold about you, ask us to correct or delete it, or object to its processing. Email hello@oatdrinks.com and we will respond within one month. If you are unhappy with the response you can complain to the Information Commissioner's Office at ico.org.uk.