Privacy Policy.

This Privacy Policy describes how Oakmont Kingsley Ltd (“we”, “us”) collects, uses and protects personal data when you access the Oak platform and related services (the “Service”). It applies alongside our Terms of Service.

We are registered with the Information Commissioner's Office under registration number ZC124680. We are the “controller” of your personal data for the purposes of the UK GDPR and the Data Protection Act 2018.

Oakmont Kingsley Ltd (company no. 17077319), 66 Paul Street, London EC2A 4NA, trading as Oak. You can reach our data team at hello@oakmontkingsley.com.

Account data: name, business name, email address and password you provide when you register.

Business data: the financial information and documents you submit to produce your analyses. This may include personal data where, for example, it identifies individuals connected to your business.

Usage data: how you interact with the Service, including pages viewed, queries made and device and connection information.

Billing data: processed by Stripe; we receive limited billing metadata but never your full card details.

We use your personal data to: provide and operate the Service; generate your analyses and Advisor responses; manage your account and billing; communicate with you about the Service; secure, monitor and improve the Service; and meet our legal and regulatory obligations.

Where personal data is processed, our lawful bases are: contract (to provide the Service you've signed up for); legitimate interests (to improve and secure the Service, where balanced against your rights); consent (for optional marketing or non-essential analytics); and legal obligation (to meet regulatory requirements). You can withdraw consent at any time.

We do not sell your personal data. We share it only with service providers who help us operate the Service, under written contracts — for example cloud hosting, our AI processing providers, email delivery and payment processing (Stripe). We may also disclose data where required by law or to protect our rights.

Your business data is used to produce your analyses and is not used to train models for the benefit of other customers.

Some of our processors operate outside the UK. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or standard contractual clauses, and we only transfer the minimum data necessary for the Service.

We keep your personal data only for as long as necessary for the purposes set out in this policy. Account and billing data is retained while your account is active and for a reasonable period afterwards. You can request earlier deletion of your data, subject to any legal retention requirements.

Under UK data-protection law you have the right to: access your personal data; rectify inaccurate data; erase your data in certain circumstances; restrict or object to processing; port your data to another provider; and withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email hello@oakmontkingsley.com. We respond within one month, as the law requires.

The Service uses essential cookies and similar technologies to function and to keep you signed in. We only set non-essential cookies with your consent, which you can withdraw at any time. We do not use cookies to sell your data to third parties.

We take appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest and row-level isolation of customer data. No system is perfectly secure; we will notify you and the ICO of any personal-data breach where required by law.

We may update this policy from time to time. Where a change is material, we will notify you through the Service or by email. Your continued use of the Service after the effective date of any change constitutes acceptance of the updated policy.

If you have any question about this policy or your personal data, contact us at hello@oakmontkingsley.com or by post at 66 Paul Street, London EC2A 4NA.