Privacy Policy
Last updated: 5 June 2026
This Privacy Policy explains how Oshi Group Ltd (“Oshi Group”, “we”, “us”) collects, uses, shares and protects personal data when you use Lazlo (the “Service”) and our website. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is Oshi Group Ltd, a company registered in England and Wales (Companies House No. 16129680), Nightingale House, 46–48 East Street, Epsom, Surrey KT17 1HQ, United Kingdom. For any privacy question, contact us at support@oshigroup.co.uk.
2. The data we collect
- Account & contact data — name, business name, email address and phone number you provide when enquiring or signing up.
- Business & commerce data — when you connect a sales channel, we process order, sales, fee, inventory, cost, ad-spend and product data drawn from your connected accounts. Connections are read-only; we do not place orders, move stock or initiate payouts.
- Usage & technical data — log data, device/browser information and basic analytics needed to operate and secure the Service.
- Communications — the content of messages you send us by email, phone or our contact form.
3. How and why we use it (lawful bases)
- To provide the Service — performance of a contract with you (UK GDPR Art. 6(1)(b)).
- To respond to enquiries and set up trials — to take steps at your request prior to entering a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)).
- To secure, maintain and improve the Service — our legitimate interests in running a reliable, secure product (Art. 6(1)(f)).
- To meet legal and accounting obligations — compliance with a legal obligation (Art. 6(1)(c)).
4. Sharing & sub-processors
We do not sell your data. We share it only with service providers who process it on our behalf under contract, including hosting and infrastructure, database, and transactional email providers. We also process data from the third-party channels you choose to connect (such as Shopify, Amazon, Not On The High Street and Klaviyo), strictly to provide the analytics you have asked for. A current list of sub-processors is available on request.
5. International transfers
Where data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. Retention
We keep personal data only for as long as necessary for the purposes above, to comply with legal obligations, and to resolve disputes. When you close your account you may ask us to export or delete your data.
7. Security
We use appropriate technical and organisational measures, including encryption in transit and at rest and access controls, to protect personal data against unauthorised access, loss or disclosure.
8. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. To exercise any right, email support@oshigroup.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
This website uses only cookies and similar technologies that are strictly necessary to operate the site. If we introduce analytics or marketing cookies, we will request your consent and update this policy.
10. Children
The Service is intended for businesses and is not directed at children under 16.
11. Changes
We may update this policy from time to time. We will post the revised version here and update the “last updated” date above.
12. Contact
Oshi Group Ltd, Nightingale House, 46–48 East Street, Epsom, Surrey KT17 1HQ, United Kingdom · support@oshigroup.co.uk