Privacy Policy
Last updated: 10 September 2026
This privacy policy explains how One Stop Paints collects, uses and protects your personal information when you use our website, contact us, create an account or place an order.
We only collect information that we need to operate our website, process orders, provide customer service and meet our legal obligations. We do not sell your personal information.
Who we are
One Stop Paints is responsible for the personal information described in this policy.
Our postal address is: Unit 7 Douglas House, Lock View Lane, Milton Keynes, Buckinghamshire, MK1 1BA .
If you have a question about your personal information or this policy, please contact us.
Information we collect
The information we collect depends on how you use our website. It may include:
- Your name, address, postcode and contact details.
- Delivery and billing information.
- Details of products you order and previous orders.
- Information you provide when creating or using an account.
- Vehicle, motorcycle, paint colour or colour-code information you provide when ordering custom-mixed products.
- Messages and information you send through our contact forms.
- Product experiences, reviews or other information you choose to submit to the website.
- Technical information such as your IP address, browser, device type and information collected through cookies or similar technologies.
If you choose to use a third-party sign-in option, we may also receive basic account information from that provider in accordance with the permissions you approve.
Payment information
Payments may be processed on our behalf by a specialist payment provider. Information required to complete the payment is passed securely to the payment provider as part of the transaction.
We do not use your payment information for purposes unrelated to processing your order, refunds, fraud prevention or resolving payment issues.
How we use your information
We use personal information where it is necessary to provide the products or services you have requested, operate our business or meet a legal requirement. This can include:
- Processing, preparing and delivering your order.
- Custom mixing products using the colour or vehicle information you provide.
- Taking and processing payments.
- Sending order, delivery and service-related information.
- Responding to questions, returns, complaints and customer-service requests.
- Managing customer accounts.
- Preventing fraud, misuse and unauthorised access to our website.
- Diagnosing technical problems and maintaining the security of our services.
- Understanding how our website is used and improving its performance and usability.
- Keeping records that we are required to retain for accounting, tax, legal or regulatory purposes.
Our lawful bases for using your information
UK data protection law requires us to have a lawful reason for using personal information. Depending on what we are doing, we may rely on:
- Contract - where we need your information to process an order or provide something you have requested.
- Legal obligation - where we need to retain or use information to comply with the law.
- Legitimate interests - where it is reasonably necessary to operate, protect and improve our business and website, provided those interests do not override your rights.
- Consent - where you have actively agreed to a particular use of your information, such as non-essential analytics cookies where consent is required.
Where we rely on consent, you can withdraw that consent at any time. Withdrawing consent does not affect processing that was lawful before it was withdrawn.
Who we share information with
We do not sell or trade your personal information. We may share limited information with trusted organisations where this is necessary to operate our business or provide your order.
These may include:
- Payment-processing providers.
- Delivery companies and couriers.
- Website hosting and technology providers.
- Analytics providers such as Google Analytics, where permitted.
- Security, anti-spam and fraud-prevention services.
- Authentication providers if you choose to use a third-party sign-in service.
- Professional advisers, insurers, accountants or legal advisers where reasonably necessary.
- Government bodies, regulators or law-enforcement organisations where we are legally required to provide information.
We only provide these organisations with information that is reasonably necessary for the service they provide.
Cookies and similar technologies
Cookies are small pieces of information stored on your computer, phone or other device when you visit a website. They can be used to keep the website working, remember information during your visit and help us understand how the website is being used.
We use essential cookies where they are needed for functions such as sessions, security, account features and shopping functionality. These cookies are necessary for parts of the website to work correctly.
We may also use analytics services, including Google Analytics, to help us understand how visitors use the website. Where consent is required, non-essential analytics cookies will only be used after you have chosen to accept them.
You can also control or delete cookies using your browser settings. Blocking some essential cookies may prevent certain parts of the website from working correctly.
How long we keep your information
We do not keep personal information for longer than we reasonably need it. How long information is retained depends on why it was collected.
- Order and transaction records may be retained for the period necessary to meet accounting, tax and other legal requirements.
- Customer-service correspondence is kept for as long as reasonably necessary to deal with the enquiry and any related issues.
- Account information may be retained while your account remains active and for an appropriate period afterwards where necessary.
- Technical and analytics information is retained according to the settings and retention periods used by the relevant service.
When information is no longer required, we will delete it, anonymise it or securely dispose of it where reasonably possible.
Keeping your information secure
We use appropriate technical and organisational measures to help protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
No website or internet transmission can be guaranteed to be completely secure, but we regularly review the measures used to protect our website and the information we hold.
Information processed outside the UK
Some of the technology and service providers we use may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that it is protected in accordance with applicable UK data protection requirements.
Your data protection rights
Depending on the circumstances and the reason we are using your information, you may have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete your personal information in certain circumstances.
- Ask us to restrict how your information is used in certain circumstances.
- Object to certain uses of your personal information.
- Ask for certain information to be transferred to you or another organisation.
- Withdraw consent where we rely on consent to use your information.
These rights do not apply in every situation, and there may be legal reasons why we need to continue keeping or using certain information.
To exercise any of these rights, please contact us. We may need to ask for information to confirm your identity before responding to a request.
Complaints
If you are concerned about how we have handled your personal information, please contact us first so that we have an opportunity to investigate and resolve the issue.
You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Children's privacy
Our website and products are not intended specifically for children and we do not knowingly collect personal information from children where it is not appropriate or necessary to provide our services.
Third-party websites
Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of those websites. If you follow an external link, you should review that organisation's own privacy information.
Automated decision-making
We do not use personal information to make decisions based solely on automated processing that have legal or similarly significant effects on you.
Changes to this privacy policy
We may update this privacy policy when our website, services or legal obligations change. The latest version will always be published on this page and the date at the top of the policy will be updated when significant changes are made.