Privacy policy
How we look after your personal information, in plain words.
Last updated: 23 September 2026
The short version
- We only collect what we need to send your order, answer your messages and run the shop
- We never sell your information
- We only send marketing emails if you say yes, and you can stop them at any time
- You can ask to see, correct or delete your information by emailing privacy@shopdiverge.com
1. Who we are
Diverge is a trading name of ONEROCK GROUP LTD, a company registered in England and Wales (company number 17014989). Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
We are the “controller” of your personal information. This means we decide how it is used, and we are responsible for keeping it safe.
Our registration number with the Information Commissioner’s Office (ICO) is ZC257607. For any privacy question, email privacy@shopdiverge.com.
2. What we collect
- When you order: your name, email address, phone number if you give it, billing and delivery addresses, and what you bought.
- Payment: card payments are handled by our payment provider, Elavon. We never see or store your full card number.
- When you contact us: your name, email address, order number and what you write.
- If you create an account: your login details, saved addresses and order history.
- If you sign up for emails: your email address and your choices.
- When you use the website: technical details such as your IP address, browser type and the pages you visit, kept in our server logs for security.
3. Information about health or needs
We never ask you to tell us about a diagnosis or a health condition, yours or anyone else’s. Some people choose to mention it, for example when asking which product might suit them or their child.
If you do, we only use it to answer your question, we keep it private, and we delete it when it is no longer needed.
4. How and why we use it
| What we use it for | Why we are allowed to |
|---|---|
| Processing, sending and supporting your order | To carry out our contract with you |
| Answering your messages | Our legitimate interest in helping you, or our contract with you if it is about an order |
| Keeping order and payment records | A legal obligation (UK tax law) |
| Keeping the website secure and preventing fraud | Our legitimate interest in protecting you and the shop |
| Sending marketing emails | Your consent, which you can withdraw at any time |
| Optional cookies, such as analytics, if we ever use them | Your consent, given through the cookie settings |
We need your name, address and email address to take and deliver an order. Without them, we cannot process it.
We do not make automated decisions about you, and we do not build profiles of you.
5. Who we share it with
We only share information with companies that help us run the shop, and only what they need. They must keep it safe and can only use it to provide their service to us.
- Hostinger hosts our website and its data (servers in the United Kingdom (Manchester)).
- Elavon processes card payments.
- Royal Mail delivers your parcel. They receive your name and address, and your email or phone number for delivery updates.
- Google Workspace provides our business email.
- Klaviyo sends our newsletter, only if you sign up.
We may also share information when the law requires it, for example with HMRC. We never sell your information.
6. International transfers
Some of these companies, such as Google and Klaviyo, may store data outside the UK, including in the United States. When that happens, the transfer is protected by UK data protection safeguards, such as the UK–US data bridge or approved contract terms.
7. How long we keep it
- Orders and payment records: 6 years after the end of the financial year they belong to, as UK tax law requires.
- Messages to us: up to 2 years after the conversation ends, unless they are part of an order record.
- Your account: until you ask us to delete it. Order records are still kept for 6 years.
- Email sign-ups: until you unsubscribe.
- Server logs: up to 14 days.
8. Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct it
- ask us to delete it
- ask us to limit or stop using it, or object to how we use it
- ask us to send it to you or another company in a common format
- withdraw your consent at any time, for example by unsubscribing from emails
Email privacy@shopdiverge.com. It is free, and we reply within one month. We may ask you to confirm who you are first.
If you are unhappy with how we handle your information, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
9. Cookies
We use a small number of cookies to make the shop work, such as remembering what is in your basket. We do not use advertising cookies. Our cookie policy lists them all.
10. Keeping your information safe
Our website uses encryption (HTTPS). Access to our systems is restricted and protected, and we keep our software up to date.
No system is completely secure. If something ever goes wrong that puts your information at risk, we will tell you, and the ICO when the law requires it.
11. Children
Our products are for all ages, but orders must be placed by an adult aged 18 or over. We do not knowingly collect information from children.
12. Changes to this policy
When we change this policy, we update this page and the date at the top. If a change is important, we will also tell you by email where we can.
13. Contact us
Email privacy@shopdiverge.com, or write to ONEROCK GROUP LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.