This explains what information Not a Supermarket collects and why. Not a Supermarket is the controller for the information we hold. Each shop is the controller for the order details it receives from you.
What we collect
- Account details: name, email, phone, password (stored scrambled), and saved addresses.
- Order details: what you bought, from which shop, and how you want to receive it.
- Messages and reviews you post.
- Your location, only if you tap "Use my location", so we can show shops near you. It is used in your browser and for that search, and is not stored against your account.
- Basic technical logs and a login cookie.
Why
- To run the marketplace and pass your order to the shop (contract).
- To keep the site safe and stop fraud (legitimate interests).
- To send you news, only if you ask us to (consent). You can unsubscribe at any time.
Who we share it with
The shop you order from. Our hosting provider. Email delivery. Payment providers chosen by the shop (Stripe or PayPal), who process your payment under their own privacy terms. We do not sell your data.
How long
Orders are kept for 6 years for accounting and legal reasons. Accounts are kept until you ask us to delete them.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).