Privacy policy

Privacy Policy

Effective Date: [Insert Date] Last Updated: [Insert Date]

1.1 Who we are

Akshar Supermarket UK  operates the website [aksharsupermarket.co.uk]  We are the data controller for personal information collected through the Site, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Company name: [Akshar Super Market]

• Company number: [Insert Companies House number]

• Registered address: [16 Tong Road LS12 1HX Leeds]

• Contact / Data Protection queries: {

  aksharleeds@gmail.com

  ], via our Contact Us page

1.2 Information We Collect

• Full name

• Email address

• Phone number

• Billing and delivery address

• Payment details (collected and processed securely by our payment processor — we do not store full card numbers)

• Order history

• Account login information

• Device information, browser type and IP address

• Cookies and website usage data (see Section 1.6)

1.3 How We Use Your Information and Our Legal Basis

UK GDPR requires us to have a lawful basis for each use of personal data. We rely on the following:

We only use your data for the purpose it was collected for, unless we reasonably consider we need it for another compatible reason.

1.4 Payment Security

Card and online payments are processed through PCI DSS–compliant third-party payment processors (e.g. Shopify Payments, Stripe). We do not store full payment card details on our own servers. Only the minimum information necessary (e.g. order value, last four digits, transaction reference) is retained for order and refund administration.

1.5 Data Retention

We keep personal data only as long as necessary for the purposes it was collected:

• Order and transaction records: retained for 6 years to meet HMRC/tax record-keeping obligations.

• Account data: retained while your account is active, and deleted or anonymised within [X] months of account closure/inactivity, unless we're legally required to keep it longer.

• Marketing data: retained until you withdraw consent or unsubscribe.

1.6 Cookies

We use cookies and similar technologies to:

• Keep your basket and checkout working correctly (strictly necessary — no consent required)

• Remember your preferences and login state

• Understand site usage and improve performance (analytics — consent required)

• Support marketing and retargeting, where enabled (consent required)

Under PECR, non-essential cookies are only set with your consent, given via our cookie banner. You can withdraw consent or change preferences at any time through the cookie settings link in our site footer, or through your browser settings.

1.7 Sharing Your Information

We share personal data only with:

• Delivery/courier partners, to fulfil your order

• Payment processors, to take payment securely

• IT, hosting and platform providers (e.g. Shopify), who process data on our instructions

• Professional advisers (accountants, auditors, legal counsel) where necessary

• Law enforcement or regulators, where we are legally required to disclose information

We never sell your personal data. Where a provider is based outside the UK/EEA, we ensure appropriate safeguards are in place (such as the UK's International Data Transfer Agreement or adequacy regulations).

1.8 Data Security

We use appropriate technical and organisational measures to protect your data, including encrypted transmission (SSL/TLS), access controls, and secure hosting. No system is 100% secure, but we take reasonable steps to protect your information against unauthorised access, loss, or misuse, and we have procedures to deal with any suspected data breach, including notifying the ICO and affected individuals where legally required.

1.9 Your Rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you

• Rectification — correct inaccurate or incomplete data

• Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements

• Restriction — limit how we use your data in certain circumstances

• Object — object to processing based on legitimate interests or for direct marketing

• Data portability — receive your data in a portable format, where technically feasible

• Withdraw consent — for marketing or cookies, at any time, without affecting prior lawful processing

• Complain — lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113, if you believe we have mishandled your data

To exercise any of these rights, contact us via our Contact Us page. We will respond within one month, as required by law.

1.10 Marketing

Where you have opted in, we may send you marketing emails about products, offers and promotions. You can unsubscribe at any time via the link in any marketing email, your account settings, or by contacting us directly. We do not send marketing communications without consent, in line with PECR.

1.11 Children's Privacy

Our Site is not directed at children under 16, and we do not knowingly collect personal data from children without parental consent.

1.12 Third-Party Links

Our Site may link to third-party websites. We are not responsible for the privacy practices or content of external sites, and encourage you to review their policies separately.

1.13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Material changes will be indicated by an updated "Last Updated" date, and where appropriate, notified to you directly.

1.14 Contact Us

For any privacy questions or to exercise your rights, please contact us through our Contact Us page.