Privacy Policy

At Grocefully, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Name and email address
• Delivery address and postcode
• Shopping preferences and dietary requirements
• Payment information (processed securely by Stripe)

Usage Information

We automatically collect certain information when you use our website:

• Device type, browser, and operating system
• Pages visited and time spent on pages
• Search queries and product interactions
• IP address and approximate location

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Our Service (Legal basis: Contract) - Process orders, manage your account, and place orders at supermarkets on your behalf
• Improve Our Service (Legal basis: Legitimate interest) - Analyse usage patterns and enhance our platform
• Communicate With You (Legal basis: Contract / Legitimate interest) - Send service updates, delivery notifications, and order confirmations
• Marketing (Legal basis: Consent) - Send promotional emails and offers (only with your consent)
• Security (Legal basis: Legitimate interest) - Prevent fraud and protect our users

3. Sharing Information With Supermarkets

When you place an order, we share necessary information with each supermarket to place and fulfil orders on your behalf:

• Your name and delivery address
• Your contact details (for delivery notifications)
• Your order details (items and quantities)
• Loyalty card numbers (if you have linked them)

Each supermarket has their own privacy policy governing how they use your information. We encourage you to review their policies:

• Tesco, ASDA, Sainsbury's, Morrisons, Ocado, Iceland

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can manage your preferences in the Cookie Settings section above.

Essential Cookies

Required for the website to function properly. These cannot be disabled and include session management and security features.

Analytics Cookies

Help us understand how visitors interact with our website. We use PostHog and Google Analytics to collect anonymous usage data.

Marketing Cookies

Used to deliver relevant advertisements and measure campaign effectiveness. These may be set by third-party advertising partners.

Chat Support Cookies

Enable our Intercom live chat feature for customer support. These cookies remember your chat history and preferences.

5. Third-Party Services

We work with trusted third-party services to provide our platform:

• Stripe - Secure payment processing
• Supabase - Database and authentication
• PostHog - Product analytics (with consent)
• Google Tag Manager - Tag management (with consent)
• Intercom - Customer support chat (with consent)
• Vercel - Website hosting

6. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@grocefully.com.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it.

Specific retention periods:

• Account data - Retained while your account is active, plus 2 years after account closure
• Order history - 7 years for legal and accounting purposes
• Marketing preferences - Until you unsubscribe or withdraw consent
• Analytics data - Anonymised after 26 months

9. Children

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@grocefully.com and we will take steps to delete such information.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@grocefully.com