PRIVACY POLICY

Last updated: 30 June 2026

WHO WE ARE

EdiblesByShally LIMITED operates an ecommerce store selling Nigerian groceries and food products across the United Kingdom.

Company number: 16381488

Website: https://ediblesbyshally.com

Contact details:
Email: [email protected]
Phone and WhatsApp: +44 7851 280598

Correspondence address:
C/O Aacsl Accountants Limited
1st Floor, North Westgate House
Harlow
Essex
England
CM20 1YS

DATA WE COLLECT

We collect the following personal data when you use our website or place an order:

Full name
Email address
Phone number
Delivery address
Billing details
Order history
IP address
Device and browser information
Website activity
Cookies
Marketing preferences

HOW WE USE YOUR DATA

We use your personal data to:

Process and deliver your orders
Send order and payment confirmations
Provide customer support
Manage refunds, replacements, and complaints
Improve website performance and user experience
Send marketing messages where you have agreed

LEGAL BASIS FOR USING YOUR DATA

We process your data under the following legal bases:

Contract: to fulfil your order
Legal obligation: for tax and accounting records
Legitimate interest: to run and improve our business
Consent: for marketing communications

PAYMENT PROCESSING

We use Stripe and bank transfer for payments.

Stripe processes card payments securely under its own systems and policies.

We do not store full card details.

Bank transfer orders are only processed after payment has been confirmed.

MARKETING COMMUNICATIONS

We may send marketing messages if you provide your details at checkout or sign up for updates.

These may include:

Email offers and promotions
WhatsApp messages
Product updates
Discounts and seasonal offers

You can opt out at any time.

Email:
Use the unsubscribe link in any email.

WhatsApp:
Reply STOP or contact us directly.

You will still receive messages related to your orders.

THIRD PARTY SERVICES

We use trusted third-party providers to operate our business:

GoHighLevel for CRM, email, and WhatsApp automation
Stripe for payment processing
Royal Mail for deliveries

These providers process your data under their own privacy policies.

DATA RETENTION

We keep your personal data only as long as needed:

Order and transaction records are kept for legal and tax purposes
Customer support records are kept to help resolve issues
Marketing data is kept until you opt out or request deletion

DATA SECURITY

We use appropriate security measures to protect your data.

Access is limited to authorised staff only.

We take reasonable steps to prevent loss, misuse, or unauthorised access.

YOUR RIGHTS

Under UK GDPR and the Data Protection Act 2018, you have rights including:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Request restriction of processing
Request data portability
Object to certain types of processing

To exercise your rights, contact us using the details above.

COOKIES

We use cookies to operate our website, support checkout, and understand basic usage.

We do not currently use advanced advertising or tracking tools.

INTERNATIONAL DATA TRANSFERS

Some of our service providers may process data outside the United Kingdom.

We ensure appropriate safeguards are in place as required by UK GDPR.

COMPLAINTS

If you are unhappy with how we use your data, contact us first so we can resolve it.

You also have the right to complain to the Information Commissioner’s Office in the UK.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.