Privacy Policy

Last updated:

This is a template Privacy Policy for a UK-based online convenience store. It covers the standard points required under UK GDPR and the Data Protection Act 2018, but it is not a substitute for legal advice. Replace the placeholders (company number, ICO registration number, email) with your own details and have it reviewed by a solicitor before publishing.

1. Who we are

HeyRock ("we", "us", "our") is a convenience store based at 79 Bounds Green Road, London, N22 8DF, United Kingdom. We are the data controller responsible for your personal data when you use our website or place an order with us.

Company registration number: [Insert Company Number]
ICO registration number: [Insert ICO Registration Number]

2. Information we collect

Contact details: name, delivery address, phone number, email address.
Order information: items purchased, order value, delivery instructions.
Payment information: processed by our payment provider — we do not store full card numbers.
Technical data: IP address, browser type, and pages visited, collected via essential cookies (see our Cookie Policy).
Communications: records of calls, WhatsApp messages, or emails you send us.

3. How we use your information

To process and deliver your orders.
To verify your age for restricted products (alcohol, tobacco, knives) where legally required.
To respond to enquiries, complaints, and customer service requests.
To comply with our legal and regulatory obligations (e.g. tax records).
To improve our website and services.

4. Legal basis for processing

We process your data under the following lawful bases: performance of a contract (fulfilling your order), legal obligation (age verification, tax records), and legitimate interests (improving our service, preventing fraud).

5. Sharing your information

We share data only where necessary, with:

Payment processors, to take payment securely.
Delivery personnel, to fulfil your order.
Regulatory or law enforcement bodies, where legally required.

We do not sell your personal data to third parties.

6. Data retention

We keep order and transaction records for as long as required by UK tax law (currently 6 years), and other personal data only for as long as necessary for the purposes described above.

7. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data, where applicable.
Restrict or object to certain processing.
Request a copy of your data in a portable format.
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

9. Children

Our website and services are not directed at children. We do not knowingly collect personal data from anyone under 18, and age-restricted products are never sold to minors.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact us

If you have any questions about this policy or how we handle your data, contact us at:

HeyRock, 79 Bounds Green Road, London, N22 8DF
Phone: +44 7448 072821
Email: mobeenabdul06@gmail.com