1. Who we are
Heritage Grocer is the trading name of HERITAGE GLOBAL FOODS LTD (Company No. 16229066), registered office Unit C5, Kembrey Street, Elgin Industrial Estate, Swindon, England, SN2 8UY, directed by Sreeshankar Sreeshankar. We are the data controller for personal data processed through this website. Contact: orders@heritagegrocer.co.uk, +44 7836 674533. This policy explains how we handle your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.
2. What we collect and why
Order and delivery data — your name, delivery address, email address, phone number and order contents. We use this to fulfil the contract when you place an order (lawful basis: contract). Because we deliver with our own vehicles, your delivery details are not shared with any external courier.
Payment data — card payments are processed by our payment provider. We never see or store your full card number. The payment provider processes your data as an independent controller under its own privacy policy (lawful basis: contract).
Account data — if you create an account, we store your login email and order history so you can reorder easily (lawful basis: contract and legitimate interests).
Enquiry data — if you contact us by form, email or phone, we keep the correspondence for as long as needed to resolve your enquiry (lawful basis: legitimate interests).
Allergy information you volunteer — if you tell us about an allergy in an order note or enquiry, we use it only to handle that order or enquiry safely. Health-related information is special category data; we process it on the basis of your explicit consent given when you provide it, and we do not use it for any other purpose.
3. Cookies
This website uses only strictly necessary cookies required to run the shop (basket, checkout, security). We do not run advertising, analytics or social media tracking cookies. Details are in our Cookie Policy.
4. Who we share data with
We share personal data only with: our card payment provider (to take payment); our website hosting provider (which stores the site database); and public authorities where the law requires it. We do not sell personal data, we do not share it with marketing companies, and we do not transfer it outside the UK except where our payment or hosting providers do so under UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.
5. How long we keep data
Order and payment records are kept for six years after the tax year of the transaction, as required by UK tax law. Enquiry correspondence is kept for up to two years. Account data is kept until you ask us to close your account. Allergy information volunteered with an order is kept only with that order record.
6. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any right, email orders@heritagegrocer.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
7. Changes to this policy
We will post any changes on this page and update the date below. This policy was last updated in July 2026.
