This Privacy Policy describes how goodiessupermarket.co.uk (the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support, including through our automated chatbot system. In this Privacy Policy, we refer to any information that can uniquely identify an individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.

Device information

Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimise our Site.

Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.

Disclosure for a business purpose: shared with our processor Shopify and analytics providers.

Order information

Examples of Personal Information collected: name, billing address, shipping address, payment information (including credit/debit card details and other accepted payment methods), email address, and phone number.

Purpose of collection: to provide products or services to you to fulfil our contract, to process your payment information, arrange for shipping, provide invoices and/or order confirmations, communicate with you, screen orders for potential risk or fraud, and where in line with the preferences you have shared with us, provide information or advertising relating to our products or services.

Source of collection: collected directly from you, including at the point of purchase, account registration, newsletter sign-up, or enquiry submission.

Disclosure for a business purpose: shared with Shopify, payment gateways, shipping and fulfilment partners, and fraud prevention services.

Customer support information

Examples of Personal Information collected: name, email address, phone number, order details, and any additional information you provide in correspondence.

Purpose of collection: to provide customer support and resolve issues. Where you interact with our automated chatbot, we may collect and process the content of your conversation and any contact details you provide.

Source of collection: collected from you.

Disclosure for a business purpose: shared with customer service software providers (if applicable).

Newsletter and marketing sign-up information

Examples of Personal Information collected: name, email address, and phone number (where provided).

Purpose of collection: to send you marketing communications, promotions, and updates by email, SMS, WhatsApp, or telephone, where you have given your consent.

Source of collection: collected directly from you at the point of sign-up.

Disclosure for a business purpose: shared with email and SMS marketing platform providers.

Chatbot enquiry information

Examples of Personal Information collected: name, email address, phone number, order reference, and the content of your enquiry as submitted via our automated chatbot.

Purpose of collection: to handle and respond to customer enquiries, improve our chatbot service, and route queries to appropriate team members.

Source of collection: collected directly from you during chatbot interactions.

Disclosure for a business purpose: shared with our chatbot software provider and customer service team.

Minors

The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.

Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfil our contracts with you, as described above. For example:

• We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here:
  https://www.shopify.com/legal/privacy
• We may share your Personal Information to comply with applicable laws and regulations, respond to lawful requests, or otherwise protect our rights.

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We may use Google Analytics to understand how customers use the Site. You can read more about how Google uses your Personal Information here:
  https://policies.google.com/privacy
  You can opt-out of Google Analytics here:
  https://tools.google.com/dlpage/gaoptout
• We may share information about your use of the Site, purchases, and interaction with our advertisements with advertising partners through cookies and similar technologies.

For more information about how targeted advertising works, visit:
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

You can opt out of targeted advertising by visiting:

• Facebook: https://www.facebook.com/settings/?tab=ads
• Google: https://www.google.com/settings/ads/anonymous
• Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can also opt out via:
http://optout.aboutads.info/

Using Personal Information

We use your Personal Information to provide our services to you, including:

• Offering products for sale
• Processing payments
• Shipping and fulfilling orders
• Communicating updates
• Sending marketing and promotional communications by email, SMS, WhatsApp, or telephone (where consented or otherwise permitted under PECR)

Marketing Communications and How We Contact You

Where you have provided your consent, or where we have another lawful basis to do so, we may contact you for marketing, promotional, and service-related purposes using any of the following channels:

• Email
• SMS (text message)
• WhatsApp
• Telephone (including voice calls)

We will only contact you by these means where you have given us your explicit consent (for example, by ticking an opt-in box at checkout or when signing up for our newsletter), or where we have a legitimate interest to do so in connection with an existing customer relationship, in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

You may withdraw your consent or opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any email we send
• Replying STOP to any SMS or WhatsApp message we send
• Contacting us directly at info@goodiessupermarket.co.uk

Newsletter and Mailing List

If you sign up for our newsletter or mailing list, we will collect your name, email address, and where provided, your phone number. By subscribing, you give us your explicit consent to send you promotional and informational communications by email and, where you have also provided your phone number, by SMS, WhatsApp, or telephone.

You may unsubscribe from our mailing list at any time by clicking the unsubscribe link in any email or by contacting us at info@goodiessupermarket.co.uk. We will process your request promptly and in accordance with our legal obligations under UK GDPR.

Automated Chatbot and Customer Enquiry System

We use an automated chatbot to respond to customer enquiries submitted through our website. This system may collect and process any Personal Information you voluntarily provide during the interaction, including your name, email address, phone number, and the content of your enquiry.

The chatbot is used for the purpose of handling and routing customer service enquiries efficiently. Conversations may be reviewed by our team for quality assurance purposes. You can request to speak with a human member of our team at any time. By using our chatbot, you acknowledge that your conversation may be stored and processed in accordance with this Privacy Policy.

Limitation of Liability

To the fullest extent permitted by applicable law, DIYAR ALSHAM MARKET LIMITED shall not be liable for any loss, damage, or harm arising from your use of this Site or from any data breach, unauthorised access, or interruption to our services that is beyond our reasonable control. We employ appropriate technical and organisational measures to protect your Personal Information, but we cannot guarantee absolute security of data transmitted over the internet.

Third-Party Services and Data Processors

We may use third-party service providers to operate certain features of our Site, including payment processors, delivery partners, marketing platforms, customer service software, and chatbot providers. These third parties may have access to your Personal Information only to the extent necessary to perform their functions and are required to process it in accordance with applicable data protection law. We are not responsible for the privacy practices of third-party services; we encourage you to review their respective privacy policies.

Lawful basis (GDPR)

If you are a resident of the EEA or UK, we process your personal information under the following lawful bases:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (which do not override your fundamental rights)

Retention

When you place an order through the Site, we retain your Personal Information for our records unless and until you request erasure. Please note that if you request deletion of your account, certain information related to your orders may be retained for as long as required to fulfil our legal, financial, and regulatory obligations (for example, for tax, accounting, or fraud prevention purposes), even after your account has been closed. Analytics data collected about your use of our Site is anonymised at the point of collection and is automatically deleted after a period of two years.

Automatic decision-making

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data. However, we use an automated chatbot to handle initial customer enquiries. This chatbot may collect information you provide during the conversation (such as your name, order details, or contact information) in order to assist you or pass your query to a member of our team. You are not obliged to provide information to the chatbot and may request to speak to a human agent at any time.

Shopify may use limited automated decision-making to prevent fraud (such as temporary IP or card deny lists).

Your Rights (GDPR)

If you are a resident of the UK or EEA, you have the right to:

• Access the Personal Information we hold about you
• Request correction or update
• Request deletion
• Request portability

To exercise your rights, please contact us using the details below.

Your Personal Information may be processed in Ireland and transferred outside of the UK/EEA for storage and further processing, including to Canada and the United States. For more information, see Shopify’s GDPR documentation:
https://help.shopify.com/en/manual/your-account/privacy/GDPR

Cookies

A cookie is a small amount of information downloaded to your device when you visit our Site. We use functional, performance, analytics, and advertising cookies to improve your experience.

Cookies Necessary for the Functioning of the Store

_ab – Admin access
_secure_session_id – Storefront navigation
cart – Shopping cart
cart_sig – Checkout
cart_ts – Checkout
checkout_token – Checkout
secret – Checkout
secure_customer_sig – Customer login
storefront_digest – Customer login
_shopify_u – Account updates

Reporting and Analytics

_tracking_consent – Tracking preferences
_landing_page – Landing page tracking
_orig_referrer – Referral tracking
_s – Shopify analytics
_shopify_s – Shopify analytics
_shopify_sa_p – Marketing analytics
_shopify_sa_t – Marketing analytics
_shopify_y – Shopify analytics
_y – Shopify analytics

Cookies may be session-based or persistent. You can control cookies through your browser settings. More information is available at www.allaboutcookies.org.

Please note that blocking cookies may impact site functionality.

Do Not Track

We do not alter our data collection practices in response to “Do Not Track” browser signals.

Changes

Payment Security

We are committed to protecting your payment card details. We do not store your full payment card number on our systems at any point. Payment processing is carried out by our third-party payment processor, which is compliant with the Payment Card Industry Data Security Standard (PCI-DSS). We store only an encrypted token that represents your payment card for the purpose of processing your order. All payment information is transmitted using secure encryption technology.

Business Sale or Transfer

In the event that DIYAR ALSHAM MARKET LIMITED is sold, merged, restructured, or transfers any part of its business or assets to a third party, your Personal Information may be transferred to the new owner as part of that transaction. Any such transfer will be subject to the same data protection obligations as set out in this Privacy Policy, and you will be notified of any material changes to the way in which your data is processed.

Personalisation and Profiling

We may use information about your browsing behaviour, purchase history, and interactions with our website to personalise your experience, including displaying relevant products, offers, and recommendations. This activity may involve automated processing of your Personal Information. You have the right to object to profiling at any time by contacting us at info@goodiessupermarket.co.uk.

CCTV and On-Premises Recording

We may operate closed-circuit television (CCTV) cameras or other recording equipment at our premises for the purposes of security, safety, and crime prevention. Any images or recordings captured are Personal Information and will be processed in accordance with this Privacy Policy and applicable data protection law. CCTV footage is retained only for as long as necessary and is not shared with third parties except where required by law or in connection with a legal claim.

Telephone Call Recording

Telephone calls to or from our customer service team may be recorded for training, quality assurance, and dispute resolution purposes. Call recordings are Personal Information and will be retained for a limited period in accordance with our data retention schedule. If you do not wish your call to be recorded, please inform the team member at the start of the call.

Vulnerability and Accessibility Data

If you disclose information to us relating to a disability, health condition, or other vulnerability in order for us to provide an appropriate level of service (such as accessibility support or priority assistance), we will process this information with the utmost care. Such information constitutes special category data under UK GDPR and will only be used for the specific purpose for which it was provided. We will never use this information for marketing purposes without your explicit consent.

Data Breach Notification

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, in accordance with our obligations under UK GDPR. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay, providing details of the nature of the breach and the steps we are taking to address it.

Social Media Interactions

If you contact us via a social media platform (such as Facebook, Instagram, or WhatsApp), any Personal Information you provide during that interaction will be treated as a legitimate customer enquiry. We will use this information solely to respond to your query. Once your enquiry has been resolved, we will not retain your personal contact data from social media interactions beyond what is necessary, unless you have separately provided consent to receive marketing communications. Please be aware that social media platforms operate their own privacy policies, which govern the data they collect independently of us.

We may update this Privacy Policy from time to time for operational, legal, or regulatory reasons. Where we make significant changes to this Privacy Policy, we will endeavour to notify you directly by email to the address held on your account, in addition to updating this page. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your Personal Information.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

DIYAR ALSHAM MARKET LIMITED (trading as Goodies Supermarket)
Website: https://goodiessupermarket.co.uk
Email: info@goodiessupermarket.co.uk
Address: 39-43 Park Royal Road, London, United Kingdom, NW10 7LQ

Last updated: 11 March 2026

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/make-a-complaint/