Privacy Policy

Teedeux African Supermarket is the controller of the personal data described here. Contact us at teedeuxafricansupermarket@gmail.com for anything relating to your data.

• Order data - name, email, phone, delivery address, chosen fulfilment method, items ordered, order totals and order status.
• Payment data - a payment reference and the last digits/brand of the card returned by our payment provider. We never receive or store your full card number or security code.
• Account data - for staff and owner logins only: email address, hashed password and role.
• Communication data - messages you send us and a log of transactional emails we sent you (template, recipient, delivery outcome).
• Technical data - cart contents held in your browser's local storage, plus standard server logs needed to run and secure the site.

• To take payment, fulfil your order and handle refunds - performance of a contract.
• To send order confirmations and fulfilment updates - performance of a contract.
• To keep records for tax and accounting - legal obligation.
• To prevent fraud, secure the site and improve our range - legitimate interests.
• To send marketing, if we ever do - consent, withdrawable at any time.

We share only what is necessary with the processors that run the store: our payment provider (checkout and settlement), our hosting and database provider (site, order records and product images), and our email delivery provider (order and service emails). We also disclose data where the law requires it. We do not sell your personal data.

Our providers may process data outside your country. Where that happens for data protected by UK/EU law, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Order and transaction records are kept for the period required by tax law (typically 6-7 years). Contact messages are kept for up to 24 months. Staff accounts are removed when access ends. Cart data lives in your own browser until you clear it.

Subject to local law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, port it to another provider, or withdraw consent. You can also complain to your data protection authority. Email teedeuxafricansupermarket@gmail.com with the subject "Data request" and we will respond within one month. We do not use automated decision-making or profiling.

The site is served over HTTPS, admin functions are restricted by role and checked on the server, and card details are handled entirely by our payment provider. See our security and compliance page at /security for detail.

The store is intended for adults. We do not knowingly collect data from children under 16; contact us if you believe we have and we will delete it.