Privacy Policy

This policy explains how Avoca Express collects, uses and protects your personal information when you visit avoca-express.co.uk, create an account or place an order with us online, by phone or in the shop.

1. Who we are

Avoca Express is operated by AVOCA EXPRESS LTD (Private limited Company / company number SC846007), 9 South Bridge Street, Airdrie, ML6 6JQ. We are the data controller for the information described in this policy.

Contact: order@avoca-express.co.uk · 01236 762504

2. What we collect

• Order details: your name, phone number, email address, delivery address and postcode, the items you order, order notes and your chosen collection or delivery time.
• Allergy and dietary notes: anything you tell us about allergies or dietary needs so we can prepare your food safely.
• Account details: if you create an account, your login email, password (stored encrypted) and order history.
• Payment details: card payments are handled by our payment provider. We never see or store your full card number.
• Technical data: IP address, browser type and pages visited, collected through cookies (see section 7).

3. How we use it

• To prepare, deliver or hand over your order, and contact you about it (UK GDPR lawful basis: performance of a contract).
• To handle allergy information you give us, only for preparing your order (basis: your explicit consent, given when you add the note).
• To manage your account and show your past orders (basis: contract).
• To process refunds, deal with complaints and keep accounting and tax records (basis: legal obligation and legitimate interests).
• To keep our website secure and working properly (basis: legitimate interests).
• To send offers or news by email, only if you have opted in. You can unsubscribe at any time (basis: consent).

We do not sell your personal information.

4. Who we share it with

• Payment providers ( [WooPayments]) to take card payments securely.
• Our website host (Hostinger) and website software (WordPress, WooCommerce, Orderable), which store order data on our behalf.
• Our delivery drivers, who receive your name, address, phone number and order to deliver it.
• Google, for maps and reviews shown on our site.
• Authorities, if the law requires it.

Some of these providers may process data outside the UK. Where they do, they use approved safeguards such as UK International Data Transfer Agreements or standard contractual clauses.

Orders placed through Just Eat, Uber Eats or Deliveroo are covered by those companies’ own privacy policies.

5. How long we keep it

• Order and payment records: 6 years, as required for tax and accounting.
• Allergy notes: kept with the order record and not used for anything else.
• Accounts: until you ask us to delete your account, or after 3 years of no activity.
• Marketing consent: until you unsubscribe.

6. Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong;
• delete your information (unless we must keep it by law);
• restrict or object to how we use it;
• send your information to another organisation;
• withdraw consent at any time.

dataprotectionfee@ico.org.uk and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

7. Cookies

We use cookies that are needed for the site to work, such as keeping items in your basket, remembering your login and completing checkout. These cannot be switched off.

[If you use analytics:] With your permission we also use analytics cookies ([Google Analytics / Jetpack Stats]) to understand how visitors use the site. You can change your choice at any time using the cookie banner.

You can also block or delete cookies in your browser settings. Some parts of the site, like the basket, may not work without them.

8. Security

Our website uses SSL encryption (https). Passwords are stored encrypted and card payments go directly to our payment provider. Only staff who need your information to fulfil your order can access it.

9. Children

Our website is not intended for children under 13 and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time. The latest version will always be on this page with the date at the top.