Privacy Policy

We collect various types of information to provide and improve our services to you:

• Personal Information: Name, email address, phone number, delivery address, and billing address when you create an account or place an order.
• Payment Information: Payment card details and billing information processed securely through our payment providers.
• Order Information: Details of products purchased, order history, delivery preferences, and dietary requirements.
• Technical Information: IP address, browser type, device information, operating system, and browsing behavior on our website.
• Communication Data: Records of correspondence when you contact our customer service team or subscribe to our newsletter.
• Marketing Preferences: Your choices regarding promotional communications and personalized offers.

We use your personal information for the following purposes:

• Order Processing: To process and fulfill your orders, arrange delivery, and provide customer support.
• Account Management: To create and manage your account, including order history and saved preferences.
• Payment Processing: To securely process payments and prevent fraudulent transactions.
• Communication: To send order confirmations, delivery updates, and respond to your inquiries.
• Marketing: To send promotional offers, newsletters, and personalized recommendations (with your consent).
• Service Improvement: To analyze website usage, improve our products and services, and enhance user experience.
• Legal Compliance: To comply with legal obligations, resolve disputes, and enforce our terms and conditions.

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic:

• Essential Cookies: Required for the website to function properly, including shopping cart functionality and secure login.
• Performance Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality and your user experience.

Your payment security is our top priority. We implement industry-standard security measures to protect your financial information:

• Secure Payment Gateway: All payment transactions are processed through PCI DSS compliant payment providers.
• Encryption: Payment card details are encrypted using SSL/TLS technology during transmission.
• No Storage: We do not store complete payment card details on our servers. Only tokenized references are retained for recurring payments.
• Fraud Prevention: We employ advanced fraud detection systems to identify and prevent unauthorized transactions.
• 3D Secure: Additional authentication may be required for certain transactions to enhance security.

If you notice any suspicious activity on your account, please contact us immediately.

When you place an order with UKFreshBasket, we collect and process the following information:

• Product Details: Items ordered, quantities, prices, and any special instructions or dietary requirements.
• Delivery Information: Delivery address, preferred delivery time slots, and contact details for our delivery team.
• Order History: Records of past purchases to help you reorder favorite items and track spending.
• Substitution Preferences: Your choices regarding product substitutions when items are unavailable.
• Feedback and Reviews: Product ratings and reviews you provide to help other customers make informed decisions.

This information is used to fulfill your orders accurately, improve our product selection, and provide personalized shopping recommendations.

We work with trusted third-party service providers to deliver our services effectively. These partners may have access to your personal information only to perform specific tasks on our behalf:

• Payment Processors: Secure payment gateways that handle transaction processing.
• Delivery Partners: Courier and logistics companies that fulfill and deliver your orders.
• Email Service Providers: Platforms that send order confirmations, newsletters, and promotional emails.
• Analytics Providers: Tools that help us understand website usage and improve user experience.
• Customer Support Tools: Systems that enable us to provide efficient customer service.
• Marketing Platforms: Services that help us deliver targeted advertising and measure campaign performance.

All third-party providers are contractually obligated to protect your data and use it only for the purposes we specify. We do not sell your personal information to third parties.

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS protocols.
• Secure Storage: Personal data is stored on secure servers with restricted access and regular security audits.
• Access Controls: Only authorized personnel have access to personal information, and access is logged and monitored.
• Regular Updates: Our systems are regularly updated with the latest security patches and improvements.
• Employee Training: Our staff receive regular training on data protection and security best practices.
• Incident Response: We have procedures in place to detect, respond to, and report any data breaches promptly.

While we strive to protect your information, no method of transmission over the internet is completely secure. We encourage you to use strong passwords and keep your account credentials confidential.

Under UK GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your personal data.
• Right to Data Portability: Receive your personal data in a structured, commonly used format.
• Right to Object: Object to processing of your personal data for direct marketing or other purposes.
• Right to Withdraw Consent: Withdraw consent for data processing at any time where consent is the legal basis.
• Right to Lodge a Complaint: File a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details provided in the Contact Us section. We will respond to your request within one month.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained while your account is active and for a reasonable period after account closure for legal and business purposes.
• Order Records: Kept for up to 7 years to comply with tax and accounting regulations.
• Payment Information: Tokenized payment details retained only if you opt for saved payment methods; deleted upon request.
• Marketing Data: Retained until you unsubscribe from marketing communications or request deletion.
• Technical Data: Analytics and log data typically retained for 12-24 months.
• Customer Service Records: Correspondence retained for up to 3 years for quality assurance and dispute resolution.

After the retention period expires, we securely delete or anonymize your personal data. You may request earlier deletion by contacting us, subject to legal obligations.

UKFreshBasket is committed to protecting the privacy of children. Our services are not directed to individuals under the age of 18:

• Age Requirement: You must be at least 18 years old to create an account and place orders on our website.
• No Intentional Collection: We do not knowingly collect personal information from children under 18.
• Parental Responsibility: Parents and guardians are responsible for monitoring their children's online activities.
• Immediate Action: If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

If you believe we have inadvertently collected information from a child, please contact us immediately so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations:

• Notification: We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.
• Email Alerts: For significant changes, we may send you an email notification to the address associated with your account.
• Review Responsibility: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
• Continued Use: Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
• Opt-Out Option: If you disagree with changes, you may close your account and discontinue using our services.

Previous versions of this Privacy Policy are available upon request for your reference.