Privacy policy

Who we are

Bazarche sells Persian groceries to customers across the United Kingdom from 42 Grants Close, Mill Hill, London, NW7 1DD, United Kingdom. When you shop with us we are the data controller for the personal information described below, and we handle it under the UK GDPR and the Data Protection Act 2018.

This policy covers bazarche.co.uk and any order, account or message that starts there. If you would rather talk to a person about any of it, write to [email protected].

What we collect

We collect three kinds of information, and we ask for as little of each as an order allows.

• What you give us: your name, delivery and billing address, email address, phone number, account password and anything you write to us about an order.
• What your order creates: the items in your basket, the delivery option you chose, order and return history, and the last four digits and expiry of the card used. We never see or store your full card number. That stays with our payment processor.
• What your device sends: IP address, browser and device type, the pages you open on the shop and the searches you run, collected through cookies and similar technologies as described in our cookie policy.

Why we use it, and on what basis

We only use your information where the law gives us a basis for it.

Who we share it with

We do not sell your personal information. We share only what a supplier needs to do its job for us, and each one is bound to use it for nothing else.

• Our payment processor, to take payment and issue refunds.
• Our delivery carriers, to get the parcel to your door, which means your name, address and phone number.
• Our email provider, if you have asked to hear from us.
• Our analytics provider, where you have accepted analytics cookies.
• Professional advisers, and any authority we are legally required to disclose to.

Where your information goes

Our suppliers are chosen to keep personal information inside the UK or the European Economic Area wherever possible. Where a supplier processes information outside those areas, we rely on UK adequacy regulations or the International Data Transfer Addendum to the standard contractual clauses, so your information keeps the same protection it has here.

How long we keep it

• Order and payment records: six years after the end of the tax year they fall in, because HMRC requires it.
• Your account: for as long as you keep it. Close it and we delete it, keeping only the order records above.
• Marketing consent: until you withdraw it, and for two years afterwards so we can prove you were removed.
• Support emails: two years from the last message in the thread.

Your rights

Under UK data protection law you can ask us to do any of the following, free of charge, and we will answer within one month.

• Give you a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Erase your information, where we have no continuing legal reason to keep it.
• Restrict or object to how we use it, including profiling for marketing.
• Send a copy to you or another provider in a portable format.
• Withdraw a consent you gave us, at any time, without affecting what we did before you withdrew it.

Write to [email protected] to use any of these. We may ask you to confirm who you are first, so that we do not hand your information to somebody else.

How we protect it

The shop runs over an encrypted connection, card details are handled entirely by our payment processor and never reach our systems, and access to customer records is limited to the people who need it to fulfil orders. No system is perfect, and if a breach ever puts your rights at risk we will tell you and the Information Commissioner without delay.

Children

The shop is not intended for children. We do not knowingly collect information from anyone under 16. If you believe a child has given us their details, write to us and we will delete them.

Changes and complaints

When this policy changes we update the date at the top of the page, and we will tell you directly if the change affects how we use information you have already given us.

If you are unhappy with how we have handled your information, tell us first at [email protected] so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.