Gorton Superstore | Cash & Carry and Off-Licence

Gorton Superstore (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit www.gortonsuperstore.uk or place an order with us.

1. Information We Collect

Account & order details: your name, email address, phone number, delivery / collection address and postcode.
Payment information: processed securely by our payment provider (Stripe). We do not store your card details on our servers.
Communications: the content of any emails, WhatsApp, telephone or contact-form messages you send us.
Technical data: IP address, browser type, device information, and cookies to help the site function and improve our service.

2. How We Use Your Information

To process your orders and arrange collection or delivery.
To send you order confirmations, delivery updates, and receipts by email and SMS.
To respond to your enquiries at info@gortonsuperstore.uk.
To improve our website, our product range, and our service through anonymised analytics.
To comply with our legal obligations (including tax, accounting, and fraud prevention).

3. Legal Basis (UK GDPR)

We process your personal data on the following legal bases:

Contract: when we need your information to fulfil an order you have placed with us.
Legitimate interests: to run and improve our business, prevent fraud, and keep our site secure.
Consent: where you have opted in to marketing emails or cookies that are not strictly necessary.
Legal obligation: where we are required by law to retain records (for example, invoices for HMRC).

4. Sharing Your Information

We only share your data with trusted third parties who help us run the store:

Payment processors (Stripe) to take card payments securely.
Delivery service — our own Gorton Superstore Delivery Operations team, who deliver your Saturday orders across Manchester.
Email & SMS providers (Resend, Twilio) to send order confirmations and updates.
Hosting & analytics providers who process data on our behalf under contract.

We do not sell your personal data to any third party.

5. Data Retention

We keep your order and account information for as long as necessary to fulfil the purposes set out in this policy and to meet our legal, tax, and accounting obligations (typically up to 6 years from the date of your last purchase).

6. Cookies

Our website uses essential cookies to make it work (such as remembering your basket) and optional analytics cookies to help us understand how visitors use the site. You can control cookies through your browser settings.

7. Your Rights

Under UK GDPR you have the right to:

Access a copy of the personal data we hold about you.
Ask us to correct information that is inaccurate.
Ask us to delete your personal data (subject to legal retention requirements).
Object to or restrict how we use your data.
Withdraw consent for marketing at any time.
Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We use appropriate technical and organisational measures to keep your data safe, including HTTPS encryption across the site and secure card processing via Stripe.

Privacy Policy