Privacy Policy

1. Who this policy covers

Mama Miracle African Shop uses personal information to operate its grocery shop, customer accounts, loyalty programme and delivery services. This notice covers customers, visitors and driver applicants, and explains the main uses of personal information in our staff administration tools. The shop is responsible for the purposes for which it uses this information.

2. Information we collect

Customer information may include your name, email address, phone number, delivery address, account details, orders, invoices, returns, messages and loyalty history. We also receive payment status and transaction references needed to manage purchases.

Driver applications may include contact details, vehicle information, driving licence details and uploaded licence or insurance documents. Delivery records can include pickup preferences, assigned orders and progress updates. Where you permit location access, GPS coordinates are used for nearby pickup offers and delivery tracking.

Where staff administration features are used, records may include employment details, schedules, payroll information and associated documents. Technical information such as browser, device, session and security logs may also be processed to operate and protect the service.

3. How and why we use information

We use information to process and fulfil orders, arrange collection or delivery, provide order updates, handle returns and enquiries, maintain loyalty balances, assess driver applications, manage deliveries and administer staff records where relevant.

Depending on the purpose, our lawful basis under UK data protection law is performance of a contract or steps requested before a contract, compliance with legal obligations, legitimate interests such as security and fraud prevention, or consent where required. Where legitimate interests are used, we must consider your rights and interests. Marketing requiring consent is separate from service messages.

4. Location and delivery information

Drivers can choose whether to grant browser location permission. Location is used to help identify nearby pickups and, during an active delivery, to support tracking. Relevant order and delivery details are shared with the assigned driver, the fulfilling shop and the customer as needed to complete the delivery.

You can withdraw device location permission in your browser or device settings. Doing so can prevent location-based features from working, but does not erase location information already recorded.

5. Sharing and service providers

Information is shared as necessary with authorised shop staff, assigned delivery drivers, payment providers, hosting and authentication providers, and other providers supporting the service. Payment card processing is handled by the payment provider shown at checkout; do not include full card details in shop messages.

We may disclose information when required by law, to resolve disputes or to protect legal rights. We do not sell personal information. If processing involves a transfer outside the UK, applicable data protection rules require an appropriate transfer mechanism and safeguards.

6. Cookies and browser storage

Cookies and browser storage support features such as sign-in sessions, security, the shopping basket and saved preferences. Optional analytics or advertising technologies, where used, are subject to consent where required. Use the cookie choices provided on the site and your browser settings to manage these technologies. Blocking essential storage can affect shopping or sign-in functionality.

7. Retention and security

Information is retained for as long as necessary for the purpose for which it was collected, including fulfilling orders, managing accounts, meeting accounting or employment obligations and resolving disputes. Different record types may require different retention periods. Contact the shop to ask about a particular record or to request deletion.

Access should be limited to authorised people who need the information for their work. No online service can guarantee absolute security. Keep your account credentials private and report suspected unauthorised access promptly.

8. Your rights

Subject to applicable conditions and exceptions, you may request access, correction, erasure, restriction or portability of your personal information, and may object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing already carried out lawfully.

Contact the shop using the details in the homepage footer to exercise a right. We may need to verify your identity before handling a request. Requests are normally answered within one month, with extensions where permitted by law. You can complain to the UK Information Commissioner’s Office at ico.org.uk if you have concerns about how your information is handled.

9. Children and policy updates

The service is not directed at children, and children should not submit driver applications or personal information without appropriate involvement from a parent or guardian. Contact the shop if you believe a child’s information has been provided improperly.

This notice may change as services or legal requirements change. The last-updated date above identifies the current version. Material changes will be communicated where required.