Privacy policy

PRIVACY POLICY

Last Updated: July 8, 2026

NoshRocket ("we", "us", or "our") operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping and local courier experience (the "Services"). NoshRocket is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using our Services, or otherwise communicate with us, in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Information We Collect

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. We collect:

  • Contact Details: Your name, delivery address, billing address, phone number, and email address.

  • Account Information: Your username, encrypted password, preferences, and order settings.

  • Transaction Information: Details of the items you view, add to your cart, or purchase, along with your past purchase history to facilitate fast reordering from your account menu.

  • Communications: Any information you provide when interacting with our live chat portal or customer support channels.

  • Device & Usage Information: IP addresses, browser types, and unique device identifiers collected automatically via cookies when you navigate the site.

2. Lawful Basis for Processing (UK GDPR Compliance)

Under the UK GDPR, we must establish a specific lawful basis for every way we handle your data. We organize our processing as follows:

Purpose for Processing Categories of Personal Data Involved Lawful Basis under UK GDPR
Account Management: Creating and maintaining your account, and saving order histories for quick reordering. Contact Details, Account Information, Transaction Information. Legitimate Interests: To provide a convenient, seamless customer experience.
Order Fulfilment: Processing checkout payments, fulfilling local shop runs, and arranging courier routing. Contact Details, Transaction Information, Financial Information. Performance of a Contract: Necessary to execute and deliver the shopping/courier service you purchased.
Customer Support: Managing inquiries, order errors, and live chat troubleshooting. Contact Details, Communications, Transaction Information. Legitimate Interests / Performance of a Contract: Necessary to resolve active delivery issues.
Marketing & Communications: Sending promotional updates, offers, and local discounts via email. Contact Details, Account Information. Consent: Provided explicitly via an opt-in checkbox at checkout. You can opt out at any time.
Fraud Prevention & Security: Authenticating accounts, securing payments, and detecting malicious activity. Account Information, Financial Information, Device Information. Legal Obligation / Legitimate Interests: To protect our platform and consumers from cybercrime and fraud.
Age Verification: Ensuring compliant handovers of alcohol and tobacco products upon delivery. Identity Documents (Passport/Driving Licence/PASS card sighted by courier). Legal Obligation: Sighting valid ID is mandatory to comply with UK licensing laws. Note: We do not store or record photos of your ID cards.

3. Marketing and Communication Preferences

We may occasionally send you promotional emails about new local vendors, menu additions, or exclusive platform discounts.

  • The Right to Opt Out: You can stop receiving promotional communications at any time by clicking the "unsubscribe" link included at the bottom of any marketing email we send.

  • Transactional Messages: If you opt out of marketing communications, we will still send you critical, non-promotional updates regarding your active orders, account updates, or support tickets.

4. How We Disclose Personal Information

We do not sell or rent your personal information. We share your data strictly with essential service providers necessary to operate:

  • Shopify: Our core e-commerce infrastructure provider hosts your account data securely.

  • Couriers & Delivery Personnel: Independent drivers receive only the minimum contact details (name, delivery address, phone number) necessary to physically transport your items.

  • Wallid: Our secure checkout gateway handles all payment processing. Financial data is encrypted and handled completely by Wallid; NoshRocket never sees or stores your full credit or debit card details.

5. Children's Data

Our Services are not intended for use by children. We do not knowingly collect personal information from individuals under 18 years of age. If you are a parent or guardian and believe your child has created an account, please contact us immediately at the details below to ensure its swift deletion.

6. Data Retention and Deletion Timescales

How long we keep your data depends on operational necessity. We hold transaction records to power your fast-reordering menu and maintain accounting history.

If you submit an official data deletion request, we will pass this instruction directly through to Shopify and our third-party data processors via automated webhooks. While we initiate this process immediately, complete system erasure across all secure backups and ecosystem integrations will be permanently completed within 30 days in compliance with statutory UK GDPR guidelines.

7. Your Rights under UK Law

As a resident of the United Kingdom, you possess clear statutory rights regarding your personal information under the UK GDPR:

  • Right to Access / Know: The right to request copies of the personal data we hold about you.

  • Right to Delete / Erasure: The right to request that we wipe your personal information from our systems.

  • Right to Correct: The right to request the rectification of inaccurate or incomplete personal information.

  • Right to Data Portability: The right to request that we transfer your structured data profile directly to you or another third-party service provider under certain circumstances.

  • Right to Restrict or Object: The right to object to or restrict our processing of your data under legitimate interests or direct marketing pathways.

To exercise any of these rights, please contact our support desk at Launchpad@Noshrocket.co.uk.

8. Complaints

If you have a complaint regarding how we process your personal information, please contact us directly so we can resolve it immediately.

If you remain unsatisfied with our handling, you have the statutory right to lodge an official complaint directly with the UK's data protection supervisory authority:

  • Authority: Information Commissioner’s Office (ICO)

  • Website: www.ico.org.uk

9. International Transfers

Because our platform is powered by Shopify, your personal information may be transferred to, stored, and processed outside of the United Kingdom (such as in Canada or the United States). Where data is transferred outside the UK, we rely on recognized legal safeguards, including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, ensuring your privacy rights remain fully protected.

10. Data Controller Contact Disclosures

For the purposes of the UK GDPR and data protection laws, NoshRocket is the official Data Controller of your personal information.

Should you have questions about our privacy practices, this policy, or if you would like to initiate a data access or deletion request, please reach out to us at our registered physical operations base or via our dedicated brand email:

  • Data Controller: Barry James, trading as NoshRocket

  • Physical Contact Address: 98 Carmelite Way, Salisbury, SP1 2HW, United Kingdom

  • Email Contact: Launchpad@Noshrocket.co.uk

  • Web Presence: Noshrocket.co.uk & Noshrocket.com