Privacy Statement

1. Who we are

Chain Order Ltd is the data controller of any personal data you give us. We're registered in England and Wales with our head office at Newcastle upon Tyne. We're registered with the ICO.

2. What we collect

• Account data — your name, email, phone, password and delivery addresses
• Order data — items ordered, prices, delivery method and notes
• Payment data — handled by our PCI-compliant payment partners; we never see your full card number
• Loyalty data — points balance, redemptions and tier
• Device data — browser, IP and rough location, used for security and analytics

3. How we use it

We use your data to fulfil your orders, run our loyalty programme, prevent fraud, improve the service, and (with your consent) send you marketing.

4. Sharing

We share data with our delivery partners (only as needed to deliver), payment processors, analytics providers and (where required) regulators. We never sell personal data.

5. Your rights

You have the right to access, correct, delete and port your data, and to object to processing. Email [email protected] to exercise any of these.

6. Retention

We keep order data for 7 years (HMRC), account data while your account is active, and analytics data for 26 months.