Privacy notice
Draft — under review. This page has not yet been checked by ERFT or its advisers and may change before launch.
Who is responsible
East River Foods Trading UK Ltd is the data controller for personal information collected through buyshea.co.uk. Contact: hello@buyshea.co.uk, TODO-OWNER postal address. TODO-OWNER: ICO registration number.
What we collect and why
| Information | Why | Legal basis |
|---|---|---|
| Name, email, phone, delivery address, items ordered | To take payment, deliver your order and send your receipt | Performance of a contract |
| VAT number (if you give one) | To issue a correct VAT receipt | Legal obligation |
| Order records | Accounting and tax records | Legal obligation |
| Which agent referred you (only if you said OK) | To pay that agent's commission | Legitimate interests |
| Basic technical logs (IP address, browser) | Security and keeping the site working | Legitimate interests |
We don't sell your information, and we don't use it for advertising.
Who we share it with
These companies process information for us, under contract:
- Stripe — takes payment on its secure checkout page and sends your receipt. Stripe also acts as a separate controller for fraud prevention; see stripe.com/privacy.
- Cloudflare — hosts this website and our order system.
- Royal Mail — delivers your order and sends delivery updates, so it receives your name, address and contact details.
If an agent referred you, we tell them that an order was placed and its value so they can be paid. We don't give agents your contact details or address.
Some of these providers process data outside the UK. Where they do, they use safeguards approved under UK law (such as the UK International Data Transfer Addendum).
How long we keep it
TODO-OWNER: retention periods. Suggested starting point for discussion with your adviser: order and tax records for 6 years after the end of the financial year (HMRC); customer-service emails for 2 years; technical logs for no more than 30 days.
Cookies and browser storage
See the cookies page. In short: your basket is stored in your own browser, and we only set an agent cookie if you agree.
Your rights
You can ask for a copy of your information, ask us to correct or delete it, object to our use of it, or ask us to restrict it. Email hello@buyshea.co.uk. If you're unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated 8 November 2026.