1. Who We Are
Budha Stores is a UK-based grocery and supermarket retailer. We operate www.budhastores.co.uk and are the data controller of your personal information under the UK General Data Protection Regulation (UK GDPR).
2. Information We Collect
We may collect the following personal information:
- Contact information: name, email address, phone number, delivery address
- Account details: if you create an account, we store your login information securely
- Payment information: collected through secure third-party payment processors (we do not store card details)
- Device information: IP address, browser type, device used, cookies
- Order history & preferences: items purchased, delivery preferences, feedback
3. How We Use Your Information
We use your data for:
- Processing and fulfilling orders
- Providing customer support
- Personalising your shopping experience
- Sending order updates or promotional communications (if opted in)
- Maintaining the security of our website
- Complying with legal obligations
4. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contractual necessity – to process your orders
- Legal obligation – to comply with UK tax and regulatory laws
- Consent – for marketing emails (you may withdraw consent anytime)
- Legitimate interests – to improve our website and services
5. Marketing Communications
You will only receive marketing communications if you have opted in. You can unsubscribe at any time using the link in the email or by contacting us directly.
6. Sharing Your Information
We do not sell your data. We may share it with:
- Trusted third-party service providers (e.g. payment gateways, couriers)
- Legal authorities, if required by law
- Analytics tools (e.g. Google Analytics) to help improve our site
7. Cookies and Tracking
We use cookies to improve your browsing experience. You can manage cookie preferences through your browser settings. See our Cookie Policy for details.
8. Data Retention
We retain your personal data only as long as necessary for business or legal purposes. For example, order data is retained for up to 6 years for tax compliance.
9. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict processing
- Withdraw consent (for marketing)
- Lodge a complaint with the ICO (Information Commissioner’s Office)
10. Security Measures
We implement appropriate security measures, including SSL encryption, firewalls, and access controls to keep your data safe.
11. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page, and where appropriate, notified by email.