Privacy

What we collect

For an order: your name, email address, optional phone number, what you ordered and any note you add. For a delivery, also the address, a mobile number for the driver, and the result of your photo-ID check. For an account: the same details and your password, which is stored only in a one-way hashed form. If you give us a mobile number for texts: the number, and a record of each choice you make about texts, with when and where you made it and the words you were shown.

Your photo ID and selfie

For delivery orders of age-restricted products, our ID provider, Didit, photographs your government ID and your face and compares them, on our behalf, to confirm who you are and how old you are. Comparing faces uses biometric data. We only start the check when you ask to, after telling you this. Didit keeps the images under its own retention terms; we keep only the result and Didit's reference, never the images, your date of birth or your document number. Neither we nor Didit sell it.

What we use it for

To prepare your order, tell you how it's getting on, show your order history, and keep the record of each delivery sale and its age check that the law asks a delivery seller to keep. We send offers by email only, and only if you ask for them, and you can stop them any time from your account or from any offer email.

Text messages

We text you only what you ask for: a code to verify your number, and updates about an order when you tick the box for them at checkout. We don't send offers by text. The full terms are on our text messages page. Reply STOP to any text to stop, or HELP for help.

Who else sees it

For a delivery, the driver's company (Uber) gets your name, address, mobile number and what is in the bag, so they can bring it. Our ID provider (Didit) gets what it needs to check your ID. Card details go to the card processor, never to us. The company that delivers our text messages gets your mobile number and the text, only to deliver it. The small map of our store at the foot of each page is Google Maps: when it loads, Google receives your device's internet address, as it does from any site that shows one.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

What we don't do

We never see your card number: online payment for delivery goes straight to the card processor. We don't keep copies of ID. We don't sell your details, and we never share your mobile number or your text-message consent for anyone else's marketing.

Questions and requests

Contact the shop to see, correct or remove the details we hold about you.