Privacy Policy

Who we are

Grocery Post Limited operates neighbourhood convenience stores and cafés in London, at 269 Archway Road, London N6 5BT and 280 West End Lane, London NW6 1LJ, and this website. We are registered in England and Wales under company number 12560781, and our registered office is 269 Archway Road, London N6 5BT. We are the data controller for the personal information described here.

What we collect

Through this website we collect only what you choose to send us: your name, your email address, and the content of anything you submit through our contact form or either of our job application forms. We do not ask for payment details on this site, and we do not operate accounts or logins.

In our stores, separate arrangements apply to card payments, loyalty and CCTV. Those are not covered by this website policy. Where this site links out — to Square to join our Postcard loyalty scheme, to Deliveroo, to Google Maps or to our social accounts — anything you enter there is collected by that company under its own policy, not by us.

Our lawful basis

We rely on legitimate interests: it is in your interest and ours that we can read and reply to a message you have chosen to send us. Where you write to us about a job, we also rely on taking steps at your request before entering into a contract. You can object to this at any time — see Your rights below.

Who handles it

Submissions from our contact form and from our job application forms are handled by Formspree, a third-party processor, which passes them to our email. Formspree hosts its service in the United States, so anything sent through any of these forms — including a job application — is transferred outside the UK under the standard contractual clauses Formspree puts in place. If you would rather not send your details to a US-hosted service, email us directly at hello@grocerypost.com instead.

This site is hosted on Cloudflare Pages, which records the usual server information — including your IP address — in order to serve the pages and protect the site from abuse.

Why we collect it

To answer your enquiry and, where relevant, to follow up about a job application, a supplier approach or a customer question. We do not use this information for marketing, and we do not sell or share it with third parties for their own purposes.

Cookies and storage

This site sets no cookies and carries no advertising. It saves a single item in your browser's session storage to remember that you have already seen the opening animation; it holds nothing about you, and your browser discards it when you close the tab.

Visitor analytics

We use Cloudflare Web Analytics to see how many people visit, which pages they read, roughly where in the world they are, and which sites link to us. We use it to decide what to write and what to fix. It is the only analytics on this site.

It does not set cookies and it stores nothing on your device. There is no identifier saved in your browser, nothing that follows you to another website, and no advertising profile. Cloudflare works out whether a visit is a repeat one by combining your IP address with your browser's user agent, hashing the result and discarding it; your IP address is used to work out which country you are in and is not stored.

That is why this site has no cookie banner. The law that requires those banners, the Privacy and Electronic Communications Regulations, applies to storing or reading information on your device. This does not do either, so there is nothing to ask you to consent to. We would rather not show you a banner you cannot meaningfully answer.

Cloudflare processes this on our behalf as our data processor, and also provides the hosting and security for this site. Their privacy policy is at cloudflare.com/privacypolicy.

Our lawful basis is legitimate interests: understanding whether a small business's website is doing its job. Because nothing is stored on your device and nothing identifies you, there is nothing for you to delete or turn off.

We should be straightforward about one thing. This is measured by Cloudflare at the point your browser asks for the page, not by a script running inside it. There is no tracker in this site's code for a blocker to block, which is also why it cannot slow the page down or follow you anywhere. If you would rather not be counted at all, the only way is not to visit, and we would rather tell you that than imply a choice you do not have.

If we ever add anything beyond this, we will update this page before it goes live, and where the law requires your consent we will ask for it first rather than assume it.

How long we keep it

Enquiries are kept only as long as needed to deal with them and to keep a reasonable record, and are deleted when no longer required.

Your rights

Under UK data protection law you can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict how we use it, or ask us to send it to you in a portable form. Write to hello@grocerypost.com and we will respond within one month.

You also have the right to object to our use of your personal information. Because we rely on legitimate interests, you can object at any time by emailing us, and we will stop unless there are compelling grounds to continue.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes we will update this page and the date above.

Contact

Questions about this policy: hello@grocerypost.com.