Last updated 17 September 2026
Privacy policy
This explains what Shahzad Halal Butchers (“we”) collects about you when you use this site, why, how long we keep it, who we share it with, and what you can ask us to do. We are the data controller. You can reach us at [email to be confirmed] or by post at Wembley, London.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Name, email address, password | To create and secure your account | Contract |
| Delivery address and phone number | To deliver an order and reach the driver to you | Contract |
| Orders, weights, prices, invoices | To fulfil orders and keep the accounts the law requires | Contract; legal obligation |
| Payments recorded against an order or account: the amount, the date, how it was paid and any reference | To know an order or invoice is paid | Contract; legal obligation |
| Trade account details, credit limit, payment terms | To run an account for a business customer | Contract; legitimate interest |
| Server logs (IP address, browser, pages requested) | To keep the site secure and working | Legitimate interest |
| The postcode area you check for delivery | To decide where to deliver next. We keep the area (the first part and one digit, such as NW10 2), not the full postcode, and not who asked | Legitimate interest |
We do not collect anything we do not need for one of these purposes. We do not buy data about you, and we do not use analytics, advertising or tracking cookies.
How long we keep it
- Orders, invoices and payments: six years after the end of the tax year they fall in, because HMRC requires it.
- Your account: until you delete it, or after three years of no orders, when we will email you before closing it.
- Server logs: 30 days.
When you delete your account, we remove your name, email address, phone number and address from it. The invoices and orders stay, because we must keep them, but they are no longer linked to a person we can identify.
Who we share it with
Only the companies that help us run the site, only what each needs, and each under a contract that limits what they may do with it:
- Neon hosts our database and sign-in, in London.
- Cloudflare delivers the site and stores product images and invoice documents.
- Resend sends our emails, such as order confirmations.
- Stripe takes card payments, when you choose to pay by card.
- Our accountant sees invoices, as the law requires.
Your card details never reach us. If you pay by card, you enter them on a page hosted by Stripe, who are the payment processor; we send them the amount and your email address so they can send you a receipt, and they send us back only whether the payment worked and a reference for it. We never see or store your card number. You can still pay cash to the driver or at the counter, and a trade account is invoiced and paid by bank transfer, in which case Stripe is not involved at all.
We do not sell your data and we do not share it for marketing. We will hand it over if the law compels us to.
Your rights
You can ask us to show you what we hold, correct it, delete it, give you a copy, or stop using it in a particular way. Email [email to be confirmed] and we will reply within one month. You can delete your own account at any time from your account page. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Accounts are for people aged 18 or over. We do not knowingly collect data about children, and nothing on this site is aimed at them.
Cookies
We set one cookie, which keeps you signed in. It is strictly necessary and we do not need your consent for it. See the cookie policy.
Changes
If we change this policy in a way that matters, we will email account holders before it takes effect and show the date at the top of this page.