Customers, shops and website visitors · last updated 7 October 2026
EUCART LTD (company number 17455065, registered office 30a Atlantic Close, Southampton SO14 3TA) is the controller of the personal data described here. This single notice covers the website and both apps (EUCart and EUCart Seller). Contact: [email protected]. ICO registration reference: ZC259860.
1. What we collect
- Customers: name, email, phone, delivery address and instructions, device location (with permission, to find nearby shops), order history, product preferences, messages and complaints, reviews, age confirmation for alcohol, device and app data
- Payment: handled by Stripe. We receive only a payment reference, card type and last four digits, not full card details
- Shops (owners and staff): contact details, business details, and the seller information HMRC requires (see section 3)
- Couriers: name and delivery tracking data received from our courier partner
- Website visitors: cookie and usage data (see our Cookie Notice)
Please avoid sending medical details. We use any allergy or health information you choose to provide only with your explicit consent, to handle your order. You can withdraw that consent by contacting us. We delete these details when no longer needed, unless retention is required by law.
2. Why we use it and our legal basis
- Create your account, take orders and payments, arrange delivery: Contract
- Share relevant order, contact and delivery details with the shop and courier: Contract
- Customer service, refunds and complaints: Contract; legitimate interests
- Fraud prevention and platform security: Legitimate interests
- Report seller information to HMRC; keep accounting records; age-restricted sales: Legal obligation
- Service emails (order updates): Contract
- Marketing emails and push notifications: Consent; for existing-customer emails, legitimate interests only where soft opt-in applies and opt-out is offered at collection and in each email
- Analytics to improve the Platform: Legitimate interests (see Cookie Notice)
- Allergy or health information you choose to provide: Consent, including explicit consent for health data
3. Shops: tax reporting
EUCart is a digital platform operator. We must collect seller information, verify it and report it to HMRC each year, together with the value of sales and fees. HMRC may share it with other tax authorities under international agreements. We will send each shop a copy of what we report.
4. Who we share data with
- the shop you order from: your first name and surname initial, and your order and refund details. If the shop delivers your order itself, it also receives your delivery address, instructions and phone number. If you collect your order from the shop, it also receives your full name and phone number. We do not share your email address with shops. The shop is a separate controller and may use these details only to prepare and fulfil your order, contact you about it, handle complaints and refunds, and meet legal and accounting duties. Shops may not use them for marketing;
- our courier partner(s), for example Stuart: name, address, phone and delivery instructions;
- Stripe, for payments and seller verification;
- Slack, for our team to handle your messages and support requests, as a processor;
- Google / Firebase (authentication, notifications, crash reports) and Google Maps (addresses and location), as processors;
- WordPress.com / Jetpack (Automattic), for website statistics (see the Cookie Notice);
- our hosting, email and app-distribution providers, as processors under contract;
- HMRC and other authorities, where the law requires;
- professional advisers, and a buyer or investor in the business, under confidentiality.
We don’t sell personal data. We don’t make decisions with legal or similarly significant effects about you by automated means alone.
5. International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum or Agreement.
6. How long we keep data
- Account data: while your account is active, then 2 years
- Order, payment and seller tax records: 6 years after the end of the financial year (legal requirement)
- Complaints: 3 years
- Marketing preferences: until you opt out, then kept as a suppression record
7. Your rights
You have the right to access, correct, delete, restrict or object to our use of your data, and to data portability. You can withdraw consent and opt out of marketing at any time. Email [email protected]. We will reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
8. Security
We use access controls, encryption in transit and reputable providers. Staff and contractors access data only when needed.
9. Children
The Platform isn’t intended for anyone under 18.
10. Changes
We will post updates here and tell you about significant changes.