You know us as SHOCAL, but our legal name is SHOCAL Ltd ("we", "our", "us" or "SHOCAL"). We are committed to protecting the privacy of all users of our website shocal.org, mobile applications and social media accounts (together, the "Sites"). We are the "controller" of the personal information we process, unless otherwise stated.
Please read this privacy policy that explains how we use and protect your personal information, which is any information about you or that can be used to identify you.
1. Contact details
If you have any queries or requests about this privacy policy or how we handle your information more generally, you can get in touch by contacting us.
SHOCAL Ltd
250 Church Road
Manchester, M41 6HD
United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk/make-a-complaint
2. Information we collect about you
As part of our commitment to the privacy of our customers, and visitors to our Sites more generally, we want to be clear about the sorts of information we will collect about you.
Personal Information
Account Information: Name, email address, phone number, and password when you create an account
Delivery Information: Postal address and delivery instructions
Payment Information: Payment card details (processed securely via Stripe)
Order History: Details of orders you have placed through our platform
Communications: Messages you send to us or to vendors through our platform
Log Data: IP address, browser type, pages visited, time spent on pages
Location Data: Postcode and approximate location to show local businesses
Cookies: See section 4 for more details
3. Use of your information
We use your information in a variety of ways, as described below, and only if we have a valid reason to do so.
Provide Services: To process orders, facilitate deliveries, and connect you with local businesses
Account Management: To create and manage your account, and authenticate your identity
Communication: To send order confirmations, updates, and respond to your enquiries
Improvement: To analyse usage patterns and improve our services
Marketing: To send promotional communications (with your consent)
Legal Compliance: To comply with legal obligations and protect our rights
Safety: To detect and prevent fraud, abuse, and security issues
Legal Basis (UK GDPR)
Contract: Processing necessary to fulfil our contract with you
Legitimate Interests: Processing necessary for our legitimate business interests
Consent: Where you have given explicit consent
Legal Obligation: Processing necessary to comply with legal requirements
4. Cookies
We and our partners use cookies and other similar technologies on our Sites to collect information about you.
Cookies are small text files stored on your device when you visit our website. We use them to:
Remember your preferences and settings
Keep you signed in to your account
Understand how you use our platform
Improve our services based on usage data
Deliver relevant advertising
You can manage your cookie preferences through your browser settings or by using our cookie consent tool. For more information, please see our Cookie Policy.
5. Marketing and advertising
If you have placed an order with us or signed up to SHOCAL, we may use your information to send you marketing communications and show you relevant advertising.
We may contact you via:
Email
SMS and push notifications
Post
Phone
You can opt out of marketing communications at any time by:
Clicking the "unsubscribe" link in our emails
Updating your preferences in your account settings
We will only retain your information for as long as reasonably necessary to fulfil the purposes we collected it for, and for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
We retain your personal information for as long as necessary to:
Provide our services to you
Comply with legal obligations (e.g., tax records for 7 years)
Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal purposes.
In the event of a complaint or if we reasonably believe there is a prospect of litigation, we may retain your information for a longer period.
7. Sharing your information
We share your information only where necessary for the purposes set out in the "Use of your information" section above.
We may share your information with:
Local Businesses: Vendors you order from receive necessary information to fulfil your order (name, delivery address, phone number, order details)
Delivery Partners: If applicable, drivers receive delivery information to complete your order
Payment Processors: Stripe processes payments securely on our behalf
Service Providers: Third parties who help us operate our platform (hosting, analytics, customer support)
Legal Requirements: When required by law, court order, or to protect our rights
We do not sell your personal information to third parties.
8. Transfers of your information
Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place.
When we transfer personal data outside the UK or European Economic Area (EEA), we ensure protection through:
Standard Contractual Clauses approved by the UK Information Commissioner's Office
Adequacy decisions where applicable
Other appropriate safeguards as required by law
9. Security
We adopt robust technologies and policies to protect your information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
Our security measures include:
Encryption of data in transit (SSL/TLS)
Secure password hashing
Regular security assessments
Access controls and authentication
Secure payment processing through PCI-compliant providers
We limit access to your information to those third party providers and SHOCAL employees who have a business need-to-know.
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Your rights
You have certain rights over the information we hold about you under UK data protection law.
Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Request limitation of processing
Portability: Request transfer of your data to another service
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@shocal.org. We will respond within 30 days.
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.
11. Changes to our privacy policy
We may update this policy from time to time, so remember to check back in every so often, in case anything has changed. Where appropriate, we may notify you of changes by email or in-app notification.
When we make changes, we will:
Post the updated policy on our website
Update the "Last updated" date below
Send you an email notification for material changes
Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
🍪 We use cookies to improve your experience and analyse site traffic. By clicking "Accept", you consent to our use of cookies.
