Privacy Policy

Last updated May 18, 2026

PRIVACY POLICY

Last Updated: May 2026

This Privacy Policy explains how Go4Fresh Ltd trading as Go4Fresh Nottingham (“Go4Fresh”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when customers access our website, create accounts, place orders, use our Click & Collect services, contact us, or otherwise interact with our services.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Go4Fresh Ltd

Trading as Go4Fresh Nottingham

Sovereign House, 184 Nottingham Rd, Nottingham NG7 7BA, United Kingdom

Phone: +44 115 978 8831

Email:

Go4Fresh Ltd is the data controller responsible for your personal data under applicable United Kingdom data protection legislation, including the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We may collect, use, store, and process the following categories of information.

Account Information

Full name
Email address
Passwords stored in encrypted or securely hashed form
Account preferences and login details

Order & Transaction Information

Billing address
Phone number
Order history
Purchase details
Click & Collect order information
Refund and cancellation records
Customer communications relating to orders

Payment Information

Payments are processed securely by third-party payment providers, including Dojo Payments and other authorised payment processors.

We do not store or retain full payment card details on our systems.

Payment providers may independently collect and process payment information in accordance with their own privacy policies and legal obligations.

Technical & Usage Information

We may automatically collect:

IP address
Browser type and version
Device identifiers
Operating system information
Website usage activity
Session identifiers
Login timestamps
Security and diagnostic logs
Cookie and analytics data

Customer Support Information

Information provided when contacting us, including:

Emails
Telephone enquiries
Complaints
Reviews
Support requests
Communications relating to disputes or refunds

Fraud Prevention & Security Information

We may collect and retain information relating to:

Suspicious transactions
Failed payments
Account misuse
Security incidents
Chargebacks
Fraud investigations
Abusive or unlawful activity

3. How We Use Personal Data

We may use personal data for the following purposes:

Processing and fulfilling orders
Providing Click & Collect services
Verifying customer identity during collection
Managing customer accounts
Processing payments, refunds, and cancellations
Communicating order confirmations and collection updates
Providing customer support
Maintaining website functionality and operational performance
Improving customer experience and website usability
Conducting analytics and business reporting
Preventing fraud, abuse, theft, and unauthorised transactions
Monitoring platform security and operational integrity
Enforcing our Terms & Conditions and company policies
Maintaining internal business records
Complying with legal, tax, accounting, and regulatory obligations
Establishing, exercising, or defending legal claims
Protecting the rights, property, reputation, systems, and security of Go4Fresh, our customers, staff, suppliers, and business partners

We may also use aggregated, anonymised, or statistical information for operational, commercial, analytical, and business improvement purposes.

4. Lawful Basis for Processing

We process personal data under one or more lawful bases permitted under UK GDPR, including:

Contractual Necessity

Where processing is necessary to:

Process orders
Provide products or services
Manage customer accounts
Arrange Click & Collect orders
Process refunds or cancellations

Legal Obligations

Where processing is required for:

Tax compliance
Accounting obligations
Regulatory requirements
Fraud reporting
Law enforcement requests

Legitimate Interests

Where processing is reasonably necessary for:

Fraud prevention
Security monitoring
Operational management
Business administration
Website functionality
Customer service
Dispute handling
Internal analytics
Legal risk management
Protecting our commercial interests

Consent

Where legally required, including certain marketing communications and non-essential cookies.

Customers may withdraw consent at any time where consent is relied upon.

5. Marketing Communications

Where permitted by applicable law, we may send marketing communications relating to:

Promotions
Offers
New products
Service announcements
Customer updates

Customers may opt out of marketing communications at any time by:

Using unsubscribe links
Contacting us directly
Updating account preferences

Opting out of marketing communications does not affect transactional or service-related communications.

6. Sharing Personal Data

We do not sell personal data.

We may share information with trusted third parties where reasonably necessary for business operations, including:

Payment processors
IT infrastructure providers
Hosting providers
Website and software providers
Fraud prevention services
Professional advisers
Accountants
Insurers
Legal representatives
Regulatory authorities
Government agencies
Law enforcement bodies

We may disclose information where reasonably necessary to:

Comply with legal obligations
Prevent fraud or crime
Protect our legal rights
Enforce company policies
Respond to disputes or claims
Protect customers, staff, or operations

Third parties are expected to process personal data securely and lawfully.

7. International Data Transfers

Some third-party providers used by Go4Fresh may process personal data outside the United Kingdom.

Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are implemented in accordance with applicable UK data protection laws, including the use of approved contractual protections where appropriate.

8. Click & Collect Orders

Go4Fresh operates exclusively as a Click & Collect business. We do not provide home delivery services.

For Click & Collect orders, we may use personal information including:

Name
Phone number
Order number
Collection details
Transaction information

in order to verify and safely release orders.

We reserve the right to:

Request proof of identity
Request order confirmation
Refuse collection where verification is insufficient
Delay or cancel collection where fraud or misuse is suspected
Refuse collection to unauthorised third parties

Customers are responsible for collecting orders within the collection timeframe provided.

Orders not collected within a reasonable timeframe may:

Be cancelled
Be refunded partially or fully where permitted by law
Be restocked
Be disposed of
Be subject to administrative deductions where legally permitted

particularly where products are perishable, temperature-sensitive, customised, or subject to food safety requirements.

Once an order has been collected, responsibility for the products transfers to the customer, including proper transportation, storage, refrigeration, and handling.

Go4Fresh shall not be responsible for deterioration, spoilage, damage, or losses occurring after collection.

9. Fraud Prevention, Monitoring & Misuse

We reserve the right to monitor:

Transactions
User activity
Accounts
Devices
Website usage
Network activity
Security events

for fraud prevention, abuse detection, platform security, operational integrity, and lawful business protection purposes.

Where suspicious, abusive, fraudulent, unlawful, or commercially harmful activity is identified, we may:

Refuse service
Suspend accounts
Cancel transactions
Block access
Retain relevant records
Report incidents to payment providers or authorities
Take legal action where appropriate

We may retain relevant records where reasonably necessary to investigate or defend disputes, fraud claims, chargebacks, legal proceedings, or operational risks.

10. Cookies & Tracking Technologies

We use cookies and related technologies to:

Maintain website functionality
Enable shopping cart features
Manage customer login sessions
Improve website performance
Conduct analytics
Maintain website security

Some cookies are essential for the operation of the website and cannot be disabled.

Where required by law, we will request consent before placing non-essential cookies or analytics technologies on your device.

Customers may manage cookie preferences through browser settings or applicable cookie management tools.

Disabling cookies may affect website functionality.

11. Data Retention

We retain personal data only for as long as reasonably necessary for:

Order fulfilment
Business operations
Fraud prevention
Legal compliance
Accounting obligations
Tax reporting
Dispute resolution
Enforcement of legal rights

Order and transaction records may be retained for up to 6 years or longer where reasonably necessary under applicable law or legitimate business interests.

Fraud prevention and security-related information may be retained for extended periods where reasonably necessary to protect our business, systems, customers, or legal position.

12. Security Measures

We implement reasonable technical and organisational security measures designed to protect personal data against:

Unauthorised access
Disclosure
Misuse
Loss
Alteration
Destruction

Such measures may include:

Encrypted connections
Secure password handling
Access controls
System monitoring
Security logging
Restricted administrative access

However, no internet transmission, website, or electronic storage system can be guaranteed to be completely secure.

Accordingly, customers provide information at their own risk to the extent permitted by applicable law.

13. Automated Decision-Making & Fraud Screening

We may use automated systems, internal rules, or risk assessment tools to identify potentially fraudulent, abusive, or suspicious transactions or activity.

Such processing may result in:

Transaction delays
Manual review
Order cancellation
Temporary account restrictions

We reserve the right to make final operational decisions necessary to protect our business, customers, staff, and systems.

14. Customer Rights

Subject to applicable law, customers may have the right to:

Request access to personal data
Request correction of inaccurate data
Request deletion of personal data
Restrict certain processing
Object to certain processing
Request data portability
Withdraw consent where applicable
Lodge complaints with the Information Commissioner’s Office (“ICO”)

We may require verification of identity before processing requests relating to personal data.

Certain rights may be limited where exemptions or lawful business interests apply.

15. Children

Our services are not intended for individuals under the age of 16.

We do not knowingly collect personal data from children without appropriate legal authorisation.

16. Third-Party Websites & Services

Our website may contain links to third-party websites, applications, or services.

We are not responsible for:

The privacy practices
Security
Content
Availability
Data handling

of external services or third parties.

Customers should review third-party privacy policies separately.

17. Business Transfers

We reserve the right to transfer, disclose, or assign personal data in connection with:

Business restructuring
Financing
Acquisition
Merger
Sale of assets
Insolvency proceedings

where legally permitted and reasonably necessary for commercial operations.

18. Limitation of Liability

To the maximum extent permitted by applicable law, Go4Fresh Ltd shall not be liable for:

Indirect losses
Consequential losses
Business interruption
Data loss
Service interruptions
Unauthorised access
Cyber incidents
Third-party system failures
Delays beyond our reasonable control
Customer failure to collect orders on time
Product deterioration after collection
Incorrect collection information provided by customers

arising from use of our website, services, third-party systems, payment providers, or internet infrastructure.

Nothing in this Privacy Policy excludes liability where exclusion is prohibited under applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be published on this page together with the revised “Last Updated” date.

Where legally required, we may provide additional notice of material changes.

Continued use of our website or services following publication of updates constitutes acknowledgement of the revised Privacy Policy.

20. Contact Information

For questions relating to this Privacy Policy or personal data, contact: