Privacy policy
This statement explains how personal data is collected, used, shared, and protected when you interact with Shefrealghapux online, by telephone, or at our Oxford Street coordination desk.
Who we are
Shefrealghapux is the data controller for processing described here. Registered correspondence: 311 Oxford St, London W1C 2HP, United Kingdom. Email: assist@shefrealghapux.world. Telephone: +44 20 7993 5900.
If you interact with us on behalf of a household or small organisation, we treat your details as supplied in that capacity and expect you to have authority to share any third-party information you provide.
Categories of personal data
Depending on how you engage with us, we may process:
- Identity and contact data: name, email address, telephone number, postal address where relevant to deliveries or appointments.
- Communication content: free-text messages submitted through forms, notes taken during desk consultations when you consent, and call-back requests.
- Preference data: dietary notes you volunteer to help us shortlist products, delivery windows, and communication channel choices.
- Technical data: IP address, browser type and version, device category, approximate location derived from network information, and timestamps from server logs.
- Cookie and consent records: your choices regarding optional analytics and marketing storage, stored locally and mirrored in our consent logs where applicable.
We do not ask for special category data unless you voluntarily include it in a message. If you do, we rely on your explicit consent or another lawful basis where available, and we minimise retention strictly to the enquiry context.
Purposes and lawful bases
Responding to enquiries
We process contact details and message content under Article 6(1)(b) UK GDPR (steps prior to a contract) and, where no contract arises, Article 6(1)(f) (legitimate interests in operating a customer-facing food coordination service).
Service improvement
Aggregated analytics help us understand navigation friction and page performance. Where not strictly necessary, we only activate this processing when you enable analytics cookies or provide equivalent consent.
Marketing communications
Optional reminders about seasonal rotations or desk events are sent only when you have opted in through the cookie interface or a separate signup flow with clear affirmative action.
Legal compliance
We may process data to comply with accounting, tax, or regulatory requests, or to establish or defend legal claims, under Article 6(1)(c) and (f) as applicable.
Cookies and similar technologies
Strictly necessary storage keeps consent memories, secures sessions, and maintains form integrity. Optional categories are described in our cookies policy and controlled through the on-site banner and settings panel.
Recipients and international transfers
We use infrastructure and communications providers that process data on our instructions under Article 28 UK GDPR data processing agreements. Categories include hosting, email delivery, telephony, and occasional document storage.
Where a processor is located outside the United Kingdom or European Economic Area, we implement appropriate safeguards such as the UK International Data Transfer Agreement or EU standard contractual clauses, supplemented by transfer impact assessments where required.
Retention periods
- General enquiry records: up to twenty-four months from last substantive contact unless a longer period is needed for disputes.
- Consent and cookie preference logs: fourteen months from the last update to align with regulatory guidance on proof of consent.
- Server security logs: ninety-day rotation unless extended for incident investigation.
- Financial records linked to purchases: seven years where tax law requires retention.
Security measures
We apply encryption in transit for this website, role-based access controls for internal tools, periodic access reviews, malware monitoring on managed endpoints, and contractual confidentiality obligations on anyone who processes data for us.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise rights, email assist@shefrealghapux.world with enough detail for us to verify your identity. You may complain to the Information Commissioner’s Office (ico.org.uk) or, if you reside elsewhere, your local supervisory authority.
Children
Our services target adults organising household nutrition. We do not knowingly profile children for marketing. If you believe a minor’s data was submitted without appropriate authority, contact us so we can delete non-essential records.
Changes and questions
We will revise this policy when processing operations or legal requirements change. Material updates will be reflected by publishing a new effective date and, where appropriate, a short notice on the homepage.
For any privacy question not covered here, write to the postal address above or use the contact form, marking the subject line “Privacy enquiry”.
Advertising and measurement
When you allow optional marketing or analytics technologies through our cookie controls, we or our partners may process limited technical data to measure whether our advertising is relevant or to improve site structure. Such processing is described in our cookies policy and is aligned with your consent choices.
We do not sell your contact details to unrelated advertisers for their own lists. For a plain-language overview of how we present information in line with UK expectations, see our advertising and transparency page.