Privacy policy

Who we are

Varieties4Less Ltd (company no. 17498471) is the data controller for personal data collected on this website. Contact: hello@varieties4less.com.

What we collect

• Order details: name, email, phone (optional), delivery address and the items you buy.
• Messages you send through our contact form.
• Your email address if you subscribe to our newsletter.

Card payments are processed by Stripe; we never receive or store your full card details.

Why we use it (lawful basis)

• To process and deliver your order and handle returns — contract.
• To keep accounting records — legal obligation.
• To answer your enquiries and prevent fraud — legitimate interests.
• To send marketing emails — consent, which you can withdraw at any time.

Sharing

We share data only with providers that help us run the store — payment processing, delivery partners, hosting and email — under appropriate contracts. We never sell your data.

Retention

Order records are kept for six years for tax purposes. Marketing data is kept until you unsubscribe.

Your rights

Under UK GDPR you can request access to, correction or deletion of your data, object to processing, or ask us to restrict it. Email us to exercise these rights. You can also complain to the Information Commissioner’s Office (ico.org.uk).