Privacy Policy

1. Who We Are

Jeff's Premium Halal ("we", "our", "us") is a halal meat retailer based in the United Kingdom. We operate through our website at jeffshalal.co.uk and our WhatsApp channel. This privacy policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, phone number, delivery address, billing address
• Account data: username, password (stored in hashed form), preferences
• Transaction data: order history, payment records, delivery details
• Technical data: IP address, browser type and version, device information, operating system
• Communication data: messages sent via WhatsApp, email, or our contact channels
• Usage data: pages visited, time spent on site, click patterns, search queries

3. How We Use Your Data

• To process and fulfil your orders
• To communicate with you about your orders, account, and deliveries
• To send order confirmations, dispatch notifications, and delivery updates via email and WhatsApp
• To send marketing communications where you have opted in
• To improve our website, products, and services
• To detect and prevent fraud
• To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: processing necessary to fulfil your orders and provide our services
• Consent: where you have given explicit consent, such as for marketing communications or WhatsApp messages
• Legitimate interest: to improve our services, prevent fraud, and ensure website security
• Legal obligation: to comply with tax, accounting, and regulatory requirements

5. WhatsApp & Messaging

We use the WhatsApp Business API to communicate with you. If you opt in to WhatsApp communications, we may send you order updates, delivery notifications, and promotional messages. Your WhatsApp data (phone number and message history) is processed by Meta Platforms in accordance with their privacy policy.

You can opt out of WhatsApp communications at any time by replying "STOP" to any of our WhatsApp messages or by contacting us directly.

6. Sharing Your Data

We do not sell your personal data. We may share it with the following trusted third parties who help us operate our business:

• Delivery partners: DPD and our own delivery drivers, to fulfil your deliveries
• Payment processors: to securely process your payments
• WhatsApp / Meta: for WhatsApp Business communications
• Legal authorities: where required by law or to protect our legal rights

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Order and transaction data is retained for 6 years for tax and accounting purposes as required by HMRC. After this period, your data will be securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (see our data deletion page)
• Object to the processing of your data
• Restrict the processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@jeffshalal.co.uk.

9. Cookies & Tracking

We use three categories of cookies and tracking technologies on this website. You can review and change your preferences at any time via the "Cookie preferences" link — in our footer on desktop, or inside the Account tab on mobile — or by interacting with the cookie banner shown on your first visit.

• Necessary cookies — required for the site to function. These keep you logged in, remember your basket, and protect against fraud. Cannot be disabled.
• Analytics cookies — Google Analytics 4 (via Google Tag Manager). We use anonymised, aggregated data to understand how visitors use the site so we can improve it. Optional — you can decline these.
• Marketing cookies — Meta Pixel (Facebook & Instagram) and TikTok Pixel. These help us measure the effectiveness of advertising campaigns and show you relevant ads on those platforms. Optional — you can decline these.

For full detail on each cookie, see our Cookies Policy.

We also use server-to-server tracking (Meta Conversions API, TikTok Events API, and Google Analytics Measurement Protocol) for purchase events and account registrations. These send the same data your browser already sends, but from our server. They respect your cookie consent — if you have declined a category, no events are sent for that platform. Where transmitted, personal identifiers (email, phone number) are SHA-256 hashed before being sent to Meta and TikTok. Google Analytics receives only an anonymous browser identifier from the analytics cookie, never your email or phone number.

For users who have accepted marketing cookies, our marketing pixels (Meta and TikTok) may include hashed (one-way encrypted) versions of the email address or phone number you enter on the site — for example, when you sign in or place an order — to improve advertising attribution accuracy. We never share your raw email or phone number with these platforms; the SHA-256 hash is mathematically non-reversible. This feature is sometimes called "Advanced Matching" (Meta) or "Automatic Advanced Matching" (TikTok). If you decline marketing cookies in our cookie banner, no hashed identifiers are transmitted because the marketing pixels do not load at all.

10. Security

We take the security of your personal data seriously. We use HTTPS encryption across our entire website, encrypted payment processing, and strict access controls to protect your information. While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your personal data.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by posting a notice on our website. The "last updated" date at the top of this page indicates when this policy was last revised.

12. Contact & Complaints

For any privacy-related queries or to exercise your rights, please contact us at info@jeffshalal.co.uk.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.