Privacy Policy

Last Updated: March 08, 2026

At duabaafrofoods.co.uk operated by DUABA AFRO FOODS LTD, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our African and Caribbean food products.

1. Information We Collect

We collect information that identifies, relates to, or describes you (“Personal Data”). This includes:

Personal Identifiers: Name, billing address, shipping address, email address, and phone number.
Payment Information: Credit/debit card details (processed securely via PCI-compliant third-party processors like Stripe/Shopify Payments). We do not store your full card details.
Technical Data: IP address, browser type, time zone settings, and device information.
Order History: Details about the products you have purchased from us.

2. How We Use Your Information

We use the collected data for the following purposes:

Order Fulfilment: To process transactions, manage shipping, and provide order updates.
Customer Support: To respond to your enquiries via email or WhatsApp.
Security: To detect and prevent fraudulent transactions and protect our website.
Marketing (Optional): With your explicit consent, to send you newsletters about new Afro-food arrivals or promotions.

3. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your data based on:

Contractual Necessity: To fulfil your order.
Legal Obligation: To comply with tax and accounting laws in the United Kingdom.
Legitimate Interests: To improve our services and ensure website security.

4. Data Sharing & Third Parties

We do not sell your personal data. We only share information with trusted service providers necessary for our operations:

Shipping Partners: To deliver your groceries (e.g., Royal Mail, DPD, or other couriers).
Payment Processors: To securely handle your transactions.
IT Services: To maintain our website infrastructure.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies help us remember your cart items and analyse site traffic. You can choose to disable cookies through your browser settings, but some features of the site may not function properly.

6. Data Security

We implement robust security measures, including SSL (Secure Sockets Layer) encryption, to protect your data during transmission. Access to your personal data is restricted to employees and partners who have a business need to know.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, or reporting requirements (typically 6-7 years for UK tax purposes).

8. Your Data Rights

As a resident of the United Kingdom, you have the following rights:

Access: Request a copy of the data we hold about you.
Correction: Request that we fix inaccurate information.
Erasure: Request that we delete your data (subject to legal exceptions).
Withdraw Consent: Unsubscribe from marketing at any time.

To exercise these rights, please contact us at admin@duaba.co.uk

9. Third-Party Links

Our website may contain links to other sites. We are not responsible for the privacy practices of third-party websites. We encourage you to read their privacy policies.