Privacy Policy

Last updated: 17 August 2026

Template only — review with a qualified UK solicitor before launch.

Opher ("we") processes personal data to run a group food-buying service. This policy explains what we collect and your rights under UK GDPR.

What we collect

  • Account details: name, email, password (stored hashed).
  • Delivery details: address and phone, used to deliver your food share.
  • Order and payment records (card data is handled by Stripe, not by us).

Why we use it

To operate baskets and orders, take payment for your share, arrange delivery, and send you transactional emails about your orders. Our lawful bases are contract performance and legitimate interests.

Sharing

We share data with processors who help us operate: Stripe (payments) and our email provider. We share delivery details with our logistics function to fulfil orders. We do not sell your data.

Your rights

You may access, correct, or delete your data, and object to processing. Contact us to exercise these rights or to complain to the ICO.

Retention

We keep order records as long as needed for legal and accounting purposes.