Privacy policy

GelliLocal is a convenience shop at 184-186 Gelli Road, Rhondda CF41 7NA. It is run by URD PATEL LTD, a company registered in England and Wales under number 13410092, with its registered office at 184-186 Gelli Road, Rhondda CF41 7NA. URD PATEL LTD is the data controller for the information described here.

This policy covers the GelliLocal app and this website. Questions, or any request about your own data, go to support@gellilocal.co.uk or 01443 434794.

Only what an order actually needs:

• —Your name and email, so we can identify the account and send order updates.
• —Your delivery address and any note you add for the driver. We check the postcode against our delivery area when you register, because we can only serve addresses within a mile of the shop.
• —Your mobile number, so the driver can reach you about your order.
• —Your date of birth, taken when you register. It is used to confirm you are old enough to hold an account, and to check age on any restricted item you order. It is not used for marketing.
• —Your orders — what you bought, when, and what it cost.
• —Whether you want marketing, and when you last changed that.

If you use the barcode scanner, the camera reads the barcode on your device. No image is taken, kept or sent anywhere.

• —Card details. Payments are handled by Square. Your card number never reaches us and we could not see it if we wanted to.
• —Your location. The app does not use GPS. You type your postcode; we compare it to the shop’s and never store it against you.
• —Tracking across other apps or sites. There is none.

• —To perform our contract with you — we cannot deliver an order without knowing what you ordered and where you live.
• —Because the law requires it — sales records must be kept for HMRC.
• —With your consent — marketing only, and you can withdraw it at any time in the app.

Only the services needed to run the shop:

• —Supabase hosts our database and accounts.
• —Square processes payments.
• —Expo provides the app infrastructure.
• —postcodes.io converts a postcode to a location so we can tell you whether we deliver to you. We send the postcode alone, with nothing identifying you attached.

We do not sell your data, and we never will.

Your account details stay until you delete your account. Order records are kept for six years, because HMRC requires it.

Those two are separate on purpose. Deleting your account erases your sign-in, your saved address and your loyalty progress, and detaches your name from past orders. The orders themselves remain as sales records with nothing identifying you attached.

• —See what we hold. Ask and we will send it.
• —Correct it. Most of it you can edit in the app.
• —Delete your account. Account → Delete my account, in the app. No need to ask us.
• —Stop marketing. Account → Email & notifications. Order updates still arrive, because those are not marketing.
• —Take your data elsewhere. We will provide it in a portable format.

If you think we have got something wrong, tell us first — but you can also complain to the Information Commissioner’s Office at ico.org.uk.

The app is not intended for under-18s, and age-restricted goods are never handed over without photographic ID at the door.

If this policy changes in a way that affects you, we will say so in the app rather than quietly updating this page.