Privacy Policy
Version 1.0 · Last updated 29 June 2026
This Privacy Policy explains how TrolleyTribe collects, uses, shares and protects personal data when you use our platform, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
TrolleyTribe is the data controller for personal data processed through the platform. You can contact us about privacy at [email protected].
2. Data we collect
- Account data: name, email, phone, password (stored securely / hashed).
- Order data: items purchased, delivery address, order history.
- Payment data: handled by Stripe; we receive confirmation and limited metadata, not full card numbers.
- Vendor data: business details and compliance documents you upload during onboarding.
- Usage data: device, browser, and how you interact with the platform, including cookies and analytics.
3. How we use your data
To create and manage your account, process and deliver orders, handle payments and payouts, provide customer support, prevent fraud, comply with legal obligations, and improve the platform.
Where we send marketing, we rely on your consent or our legitimate interest, and you can opt out at any time.
4. Legal bases
We process data on the bases of: performance of a contract (your orders), legal obligation (tax, compliance), legitimate interests (security, improving the service), and consent (optional marketing and certain cookies).
5. Sharing your data
We share data with vendors (to fulfil your orders), delivery partners (to deliver them), Stripe (to process payments), and service providers who host and support the platform. We may disclose data where required by law.
We do not sell your personal data.
6. International transfers
Some providers may process data outside the UK. Where they do, we ensure appropriate safeguards such as adequacy decisions or standard contractual clauses are in place.
7. Retention
We keep personal data only as long as necessary for the purposes above and to meet legal and accounting obligations (for example, transaction records are typically kept for six years).
8. Your rights
Under UK GDPR you have rights to access, rectify, erase, restrict and object to processing, and to data portability.
To exercise these rights contact [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Cookies
We use essential cookies to run the platform and, with your consent, analytics cookies to understand usage. You can manage cookies through your browser settings.
10. Changes
We may update this policy and will post the latest version here with a revised date.
This document is a working template provided for transparency. TrolleyTribe recommends that vendors and customers seek independent legal advice where appropriate. Final commercial terms may be refined following review by a qualified UK solicitor.