Privacy policy
Last updated: 5 October 2026
1. Who we are
Raya Grocery Limited, trading as Raya Grocery, operates www.rayagrocery.com.
We are the data controller for personal information used for the purposes described in this policy, except where another provider processes information independently.
Company number: 13429580
Registered in England and Wales
Registered office: 61A Kensington Mansions, Trebovir Road, London, SW5 9TD, United Kingdom
For privacy enquiries or requests, contact:
Email: info@rayagrocery.com
Raya Grocery
Stand 1, Stoney Street
Borough Market
London SE1 1TL
United Kingdom
This policy explains how we handle personal information when you browse our website, place an order, request a fruit platter quote, contact us, submit a review or subscribe to updates.
2. Information we collect
Depending on how you interact with us, we collect:
-
Contact details: your name, email address, telephone number and billing or delivery address.
-
Order information: products purchased, order value, payment status, delivery arrangements, refunds and related correspondence.
-
Account information: details associated with your customer account and order history.
-
Enquiries and bookings: messages, event dates, guest numbers, preferences and delivery requirements you provide.
-
Reviews: ratings, comments, photographs and the display name you submit.
-
Marketing preferences: subscription details, consent choices and unsubscribe requests.
-
Technical and usage information: IP address, browser and device information, cookie identifiers, pages viewed and interactions with our website and advertising, subject to applicable consent requirements.
Payment providers process the payment details needed to complete your transaction. We receive payment confirmations and relevant transaction information. Please do not send full card details by email or chat.
We obtain information directly from you, through your use of our website, and from providers involved in payments, delivery, reviews, analytics and advertising.
If you provide another person’s details for delivery or an event, please ensure they know you have shared them and direct them to this policy.
3. How we use information
We use personal information for the following purposes and lawful bases.
Orders, quotes and customer service
We use your information to prepare quotes, process orders and payments, arrange delivery or collection, manage refunds and respond to related enquiries.
Our lawful basis is performing a contract or taking steps at your request before entering into one.
Business administration and security
We use information to manage our business, respond to general enquiries, resolve complaints, administer reviews, protect our website and prevent fraud.
We rely on our legitimate interests in operating, improving and protecting our business, where those interests are not overridden by your rights.
Legal obligations
We process and retain information where necessary to meet accounting, tax, food-safety and other legal requirements, or respond to lawful requests from authorities.
Our lawful basis is compliance with a legal obligation.
Analytics, advertising and personalisation
We use information to understand website activity, measure advertising performance and provide relevant advertising and experiences.
We rely on consent where required for tracking technologies and related processing. Essential security and operational processing may instead be necessary for our legitimate interests or to provide a service you request.
Marketing subscriptions
We record subscription preferences and, if we introduce newsletters, use them to send updates through Shopify’s messaging services with your consent.
You can withdraw your consent at any time.
You do not have to provide optional information. However, without information necessary to fulfil an order or prepare a quote, we may be unable to provide that service.
4. Allergy and dietary information
If you provide allergy or dietary information linked to an identifiable person, we use it only to assess and fulfil your request and handle related enquiries.
Where this reveals health information or religious beliefs, we will obtain explicit consent before relying on consent to process it. We limit access to those who need the information and do not use it for advertising.
You can withdraw consent by contacting us, although this may affect our ability to accommodate the request. Please provide only necessary details and avoid identifying individual guests where this is not needed.
5. Who we share information with
Our store is hosted by Shopify. We share personal information with providers where necessary to operate our business and supply the services you use.
These include:
-
Shopify: hosting, checkout, customer accounts, Shop features, messaging and customer enquiries.
-
Payment providers: payments, refunds and fraud prevention.
-
Delivery and fulfilment providers: preparing, dispatching and delivering orders.
-
Judge.me: product reviews and associated review-management features.
-
Store-functionality providers: order limits, pre-orders, pop-ups and connected shopping tools, where those features require personal information.
-
Google and Meta: analytics, advertising and conversion measurement, subject to applicable consent requirements and your choices.
-
Professional advisers and authorities: accounting, legal advice, legal obligations and the establishment or defence of legal claims.
Providers may process information on our behalf or, for certain purposes, act independently under their own privacy policies.
6. Shopify Network Intelligence
Shopify Network Intelligence is enabled for our store.
Shopify processes information from your interactions with our store together with information from your interactions with other merchants and Shopify to provide enhanced services. These can support personalisation, advertising, fraud prevention and service improvements.
Information may be shared with Shopify and other providers located outside the UK. Where consent is required for advertising or tracking, you can choose whether to allow it.
Read Shopify’s Consumer Privacy Policy for further information.
You can also visit Shopify’s privacy portal to learn about your rights and available choices, including withdrawing consent or objecting to relevant processing.
7. Cookies, analytics and advertising
We use cookies and similar technologies to operate the store, remember preferences, understand website use and measure advertising.
Essential technologies support functions such as the shopping basket, checkout and security. Other technologies support analytics, personalisation and advertising.
We use Google Analytics and connected Google and Facebook/Instagram services. Our Google and Meta integrations include browser-based and server-based event sharing. Depending on the feature, configuration and your choices, this may involve information about visits, shopping activity, purchases and identifiers used to measure advertising performance.
Server-based sharing remains subject to applicable data protection requirements.
Our cookie banner is configured for the United Kingdom and other selected regions. It offers options to accept, decline or manage optional cookies. We seek consent for optional tracking where required by law.
To change your choices, use the website’s cookie preference controls where available, or contact us for assistance. You may also delete or block cookies through your browser settings, although blocking essential cookies may affect store functionality. Deleting cookies alone does not withdraw consent to all other forms of processing.
For further information, see:
8. Newsletters and customer messages
We are not currently sending newsletters. If you subscribe, we record your details and preferences so we can send updates if we introduce newsletters through Shopify.
You can withdraw your subscription at any time by contacting us. Any marketing emails we send will include an unsubscribe option.
Order confirmations, delivery updates and responses to enquiries are service communications and are separate from marketing subscriptions.
9. Reviews
When you submit a review, your review content, rating, chosen display name and any submitted photographs may be published on our website.
Please avoid including private contact details or sensitive information in a public review.
Contact us if you need help correcting or removing personal information you have submitted.
10. International processing
Shopify identifies our store’s data-hosting location as the European Union. This does not mean all processing by Shopify, its partners or our other providers takes place within the EU.
Where information is transferred outside the UK, we use the safeguards required by applicable law. Depending on the destination and provider, these may include UK adequacy arrangements or approved contractual safeguards.
Contact us if you would like information about the safeguards applicable to your data, including how to obtain a copy where available.
11. How long we keep information
We keep personal information only for as long as necessary for the purpose for which it was collected.
We determine retention using the following criteria:
-
Orders, payments and accounting records: applicable tax and accounting requirements, and the period reasonably necessary to resolve disputes or legal claims.
-
Enquiries and quotes: the time needed to respond and follow up, whether an order results, and any outstanding issue.
-
Customer accounts: how long the account is maintained, subject to necessary retention of transaction and legal records.
-
Marketing preferences: the duration of your subscription and the need to demonstrate or respect your choices. We may retain a minimal suppression record after you unsubscribe to prevent further marketing.
-
Reviews: how long the review remains published and is needed for review administration.
-
Identifiable allergy information: the time needed to assess and fulfil the order, with longer retention only where necessary and legally permitted for a related complaint or claim.
-
Tracking information: the relevant technology’s duration, provider settings and the purpose for which the information is used.
We delete or anonymise information when it is no longer needed. You can contact us for further information about retention of a particular record.
12. Your data protection rights
Depending on the circumstances, you may have the right to:
-
Access your personal information.
-
Correct inaccurate or incomplete information.
-
Request deletion.
-
Restrict how information is used.
-
Receive certain information in a portable format.
-
Object to processing based on legitimate interests.
-
Object to direct marketing at any time.
-
Withdraw consent without affecting the lawfulness of processing carried out before withdrawal.
-
Obtain applicable safeguards concerning significant decisions made solely by automated processing.
To make a request, email info@rayagrocery.com. We may need to verify your identity before responding.
We normally respond within one month, subject to any extension or other provision permitted by law.
These rights are subject to legal conditions and exceptions. For example, we may need to retain accounting records after an account-deletion request. We will explain any relevant limitation.
13. Security
We use appropriate technical and organisational measures to protect personal information and limit access to those who need it.
No online service can guarantee absolute security. Please keep your account access details secure and contact us promptly if you suspect unauthorised use.
14. Complaints
If you have concerns about how we handle personal information, please contact info@rayagrocery.com so we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office:
15. Changes to this policy
We may update this policy when our services, providers, legal obligations or data practices change.
The date at the top shows when it was last updated. Where required, we will notify you of significant changes or seek fresh consent.