Privacy policy

Privacy policy

This policy explains what personal information we collect when you use our website, shop with us or contact us, why we collect it, who we share it with and what your rights are. We only use your information as this policy describes and as UK data protection law (the UK GDPR and the Data Protection Act 2018) allows.

Who we are

Continental Food Store is a trading name of OHH FOODS LTD, registered in England and Wales (company no. 11695749), 96-98 Petersfield Avenue, Harold Hill, Romford RM3 9PH. We are the "controller" of your personal information, which means we decide how it is used.

For anything about your personal information, contact us by email at our contact page, by phone on 01708 606470, or by post at the address above.

What we collect

  • Order and account details: your name, email address, phone number, delivery and billing addresses, what you order, your chosen delivery or collection slot, order notes and your order history. If you create an account, your login details too.
  • Payment details: payments are handled by our payment providers (Viva for card payments and Wallid for pay by bank). We don't see or store your full card or bank details.
  • Messages: what you tell us when you contact us by email, phone, our contact form or the chat on our website.
  • Marketing messages: your email address, and your mobile number if you choose to receive offers by text message or WhatsApp.
  • How you use our website: your device and browser type, IP address, pages you view, searches and how you got to our site, collected with cookies and similar technologies (see "Cookies" below).

Why we use it, and our lawful basis

  • To take, deliver and support your orders (including local delivery, click & collect and courier delivery), to take payment, and to send order and delivery updates. Lawful basis: to perform our contract with you.
  • To answer your questions and handle returns and complaints. Lawful basis: to perform our contract with you, or our legitimate interest in helping our customers.
  • To check age for age-restricted products (we operate Challenge 25) and to keep the records we must keep for tax and accounting. Lawful basis: legal obligation.
  • To prevent fraud and keep our website secure. Lawful basis: our legitimate interests.
  • To send you offers and news by email, text message or WhatsApp, if you've signed up. Lawful basis: your consent, which you can withdraw at any time with the unsubscribe link in any email, by replying STOP to a text, by opting out in WhatsApp, or by contacting us.
  • To understand how our website is used and to show you relevant adverts on other sites (analytics and advertising cookies). Lawful basis: your consent, given through our cookie banner.

Who we share it with

We only share what each service needs to do its job:

  • Shopify, which runs our online shop and stores your order and account information. You can read how Shopify uses personal information at shopify.com/legal/privacy.
  • Payment providers: Viva and Wallid.
  • Delivery: Royal Mail, DHL, our own local delivery drivers, and the apps that work out delivery options and costs (Zapiet and Parcel). Couriers receive your name, address, phone number and email so they can deliver and send tracking updates.
  • Order and warehouse management: Helm and Veeqo, which we use to pick and pack orders, manage stock and print courier labels. They receive your order details and delivery address.
  • Apps that run parts of our shop, such as multibuy offers, order limits, our service fee, customer chat (Shopify Inbox) and our reviews display.
  • Analytics and advertising partners, only if you allow these cookies: Google (Analytics, Ads and YouTube), Meta (Facebook and Instagram), TikTok, Microsoft Advertising and Triple Whale (marketing analytics). Some of these receive details of your visit and purchases directly from Shopify as well as from your browser, under the same cookie choices.
  • Messaging: if you sign up for messages by text or WhatsApp, the service we use to send them and, for WhatsApp, Meta.
  • Shopify Network Intelligence: Shopify combines information about your visits and purchases with information from other Shopify shops to improve its services, help target adverts and personalise your experience. Other shops can't see your information.
  • Authorities, where the law requires it or to protect our rights.

We never sell your personal information.

Information sent outside the UK

Some of these providers, including Shopify, store or process information outside the UK, for example in Ireland, Canada and the United States. Where they do, they use safeguards recognised under UK law, such as adequacy decisions or the UK International Data Transfer Agreement.

Automated decisions

We don't make decisions about you based only on automated processing that have a legal or similarly significant effect on you.

To prevent fraud, Shopify uses limited automated checks. For example, it may temporarily block an IP address after repeated failed payments (for a few hours), or block cards linked to those IP addresses (for a few days). These checks don't have a legal or similarly significant effect on you. If you have a question about them, please contact us.

How long we keep it

  • Order, payment and invoice records: 6 years after the order, as tax law requires.
  • Your account: until you ask us to close it.
  • Marketing messages: until you unsubscribe or opt out.
  • Messages and support requests: up to 2 years after we've dealt with them.
  • Cookies: for the times shown in our cookie settings, from a single visit up to 2 years.

Cookies

Cookies are small files saved by your browser. Some are needed for the shop to work (for example your basket, checkout and login) and are always on. Others help us understand how the site is used or show you relevant adverts, and we only use those if you agree in our cookie banner.

You can change your choice at any time with the Cookie preferences link at the bottom of every page, and you can also block cookies in your browser settings. Shopify lists the cookies its shops use at shopify.com/legal/cookies.

You can also control personalised adverts directly with our advertising partners:

Our website doesn't respond to "Do Not Track" browser signals, because there's no agreed standard for them. Please use the Cookie preferences link instead.

Your rights

You have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information (we may need to keep some records, such as orders, for legal reasons);
  • ask us to restrict or stop using your information, or object to how we use it;
  • ask for your information in a format you can take to another service;
  • withdraw your consent at any time, for example by unsubscribing or changing your cookie preferences.

To use any of these rights, contact us using the details above. We'll reply within one month.

Children

Our website is not meant for children under 16, and we don't knowingly collect their information. If you think a child has given us their information, please contact us and we'll delete it.

Complaints

If you're unhappy with how we've used your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page.

Last updated: 8 October 2026