Privacy Policy

Last updated: [INSERT DATE]

This policy explains what personal data Lissco Group ("we", "us") collects when you use this website, why we collect it, and your rights over it, in line with UK GDPR and the Data Protection Act 2018.

1. What we collect

Account details: name, email address, phone number.
Delivery addresses and postcode.
Order history and basket contents.
Date of birth or an 18+ confirmation, where required to sell age-restricted products.
Messages you send us through the contact form (name, email, phone, message content).
Technical data such as a postcode-verification cookie used to remember that your area is within our delivery zone, and a login session cookie.

We do not collect or store your card details. Card payments are processed directly by our payment provider, Teya — see section 5.

2. How we use it

To take, fulfil, and deliver your orders.
To verify you are within our delivery area.
To verify age eligibility for alcohol, tobacco and vape products.
To respond to messages sent via our contact form.
To maintain your account and order history.
To meet our legal, tax and licensing obligations.

3. Legal basis

We process your data to perform our contract with you (taking and delivering an order), to comply with legal obligations (such as age-verification requirements for alcohol and tobacco sales), and based on your consent where you submit a contact form message.

4. How long we keep it

We keep account and order data for as long as your account is active, and afterwards for as long as needed to meet our legal and tax obligations (typically up to 6 years for financial records). Contact form messages are kept for as long as needed to resolve your query.

5. Sharing your data

We share the minimum necessary data with:

Teya, our payment provider, to process card payments.
Our delivery staff, to fulfil and deliver your order (name, address, order contents, age-verification status).

We do not sell your personal data to third parties.

6. Cookies

We use essential cookies only: one to remember your account login session, and one to remember that you have confirmed your postcode is within our delivery area. We do not use tracking or advertising cookies.

7. Your rights

Under UK GDPR you have the right to access, correct, or request deletion of your personal data, to object to or restrict certain processing, and to data portability. To exercise any of these rights, contact us at lisscogroup@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

8. Contact

For any privacy questions, email lisscogroup@gmail.com or use our contact form.