Privacy policy

DELLI PRIVACY POLICY

Effective date: 1 January 2026

This Privacy Policy explains how DELLI Limited ("DELLI", "we", "us", "our") collects, uses, shares and protects personal data when you use our platform at www.delli.market and www.delli.com (together, the "Platform).

1. WHO WE ARE

1.1 DELLI Limited is the data controller responsible for your personal data.

1.2 Our contact details:

1.3 DELLI operates a B2B marketplace platform connecting independent food and drink makers ("Makers") with business buyers ("Retailers"), and a discovery platform for consumers.

2. WHAT PERSONAL DATA WE COLLECT

The personal data we collect depends on how you use the Platform:

2.1 B2B Retailers (Business Buyers)

When you create an account or place an order as a business buyer, we collect:

  • Business name and trading details
  • Contact person name
  • Email address and phone number
  • Business delivery address
  • Payment information (processed by our payment provider)
  • Order history and preferences

2.2 Makers/Sellers

When you register as a Maker, we collect:

  • Business name and registration details
  • Contact details (name, email, phone)
  • Bank account details for payouts
  • Product information and images
  • Business documents (insurance certificates, licences where applicable)
  • VAT registration details

2.3 B2C Consumers (Website Visitors)

For consumers browsing the Platform, we collect:

  • Browsing data and analytics (see Section 9 on Cookies)
  • IP address and device information
  • Email address (if you subscribe to our mailing list)

Important: From 1 January 2026, consumers complete purchases directly on Maker websites. DELLI does not collect or process payment information or order details for consumer purchases.

2.4 All Platform Users

  • Technical data: IP address, browser type, device information
  • Usage data: Pages visited, time spent, interactions
  • Communications: Support queries, feedback, emails

3. HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes, based on the legal grounds set out below:

3.1 Contract Performance (B2B)

For Retailers:

  • Processing and facilitating B2B orders
  • Sharing your order details with Makers to enable order fulfilment
  • Processing payments through our payment provider
  • Providing customer support

For Makers:

  • Enabling you to list products and receive orders
  • Processing payouts
  • Sharing your business contact details with Retailers for order communication
  • Account management and support

3.2 Legitimate Interests

  • Operating and improving the Platform
  • Preventing fraud and ensuring platform security
  • Analysing usage to improve user experience
  • Communicating service updates
  • Enforcing our Terms of Service

3.3 Legal Obligation

  • Complying with tax and accounting requirements
  • Responding to legal requests and regulatory requirements
  • Maintaining records for statutory retention periods

3.4 Consent

  • Sending marketing communications (where you have opted in)
  • Using non-essential cookies (where you have consented)

4. DATA SHARING (B2B MARKETPLACE)

4.1 Sharing with Makers

When you place a B2B order, we share your business contact details with the Maker, including:

  • Business name
  • Contact person name
  • Email address and phone number
  • Delivery address

Why: This is necessary to enable the Maker to fulfil your order, arrange delivery, and communicate with you about order status.

4.2 Sharing with Retailers

When a Retailer places an order with you, we share your business contact details, including:

  • Business name
  • Email address and phone number

Why: This enables direct communication between you and the Retailer about order fulfilment, delivery coordination, and order-related queries.

4.3 Payment Processors

We use third-party payment service providers to process B2B payments. Payment information is transmitted directly to our payment provider and is subject to their privacy policy.

4.4 Service Providers

We share data with trusted service providers who help us operate the Platform, including providers of:

  • Payment processing
  • Cloud hosting and infrastructure
  • Analytics
  • Customer support
  • Email communications

All service providers are contractually required to protect your data and use it only for the purposes we specify.

4.5 Legal Disclosure

We may disclose your personal data where required by law, in response to legal process, or to protect the rights, property, or safety of DELLI, our users, or others.

5. DATA RETENTION

5.1 Active Accounts

We retain your personal data while your account is active and for a reasonable period afterwards to comply with legal obligations and resolve disputes.

5.2 B2B Order Data

Order and transaction data is retained for 7 years after the transaction to comply with tax and accounting requirements.

5.3 Marketing Data

Marketing consent records are retained until you withdraw consent, after which we will suppress your details to prevent further marketing.

5.4 Deletion Requests

When you request deletion of your account, we will delete or anonymise your personal data unless we are required to retain it for legal, tax, or regulatory reasons.

6. YOUR RIGHTS UNDER UK GDPR

You have the following rights regarding your personal data:

6.1 Right of Access

You can request a copy of the personal data we hold about you.

6.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

6.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

6.4 Right to Restriction

You can ask us to restrict processing of your personal data in certain circumstances.

6.5 Right to Data Portability

You can request a copy of your personal data in a structured, machine-readable format.

6.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

6.7 Right to Withdraw Consent

Where we rely on consent, you can withdraw it at any time.

6.8 How to Exercise Your Rights

To exercise any of these rights, contact us at support@delli.market.

We will respond within one month of receiving your request.

6.9 Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly:

7. DATA SECURITY

7.1 We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

7.2 Measures include:

  • Encrypted data transmission (SSL/TLS)
  • Access controls and authentication
  • Regular security assessments
  • Staff training on data protection

7.3 While we take all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for keeping your account credentials confidential.

8. INTERNATIONAL TRANSFERS

8.1 Your personal data is primarily stored and processed within the UK and European Economic Area (EEA).

8.2 Some of our service providers may process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the UK ICO
  • Adequacy decisions recognising equivalent data protection standards

9. COOKIES

9.1 What Are Cookies

Cookies are small text files stored on your device when you visit the Platform.

9.2 Types of Cookies We Use

Essential Cookies (no consent required):

  • Session management and authentication
  • Security and fraud prevention
  • Platform functionality

Analytics Cookies (consent required):

  • Google Analytics to understand how users interact with the Platform
  • Performance monitoring

Marketing Cookies (consent required):

  • Tracking conversions and ad performance (if applicable)

9.3 Managing Cookies

You can control cookie preferences through:

  • Our cookie consent banner (when you first visit)
  • Your browser settings
  • Third-party opt-out tools (e.g., Google Analytics opt-out)

Disabling essential cookies may affect Platform functionality.

10. THIRD-PARTY WEBSITES

10.1 The Platform contains links to Maker websites and other third-party sites.

10.2 We are not responsible for the privacy practices of third-party websites. When you leave the Platform, we encourage you to review the privacy policy of any site you visit.

10.3 B2C Model: Consumers who are redirected to Maker websites will be subject to the Maker's own privacy policy and terms for any purchases made.

11. CHILDREN'S PRIVACY

11.1 The Platform is not intended for children under 18.

11.2 We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. CHANGES TO THIS PRIVACY POLICY

12.1 We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

12.2 The "Effective date" at the top of this policy shows when it was last updated.

12.3 Where changes are significant, we will notify you by:

  • Email (for registered users)
  • Prominent notice on the Platform
  • Requiring you to accept the updated policy

13. CONTACT US

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: support@delli.market

Postal Address: 9th Floor 107 Cheapside, London, England, EC2V 6DN