FeaturesHow it WorksFAQFor RetailersJoin the Waitlist

Privacy Policy

Last updated: 1 May 2026

1. Introduction

Street.london ("we," "our," or "us") values your privacy. This Privacy Policy explains how we collect, use, and share personal data when you visit our website, interact with our services, submit information through our webforms, or shop with merchants who use the STREET app on Shopify.

Sections 1 to 7 cover our marketing website at street.london. Section 8 covers personal data processed through the STREET Shopify app and STREET mobile apps. By using this website or any STREET service, you agree to the terms of this Privacy Policy.

2. Personal Data We Collect

2.1 Website Analytics

This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device
  • Web pages you visited prior to coming to this website
  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks
  • Internal links
  • Pages visited
  • Scrolling
  • Searches
  • Timestamps

We share this information with Vercel, our website hosting provider, to learn about site traffic and activity.

2.2 Webforms & Submitted Data

When you submit a form on our website, we collect the information you provide. This may include:

  • Name
  • Email address
  • Contact details
  • Any other details entered into the form

We use this data to respond to your submissions and improve our services. This information may be shared with:

  • Vercel – to facilitate website hosting and functionality
  • Amazon AWS – for secure data storage
  • Zapier – to automate and transfer data where necessary

2.3 Hosting Provider

This website is hosted by Vercel. Vercel collects personal data when you visit this website, including:

  • Information about your browser, network and device
  • Web pages you visited prior to coming to this website
  • Web pages you view while on this website
  • Your IP address

Vercel needs the data to run this website, and to protect and improve its platform and services. Vercel analyses the data in a de-personalised form.

3. How We Use Your Data

We collect and use your personal data for the following purposes:

  • To operate and improve our website
  • To analyse website traffic and user behaviour
  • To enhance website functionality and security
  • To respond to user inquiries and feedback
  • To automate data processing (where applicable)

4. Data Sharing & Third Parties

We do not sell or rent your personal data. However, we share data with third parties only where necessary:

  • Vercel – website hosting and analytics
  • Amazon AWS – secure storage of form submissions
  • Zapier – automation and data transfer (if applicable)

These third parties process your data according to their own privacy policies.

5. Your Rights

If you are located in the UK, the European Economic Area, or another jurisdiction with comparable data protection laws, you have the right to:

  • Access the personal data we hold about you
  • Request corrections to inaccurate or incomplete data
  • Request deletion of your data ("right to erasure")
  • Restrict or object to certain processing activities
  • Receive a portable copy of your data ("data portability")
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk)

To exercise your rights, please contact us at support@street.london. We will respond within one month, as required by the UK GDPR.

6. Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your experience. You can manage or disable cookies through your browser settings.

7. Data Security

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, misuse, or alteration. These include encryption in transit, access controls, environment separation between staging and production, audit logging, and a documented incident response process. However, no online data transmission is 100% secure.

8. STREET Shopify App Privacy Notice

This section applies when a Shopify merchant installs the STREET app from the Shopify App Store, and to customers of merchants who use the STREET platform. STREET acts as a data processor for the merchant under their instructions, and as a data controller for limited operational uses described below.

8.1 Data We Process

Through the STREET Shopify app and the STREET mobile apps, we process the following categories of personal data on behalf of merchants:

  • Customer name, email address, phone number
  • Shipping and billing address
  • Order details (line items, quantities, totals, fulfilment status)
  • Delivery tracking information (location updates during same-day delivery)
  • Account and authentication data for STREET app users (where applicable)

We do not process payment card data. Payments are processed directly by Shopify and the merchant's payment provider.

8.2 How We Use This Data

  • To synchronise products, inventory, and orders between Shopify and the STREET platform
  • To deliver orders to customers, including coordinating same-day delivery via courier partners
  • To send order, delivery, and account notifications to customers via email, SMS, or push notification
  • To provide customer support and fulfil tax, accounting, and statutory obligations
  • To detect, prevent, and respond to fraud, abuse, and security incidents

8.3 Lawful Basis

We rely on the following lawful bases under the UK GDPR and EU GDPR:

  • Contract – to fulfil the contract between the customer and the merchant, and the contract between STREET and the merchant
  • Legitimate interest – to operate, secure, and improve the STREET service
  • Legal obligation – to retain transaction records for tax and accounting purposes

8.4 Sub-Processors

We share personal data with the following sub-processors who help us operate the STREET service. Each sub-processor is contractually bound to apply appropriate technical and organisational measures.

  • Amazon Web Services (AWS) – application hosting and database storage (UK / EU regions)
  • Shopify – source of merchant and customer data, billing, and embedded app delivery
  • Sentry – error and performance monitoring (logs may include partial request metadata)
  • Google Firebase – push notifications and real-time delivery tracking
  • Vonage – SMS notifications to customers
  • Amplitude – product analytics for the STREET mobile apps
  • Stuart – courier delivery service for same-day orders
  • Vercel – marketing website hosting

8.5 International Transfers

Some sub-processors are located outside the UK or EEA. Where data is transferred internationally, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent safeguards approved by the UK Information Commissioner's Office.

8.6 Data Retention

We retain Shopify customer data for the duration of the merchant's installation of the STREET app, plus a short period required to complete in-flight orders and fulfilment.

When a merchant uninstalls the STREET app, Shopify sends a shop/redact webhook 48 hours later, and we delete or anonymise the merchant's data within 30 days of receiving it.

When a customer requests erasure (directly or via Shopify's customers/redact webhook), we delete or anonymise their personal data within 30 days, except where we are required to retain limited transaction records for up to 7 years to comply with UK tax law.

8.7 Customer Rights and Requests

Customers of STREET-enabled merchants can exercise their rights set out in section 7 by contacting either:

  • The merchant they purchased from (the merchant is the primary data controller for their customer data)
  • STREET directly at support@street.london – we will forward the request to the merchant where required and respond within one month

Shopify also supports the customers/data_request webhook for formal data subject access requests, which we honour within 30 days.

8.8 Shopify Protected Customer Data

The STREET Shopify app processes Shopify Protected Customer Data (Level 2) under Shopify's Protected Customer Data programme. We have implemented controls including encryption at rest and in transit, environment separation, access controls, audit logging, password policy, and a documented incident response process.

9. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Material changes affecting Shopify merchants or their customers will be communicated through the STREET app or by email where contact details are available.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

support@street.london