Legal
Privacy notice
Plain and simple: this is a small, static website that respects your privacy.
The short version
This website is a simple set of pages telling you about C&K Local Store: where we are, when we’re open and what we sell. There are no cookies, no analytics, no tracking or advertising, and no forms anywhere on it. You can’t create an account, sign up to anything or buy anything here, so there is nothing for you to fill in and nothing for us to store.
The one thing we can’t honestly claim is that nothing at all is recorded. Like every website, ours is served by a web host, and that host keeps short-term technical logs. There’s also a map on our Visit us page that loads from OpenStreetMap. Both are explained below.
Who we are
C&K Local Store, 76 London Road, Worcester, Worcestershire WR5 2DY, is the “data controller” for this website. We’re a small independent shop, not a large organisation, and we are not required to have a data protection officer.
We don’t publish an email address, so the way to reach us about anything in this notice is by phone on 07920 778629 during opening hours, or in person at the shop.
Cookies & local storage
This site sets no cookies of any kind — not for tracking, not for marketing, and not for “essential” purposes either. It also doesn’t use local storage, session storage or any similar way of keeping data on your device, and there are no tracking pixels or fingerprinting scripts. That’s why you don’t get a cookie banner: there’s nothing to consent to.
The small amount of JavaScript the site does run — the mobile menu, the “open now” indicator and a fade-in as you scroll — works entirely inside your browser. The “open now” badge simply compares your device’s own clock against our opening hours. None of it is sent anywhere.
Analytics & advertising
We don’t use Google Analytics or any other analytics or measurement tool, and we run no advertising, remarketing or social media tracking. We don’t profile visitors and we don’t make any automated decisions about you. If we ever add anything that changes this, we’ll update this notice first, and ask for your consent where the law requires it.
Hosting & server logs
The site is hosted on Firebase Hosting, a service provided by Google, and delivered through its content delivery network. As with any web server, when your browser requests a page the hosting service automatically records standard technical information, typically including your IP address, the date and time, the page or file requested, your browser and device type (the “user agent”), and the page that referred you.
Your IP address counts as personal data under UK data protection law, so we want to be clear about it: these logs exist, they’re generated by our host rather than by anything we’ve added, and we don’t have an analytics dashboard sitting on top of them. We don’t use them to identify individual visitors, we don’t combine them with any other information, and we don’t build profiles or share them for marketing.
Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR): keeping the site online, secure and working properly, and protecting it from abuse. The logs are held for a short period by our host under its own retention schedule and then deleted. Google may process this information outside the UK, in which case it relies on the safeguards set out in its own privacy and data transfer terms — see Firebase’s privacy and security information and the Google privacy policy.
The map on our Visit us page
Our Visit us page includes an embedded map from OpenStreetMap so you can find the shop. This is the only third-party content on the site that loads by itself: when you open that page, your browser fetches the map directly from openstreetmap.org, which means OpenStreetMap receives your IP address and basic browser information. It’s covered by the OpenStreetMap Foundation’s privacy policy, not by ours.
The map loads lazily, so it’s only requested if you actually reach it, and we set a referrer policy that limits what is passed on to other sites. No other page on this website loads anything from a third party. If you’d rather avoid the request entirely, simply don’t visit that page — every detail shown on the map is also written out in text on the same page, and you can block third-party frames in your browser.
Fonts, images & other files
Everything else the site needs — the typeface, all photographs, icons and stylesheets — is served from this website itself. We deliberately don’t use Google Fonts or any other external font, script or image service, so loading these pages doesn’t quietly tell a third party that you were here.
Links to other websites
We link out to Google Maps for directions and to our Google Business Profile listing. Those links only do something when you click them — nothing is loaded from Google unless you do. Once you follow a link you’re on someone else’s website, under their privacy policy, and we have no control over what they collect. The same goes for the “view a larger map” link to OpenStreetMap.
If you get in touch
If you call us or come into the shop, we use what you tell us only to help with your enquiry. We don’t add you to a mailing list, we don’t pass your details to anyone for marketing, and we keep no customer database from this website. Our lawful basis for dealing with your enquiry is legitimate interests — answering a question you’ve chosen to ask us.
Please don’t send us sensitive personal information; there’s no need for it, and this website gives you no way to submit it in any case.
Children
This site is general information about a local shop and isn’t aimed at children. We don’t knowingly collect personal data from anyone, children included. Age-restricted products such as alcohol and vaping are sold only in the shop, in person, under Challenge 25 — never online and never through this website.
Your rights
Under UK GDPR you have the right to ask us for a copy of any personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and in some cases to have it transferred to you or someone else. Because we don’t rely on consent for anything on this website, there’s no consent for you to withdraw.
In practice, this website gives us nothing to look up: the only personal data connected with it is the short-term hosting log described above, which is held by our host, isn’t searchable by name, and can’t reasonably be tied back to you by us. If you believe we hold something about you, ask us and we’ll do what we can to help, free of charge and normally within one month.
Complaints
If you’re unhappy with how we’ve handled your personal data, please tell us first and we’ll try to put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or on their helpline, 0303 123 1113.
Changes to this notice
If the website changes in a way that affects your privacy — for example if we ever add a contact form, online ordering or analytics — we’ll update this page and change the date at the top before that change goes live.
Questions
Any questions about privacy, just ask. Call us on 07920 778629 or pop into the shop at 76 London Road, Worcester WR5 2DY.