Privacy policy

Who we are

S & T ENTERPRISES LTD operates Samis Online at samisonline.com and the SamisOnline Android and iOS shopping apps. Our contact address is 82–89 Cecil Street, Birmingham B19 3SU, United Kingdom.

Femi Diipo is the contact for privacy questions and data-rights requests at digital@samisonline.com. This notice covers the Samis shopping service, including the website shown inside our apps. It does not replace a separate notice for employment or another S&T service.

Information we use

Account and delivery information: your name, email address, telephone number, password authentication record, delivery address, postcode, account identifier and communication preferences. We also keep verification and password-reset security records. Passwords are protected by our authentication provider; staff should never ask you to send your password.

Shopping information: products and quantities ordered, prices, discounts, loyalty information, order and payment references, payment status, delivery/tracking details, refunds and communications about your purchase. Where you previously used Samis, we may match historical Samis customer, order and loyalty records to your verified account.

Payments are processed through Square. Card details are provided to Square's payment service; Samis uses transaction references and payment outcomes to manage your order. Do not send full card details to our support team.

Technical information can include IP address, browser/device information, requested pages, security events and service errors processed by our hosting and security providers. If you opt in to optional analytics, Google Analytics also receives usage events and browser/device identifiers to help us understand use of the service.

The mobile barcode scanner uses the camera only when you choose Scan and grant permission. Images are processed on your device to read product barcodes; this scanner does not upload camera photos or video to Samis. The resulting barcode is sent as a catalogue search. You can decline camera access and use manual search. The current app does not request GPS location, contacts, microphone or photo-library access; you enter your delivery address yourself.

Why we use information

We use account, order, payment and delivery information to provide the shopping service and fulfil our contract with you, including responding to enquiries, delivering purchases and handling returns or refunds.

We use necessary security, fraud-prevention and operational records for our legitimate interests in protecting customers and maintaining the service. We retain records where required for accounting, tax and other legal obligations.

Optional analytics and promotional communications rely on your consent. You can reject analytics through Cookie settings and change marketing preferences in your account or contact us. Essential service messages about verification, security and orders are separate from promotional messages.

Service providers and sharing

Authorised S&T staff and service providers process information only as needed for their roles. Providers supporting the current service include Vercel (website hosting and logs), Supabase (database and authentication), Square (payments), Resend (email), Sendcloud and delivery carriers (shipping), and Google Analytics if you accept analytics. WhatsApp/Meta may process messages when that channel is used. S&T's connected operations systems receive relevant order, fulfilment and loyalty information.

We do not sell your personal information. We may disclose necessary information to professional advisers, authorities or others where legally required or necessary to establish, exercise or defend legal claims. Payment, messaging and delivery providers may also act under their own privacy notices.

Some providers or authorised support personnel may process information outside the UK. Where required, appropriate transfer safeguards must apply, such as an adequacy decision or approved contractual protections. Contact us for information about safeguards applicable to your data; this notice does not promise that every provider stores all data only in the UK.

Cookies and your choices

Essential cookies and local storage support secure sign-in, basket contents and your privacy preferences. These are necessary for features you request. Optional Google Analytics is off unless you select Accept analytics. Rejecting analytics does not prevent shopping.

Use Cookie settings at the foot of a page to change your decision. Withdrawing analytics consent stops future analytics loading on this device and clears accessible Google Analytics cookies. A withdrawal does not automatically erase information already sent to Google; contact us to request erasure of identifiable data. Your browser and operating system also provide storage and camera-permission controls.

Retention and account deletion

You can initiate deletion in the app through Account → Delete account, or directly at samisonline.com/delete-account. Sign in to establish account ownership, enter your password again and confirm the request. The form gives you a reference number. If you cannot regain account access, contact the privacy contact so we can help verify ownership; this is an alternative, not a requirement to telephone or email instead of using the form.

Deletion is a reviewed process, not immediate account deactivation. We aim to complete account and non-required personal-data erasure without undue delay and within one calendar month. We will confirm completion and explain any data retained and why. If the law permits an extension for a complex request, we will explain the reason and revised timeframe within the initial month.

Completion removes the Samis login and unnecessary account/profile, delivery-preference and marketing data. We review associated historical records and connected systems and notify relevant recipients where required. Simply marking an account inactive is not completion. Any genuinely separate S&T account is assessed separately so that an unrelated service is not deleted accidentally.

Necessary transaction, invoice, refund and accounting records are generally retained for six years after the end of the financial year they relate to, and longer where a legal requirement or active claim requires it. Only information necessary for those purposes is retained. An open delivery, refund or dispute does not justify keeping unrelated profile or marketing information indefinitely.

Other records are kept only while needed for their stated purpose. Security, support and deletion-request records are reviewed for minimisation, and we retain only the evidence needed for security, handling the request or legal obligations. Our response will identify any exception that applies to your data. Backups may retain erased records until their scheduled replacement; those copies are kept beyond normal use and deletion must be reapplied if a backup is restored.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or transfer of your personal data, object to processing based on legitimate interests, and withdraw consent. Contact digital@samisonline.com. We may need proportionate information to verify your identity, but will not request your password or full payment-card details.

If you are unhappy with our handling of your information, contact us first or complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not have to contact us before exercising your right to complain.

The service is a general grocery-shopping service, not directed at children. If a child has supplied personal information and you want it reviewed or removed, contact us. We will take particular care with such requests.

Security and changes

We use HTTPS, access controls and protected authentication to help safeguard information. No internet service can guarantee absolute security. Keep your device and account credentials secure and report suspected account misuse promptly.

We will update this notice when the service or our practices change and show the effective date above. Material changes that require a new choice or consent will be presented before that processing begins.