1. Who we are
This policy explains how personal data is handled when you browse asaros.uk, place an order, set up a regular feed delivery or write to us. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The data controller is ASAROS LTD, trading as Asaros, a company registered in England and Wales under company number 17069831.
- Registered address: 321-323 High Road Office 9471, Chadwell Heath, Essex, United Kingdom, RM6 6AX
- Email: [email protected]
- Phone: +44 7483 615927
- Website: asaros.uk
For any question about this policy or your data, email us at the address above.
2. Data we collect
Order and delivery data
When you place an order we ask for your full name, email address, phone number, delivery address, town or city, postcode and, if you choose, a comment on the order (for example a safe place to leave a heavy feed sack). We also keep a record of what you bought, the order number, the amounts and the delivery status.
Regular feed delivery
If you subscribe to a feed plan we keep the plan you chose, delivery frequency, next dispatch date, any pauses, skips or changes you request, and the history of deliveries made under the plan.
Payment data
Card payments are taken by our payment provider. We do not see or store your full card number or security code. The provider shares with us only the information needed to match a payment to an order, such as the payment status, amount, date, card type and the last four digits of the card. For feed plans the provider keeps a secure payment token so that future deliveries can be charged.
Email correspondence
Our website has no server-side contact form. The contact buttons open your own email app. When you email us we receive your email address, name, the content of your message and anything you attach, and we keep this correspondence to answer you and to handle orders, returns and complaints.
Phone calls
If you call us we may note your name, number and the reason for the call against your order. We do not record calls.
Technical data
Like any website, our hosting provider automatically receives technical data such as your IP address, browser type, the pages requested and the time of the request. These server logs are used to keep the site running and secure.
The cart and checkout on this website work entirely in your browser. Cart contents are held only in the memory of the open page and are cleared when you close or reload it.
3. Purposes and legal bases
| What we do | Legal basis |
|---|---|
| Process and deliver your order, send order and dispatch confirmations, handle returns and refunds | Contract |
| Run your regular feed delivery, including charging each delivery and handling pauses or cancellations | Contract |
| Answer your emails and calls | Contract, where it relates to an order; otherwise legitimate interests in replying to customers |
| Keep accounting and tax records | Legal obligation |
| Deal with your rights under the Consumer Contracts Regulations 2013 and the Consumer Rights Act 2015 | Legal obligation |
| Prevent fraud, keep the website secure, defend legal claims | Legitimate interests |
| Send occasional emails about our products, where you have asked for them | Consent |
Where we rely on legitimate interests, we have weighed those interests against your rights and you can object at any time (see section 9). We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
5. International transfers
We aim to keep personal data in the UK. Some of our providers, for example email or payment services, may process data outside the UK. When that happens we make sure the transfer is protected by UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any extra safeguards needed. You can ask us for details of the safeguards used.
6. How long we keep data
- Orders, invoices and payment records: 6 years from the end of the financial year of the order, as required for tax and accounting.
- Feed plan details: for as long as the plan is active, then 6 years for accounting records of past deliveries.
- Email correspondence: up to 2 years after the last message, or 6 years if it relates to an order, return or complaint.
- Marketing consent records: until you withdraw consent, plus 2 years as evidence of consent and withdrawal.
- Server logs: up to 30 days, unless needed to investigate a security incident.
When data is no longer needed we delete it securely or anonymise it.
7. Security
The website is served over an encrypted HTTPS connection. Access to order data is limited to people who need it to fulfil orders, accounts are protected with strong passwords and two-factor authentication, and our providers are chosen for their security standards. Card data is handled only by our payment provider. If a breach occurs that is likely to put your rights at risk, we will tell you and the ICO as the law requires.
9. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectification of inaccurate or incomplete data.
- Erasure of your data where there is no longer a reason to keep it.
- Restriction of processing, for example while we check a disputed point.
- Data portability: receiving data you gave us in a common machine-readable format, or having it sent to another company.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent where we rely on consent.
To use any of these rights, email [email protected]. We will reply within one month. This is free of charge, although we may need to confirm your identity first. Some rights have exceptions, for example we must keep invoices for tax purposes even if you ask for erasure.
10. Withdrawing consent
Where we process data based on your consent, you can withdraw it at any time by emailing [email protected] or using the unsubscribe link in any marketing email. Withdrawal does not affect processing carried out before it, and it does not affect orders or feed plans, which we process to fulfil our contract with you.
11. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk, helpline 0303 123 1113.
12. Children
Our shop is intended for adults. We do not knowingly collect personal data from anyone under 18, and orders must be placed by an adult. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy when our services, providers or the law change. The date at the top of the page shows when it was last revised. If changes are significant, we will let customers with active feed plans know by email.
Last updated: 12 October 2026.