Privacy Policy

Last updated: 21 July 2026

This policy explains how 福源行 collects, uses and protects your personal data when you use our website and mobile app.

1. Information we collect

Account information: your name, email address, mobile number, delivery addresses, and the name and address of the business you order for.
Order information: products you browse and buy, orders, invoices, statements and payment status.
Device and usage information: device model, OS version, app version, crash logs and basic usage statistics.
Push token: an identifier used to send you order and delivery notifications (Firebase Cloud Messaging).
Location (only with your permission): used to show delivery progress on a map. We do not collect location in the background.
Camera and photo library (only when you actively use them): to scan product barcodes, or to attach an image you choose to an order. Camera frames are processed on your device and are not uploaded.

To process and deliver your orders and to issue invoices and statements.
To provide account features: order history, credit limits, loyalty points and benefits, and reordering.
To send you notifications about orders, deliveries and your account.
To keep the service secure, prevent fraud, and meet our tax and accounting record-keeping obligations under UK law.
To improve our products and services using aggregated usage statistics and crash reports.

We do not sell your personal data.
We do not use your data for third-party advertising.
We do not access your location, camera or photo library without your permission.

Stripe, our payment processor, to take card payments. We never store your full card number.
Google Firebase, for push notifications and crash reporting.
Our delivery staff and couriers, who receive the name, address and phone number needed to complete your delivery.
Regulators or law enforcement where we are legally required to disclose information.

Account details: for as long as your account is active.
Orders, invoices and statements: at least 6 years from the date of the transaction, as required by UK tax and accounting law. These business records are retained even if you delete your account.
Crash and usage logs: normally no longer than 12 months.

You can delete your account at any time in the app under Account → Profile → Delete Account. Your login stops working immediately on all devices and your personal profile is removed.
You can also email us at the address below to request deletion.
Under UK GDPR you have the right to access, correct and erase your data, to restrict or object to processing, and to data portability.
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

All data is transmitted over encrypted HTTPS connections.
Login tokens are held in the device’s secure storage (iOS Keychain / Android EncryptedStorage).
Access to personal data is limited to authorised staff on a need-to-know basis.

Our service is intended for business customers and is not directed at anyone under 16. We do not knowingly collect personal data from children.

福源行

ADSR Market Ltd/Fu Yong Hang, Unit 3-4, Chester-le-Street, Birtley, DH3 2SA