Last updated: March 2026
This page allows you to request the deletion of specific personal data that Elaka Food City holds about you, without necessarily deleting your entire account. If you wish to delete your account entirely, please visit our Account Deletion page instead.
We take your privacy rights seriously and handle all data deletion requests in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we are legally required to retain certain records, we will explain this clearly.
A data deletion request (also referred to as a “right to erasure” request under UK GDPR) allows you to ask us to remove specific personal data we hold about you. This is separate from account deletion and is intended for situations such as:
Not all data can be deleted on request. Where we have a legal obligation to retain records (for example, order and tax records under HMRC requirements), that obligation takes precedence over an erasure request. We explain this in detail in Section 3 below.
The following types of personal data can be deleted on request, or in many cases can be removed by you directly through your account settings:
You can remove any saved delivery address from your account through the address book in your account settings at any time. Addresses used in completed orders are retained as part of the order record for legal compliance (see Section 3).
You can update your name and phone number through your account settings. If you wish to have a specific piece of profile information deleted rather than updated, submit a request by email and we will review it. Note that if your name and contact details are needed to fulfil a pending or recent order, they may be retained for that purpose.
You can remove individual items from your wishlist at any time through the app or website. If you would like the entire wishlist cleared, you can do so through your account, or request it by email.
Your device push notification token is used solely to deliver app notifications to you. You can disable push notifications through your device settings at any time. If you want the stored token removed from our systems, contact us and we will process this request.
We do not send marketing emails. If you have received any communications from us and wish to stop receiving them, or if you want us to confirm the basis on which we hold contact information, please contact us and we will address your request.
Certain data cannot be deleted on request because we are legally obligated to keep it. Under UK GDPR, the right to erasure does not apply where processing is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims. The data and applicable retention periods are as follows:
Records of each order, including items purchased, amounts paid, delivery details, and payment references, must be retained for financial accounting and tax compliance purposes. HMRC requires UK limited companies to keep accounting records for a minimum of 6 years from the end of the financial year in which the transaction occurred (Companies Act 2006, Schedule 4; Corporation Tax Act 2010). Self-employed traders are required to retain records for 5 years from the 31 January following the relevant tax year.
For card payments processed through Stripe, we retain the transaction reference identifier, payment status, and order amount. We do not hold any card details. These references are required to handle refunds, disputes, and chargebacks. Card networks generally allow cardholders to raise a dispute up to 120 days from the original transaction date, with some networks and circumstances allowing a longer window. Accordingly, these records must remain accessible throughout the potential dispute period and for broader tax compliance purposes.
Where a refund was issued, the original order and the refund transaction form part of our accounting records and must be retained for the same period as the underlying order.
If you raised a formal complaint or dispute with us, we may retain records of that correspondence and its resolution for as long as is necessary to protect our legal position, typically in line with the limitation periods under the Limitation Act 1980 (generally 6 years for contract claims).
In all cases where data must be retained, we minimise the personal information included to what is strictly necessary for the compliance purpose. Data retained for legal reasons is not used for any other purpose such as marketing, profiling, or analysis.
To submit a data deletion request, send an email to:
Elaka Food City — Data Deletion Request
Email: info@elakafoodcity.com
Subject line: Data Deletion Request
Please include the following in your email so that we can locate your data and process your request accurately:
For your security, we may need to verify your identity before acting on your request. We will only accept requests from the email address registered to the account in question.
We will acknowledge your request promptly and respond in full within one month of receiving it, as required by UK GDPR. For complex or multiple requests, we may extend this by a further two months, in which case we will inform you within the first month and explain the reason for the extension.
Our response will confirm:
We will not charge a fee for handling your request unless it is manifestly unfounded or excessive, in which case we may either charge a reasonable administrative fee or decline to act on it.
The right to erasure is one of several rights you have under the UK GDPR. In connection with the personal data we hold, you also have:
All of these rights can be exercised by contacting us at info@elakafoodcity.com. For more information on your rights and how to exercise them, you can visit the Information Commissioner's Office website at ico.org.uk.
If you are not satisfied with how we have handled your request or any aspect of how we manage your personal data, you have the right to lodge a complaint directly with the ICO without first contacting us, although we encourage you to give us the opportunity to address your concern first.
For any questions about your data or to submit a deletion request: