Last updated: August 2026
The Next Drop provides the software sellers use to take orders. When you place an order, the seller you ordered from decides how your details are used — they are the data controller. The Next Drop stores that data on their behalf as their processor. For a seller's own account details, The Next Drop is the controller.
If you place an order: your name and phone number, plus a delivery address and any note you choose to add. We ask for nothing else — there is no account to create and no password.
If you sell with us: your email address, business details, and payment information handled by Stripe. We never see or store your card number.
Buyer details are processed to perform the contract you entered into when you ordered — the seller needs them to prepare your order and hand it over. Seller account data is processed to provide and bill for the service.
Your phone number is visible only to the seller you ordered from. It is never shown to other sellers, never sold, never used for marketing, and never shared with third parties for their own purposes. Our infrastructure providers (Supabase for the database, Vercel for hosting, Resend for sign-in emails, Stripe for seller subscriptions) process data only to run the service.
Buyer personal data is automatically anonymised 24 months after your last order. Order totals and dates are kept after that for the seller's accounting records, but they no longer identify you. Seller accounts are kept until deleted; deleting an account removes its drops, items, customers, orders and uploaded images.
Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how it is used.
Email privacy@thenextdrop.co.uk for any request. We respond within one month, as UK GDPR requires. If you are unhappy with our response you can complain to the Information Commissioner's Office.
We use one essential cookie to keep sellers signed in. There are no advertising, analytics or tracking cookies, so there is no consent banner to click. Buyers ordering from a drop page are not tracked.
Your data is stored and processed on servers in Frankfurt, Germany, within the European Economic Area. The UK recognises the EEA as providing an adequate level of data protection, so no additional transfer safeguards are required. We will not move your data outside the UK or EEA without updating this page and putting appropriate safeguards in place.
If we change how we handle personal data we will update this page and its date.