Last updated: October 2026
The Next Drop provides the software sellers use to take orders. When you place an order, the seller you ordered from decides how your details are used — they are the data controller. The Next Drop stores that data on their behalf as their processor. For a seller's own account details, The Next Drop is the controller.
Precious Memories Ltd (trading as The Next Drop) is responsible for the details in this section. We sometimes email food businesses to tell them about The Next Drop. We only email a business that is a limited company or has agreed to hear from us, and we only use contact details the business has published itself, such as on its own website.
What we hold: the business name, the email address or phone number it published, the name of the person we wrote to (if the business published it), where we found the details, and any replies. Our emails are sent and stored by our email provider, Hostinger.
Why we can hold it: we have a legitimate interest in telling food businesses about a service that may help them. You can object at any time, and we'll stop.
How long we keep it: we delete these details 6 months after we last contacted you, unless you sign up as a seller. If you ask us to stop, we keep only your business name and email address on a “do not contact” list, so you aren't contacted again.
Your rights: the rights listed under “Your rights” below apply here too, including the right to complain to the ICO. Reply “stop” to any of our emails or write to privacy@thenextdrop.co.uk.
If you place an order: your name and phone number, plus a delivery address and any note you choose to add. We ask for nothing else — there is no account to create and no password.
If you sell with us: your email address, business details, and payment information handled by Stripe. We never see or store your card number.
Buyer details are processed to perform the contract you entered into when you ordered — the seller needs them to prepare your order and hand it over. Seller account data is processed to provide and bill for the service.
Your phone number is visible only to the seller you ordered from. It is never shown to other sellers, never sold, never used for marketing, and never shared with third parties for their own purposes. Our infrastructure providers (Supabase for the database, Vercel for hosting, Resend for sign-in emails, Stripe for seller subscriptions) process data only to run the service.
Buyer personal data is automatically anonymised 24 months after your last order. Order totals and dates are kept after that for the seller's accounting records, but they no longer identify you. Seller accounts are kept until deleted; deleting an account removes its drops, items, customers, orders and uploaded images.
Under UK GDPR you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how it is used.
Email privacy@thenextdrop.co.uk for any request. We respond within one month, as UK GDPR requires. If you are unhappy with our response you can complain to the Information Commissioner's Office.
We use one essential cookie to keep sellers signed in. There are no advertising, analytics or tracking cookies, so there is no consent banner to click. Buyers ordering from a drop page are not tracked.
Your data is stored and processed on servers in Frankfurt, Germany, within the European Economic Area. The UK recognises the EEA as providing an adequate level of data protection, so no additional transfer safeguards are required. We will not move your data outside the UK or EEA without updating this page and putting appropriate safeguards in place.
If we change how we handle personal data we will update this page and its date.