Privacy policy

Discretion is the point of this product, and we treat your data the same way: we collect what we need to take your order and improve the site, and nothing else.

Who is responsible

AIO Labs Limited (company number 17152625, registered office 60 Tottenham Court Road, London, England, W1T 2EW), trading as PocketFresh, is the data controller for pocketfre.sh. Contact us about your data at hello@pocketfre.sh.

What we collect, and why

When you order: your email, name, delivery and billing addresses, and what you bought. We use these to fulfil your order, send your receipt and delivery updates, and honour the guarantee. Lawful basis: performing our contract with you.

Payment: your card details go directly to Stripe, our payment processor — they never touch our servers, and we can’t see them. Stripe acts as its own controller for fraud prevention; its privacy policy is at stripe.com/privacy. Your statement shows “AIO Labs Limited” — the product name appears nowhere on it.

When you browse: we use PostHog (hosted in the EU) to understand how the site is used — pages viewed, buttons clicked, and session replays in which everything you type is masked before it leaves your browser. Card fields are handled inside Stripe’s own frames and are never visible to replay. We also test different versions of the page and record which version you saw. Lawful basis: our legitimate interest in improving the site. Our host, Cloudflare, processes IP addresses in server logs to serve the site securely.

Cookies and similar storage

PostHog stores an identifier in cookies and local storage so visits aren’t double-counted and so you see the same version of the page each time. Stripe sets cookies needed for secure payment. We don’t run advertising cookies or sell data to anyone.

Who we share data with

Only the services that make the shop work: Stripe (payment), PostHog (analytics, EU-hosted), Cloudflare (hosting and security), and our delivery carrier (your name and address, in plain packaging). Each processes data under contract. Where any of them transfer data outside the UK, they do so under recognised safeguards such as the UK Addendum to the EU standard contractual clauses.

How long we keep it

Order records are kept for six years to meet tax and accounting rules. Analytics data is kept in line with PostHog’s retention settings and then deleted. We don’t keep anything longer than we need it.

Your rights

Under UK data protection law you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict our processing, and ask for your data in a portable format. Email hello@pocketfre.sh and we’ll respond within a month. If you’re not happy with how we handle it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We’ll update this page if our practices change, and the date at the top will always tell you when it was last touched.