Privacy & Cookies Policy

At One Stop Stores Limited (“One Stop”, “we”, “us” or “our”), we’re committed to protecting your privacy and handling your personal data responsibly, transparently and securely.

We want you to understand what information we collect, why we collect it, how we use it, how long we keep it, and the rights you have under the UK General Data Protection Regulation (GDPR).

One Stop Stores Limited is part of Tesco Group and acts as the Data Controller for the personal data covered by this Policy.

What this policy covers

This Privacy & Cookies Policy applies when you:

• Visit our websites
• Contact us by phone, email, post or social media
• Complete online forms
• Download brochures, guides or franchise prospectuses
• Register your interest in becoming a One Stop franchisee
• Enter competitions, promotions or surveys
• Receive marketing communications from us
• Visit our stores where CCTV operates
• Use any of our products, services or digital platforms

This Policy also applies whenever we communicate with you regarding our products, services or franchise opportunities.

Our websites may contain links to third-party websites. These websites have their own privacy policies, and we do not accept responsibility or liability for their content or privacy practices.

Personal data we collect

Depending upon your interaction with us, we may collect the following information:

Information You Provide Directly

When you complete contact forms, download a franchise prospectus, submit an enquiry or register for our services, we may collect:

• Name
• Business name
• Postal address
• Email address
• Telephone number
• Job title
• Business information
• Franchise enquiry details
• Any additional information you choose to provide

Prospectus Downloads and Franchise Enquiries

If you download a One Stop franchise prospectus, request franchise information or submit a franchise enquiry, we may collect:

• Name
• Email address
• Telephone number
• Company details
• Location information
• Business ownership experience
• Information relating to your interest in franchise opportunities

We use this information to:

• Provide the requested prospectus or information pack
• Contact you about your enquiry
• Assess suitability for franchise discussions
• Respond to questions and support requests
• Keep records of communications with you
• Send relevant franchise-related updates where you have provided consent or where we have a legitimate interest to do so

Information Collected Automatically

When you browse our websites, we may collect:

• Browsing behaviour on our websites
• Pages viewed
• Website interactions
• Referring websites
• Device information
• Browser type
• Operating system
• IP address
• Mobile device identifiers
• Cookie identifiers

Information Collected Through Communication

When you contact us or we contact you, we may collect:

• Correspondence records
• Customer service enquiries
• Social media interactions
• Call recordings
• Marketing engagement data
• Survey responses
• Feedback and complaints

CCTV

When you visit our stores or offices:

• CCTV footage may record your image
• Images may be used to investigate crime, anti-social behaviour, health and safety incidents and to protect colleagues, customers and business assets

Information from Other Sources

We may receive information from:

• Publicly available sources
• Business directories
• Retail partners
• Marketing partners
• Analytics providers
• Specialist data providers

This information helps us:

• Improve data accuracy
• Better understand customer needs
• Improve marketing effectiveness
• Protect against fraud

How and Why We Use Your Personal Data

We use personal data to:

• Deliver products and services
• Manage customer enquiries
• Process prospectus requests
• Respond to franchise enquiries
• Improve website performance
• Conduct market research
• Develop and improve products and services
• Detect and prevent fraud
• Monitor website usage
• Protect colleagues, customers and assets
• Comply with legal obligations
• Send marketing communications where permitted

Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

Legitimate Interests

We process data to:

• Improve our products and services
• Operate and maintain our websites
• Protect our systems and customers
• Prevent fraud and crime
• Conduct business analysis and reporting
• Manage franchise enquiries

Consent

We rely on consent for:

• Certain marketing communications
• Non-essential cookies
• Some franchise marketing updates
• Surveys where required

Legal Obligations

We process data when required to:

• Comply with legal or regulatory requirements
• Respond to law enforcement requests
• Protect legal rights

Marketing Communications

Where you have consented, or where applicable laws permit, we may contact you regarding:

• Products and services
• Promotions and offers
• Franchise opportunities
• Events and webinars
• Surveys and feedback requests

You can unsubscribe at any time by:

• Clicking the unsubscribe link in an email
• Contacting us directly
• Updating your communication preferences

Sharing Personal Data

We may share personal data with trusted service providers that help us operate our business, including:

• Website hosting providers
• CRM providers
• Marketing platforms
• Analytics providers
• Technology support providers
• Payment processors

These organisations may only use your data to provide services on our behalf and must maintain appropriate security measures.

We may also share information:

• Where required by law
• To prevent fraud or criminal activity
• In connection with legal proceedings
• As part of a sale or transfer

International Transfers

Some of our suppliers may process personal data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

• UK International Data Transfer Agreements (IDTAs)
• UK Addendum to EU Standard Contractual Clauses
• Other approved transfer mechanisms recognised by UK GDPR

How We Protect Personal Data

We take the security of your information seriously and use:

• Data encryption
• Secure Socket Layer (SSL) technology
• Firewalls
• Access controls
• Multi-factor authentication where appropriate
• Physical security measures
• Ongoing security monitoring

Access to personal data is limited to authorised individuals who require it to perform their role.

How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations.

Typical retention periods include:

Record Category	Baseline Retention Period
Franchise Operations	Life of the relationship + 7 years
Record Exceptions	Baseline Exceptions Period
Franchise Enquiries (successful)	Completion of evaluation + 7 years
Franchise Enquiries (unsuccessful)	Completion of evaluation + 1 year
Franchise Onboarding	Creation +7 years
Franchise Marketing	Date of notification +1 year
Franchise Regular Checks	Creation +7 years
Customer Service (Inbound)	Date of notification +1 year
Franchise Account Manager	Creation +7 years
Franchise Training	Creation +7 years

Where data is no longer required, it will be securely deleted, anonymised or destroyed.

Cookies and Similar Technologies

We use cookies, pixels and similar technologies to:

• Remember preferences
• Improve website functionality
• Measure website performance
• Understand user behaviour
• Improve user experience
• Manage analytics
• Support marketing activities

Analytics Cookies

We use analytics technologies including:

Google Analytics

• _ga
• _gid
• _gat

These help us understand:

• Visitor numbers
• Website performance
• User journeys
• Page interactions

Data collected through analytics cookies is anonymised wherever possible.

Marketing Cookies

HubSpot

• __hssc
• __hssrc
• __hstc
• hubspotutk

These cookies help us:

• Manage contact forms
• Understand website engagement
• Improve communications

Meta (Facebook) Pixel

• _fbp

This cookie helps measure campaign effectiveness and improve advertising relevance.

Your Cookie Choices

When you visit our website, you can manage your cookie preferences through our cookie banner or cookie settings centre.

You may also:

• Change browser settings
• Delete cookies
• Restrict cookie usage

Disabling certain cookies may affect website functionality.

Your Data Protection Rights

Subject Access

You have the right to see the personal data we hold about you. This is called a Subject Access Request or SAR. If you’d like a copy of the personal data we hold about you, please email us at: SARrequests@onestop.co.uk

Post:

Data Protection Officer, One Stop Stores Limited, Maldon Building, Falcon Way, Shire Park, Welwyn Garden City, AL7 1GA

Inaccurate data

If you believe we hold inaccurate or incomplete data, let us know and we’ll correct it.

Please email us at: dataprivacy@onestop.co.uk

Erasure (Right to be Forgotten)

If you believe we hold inaccurate or incomplete data, let us know and we’ll correct it.

• The data is no longer needed
• You withdraw consent
• You object to processing and there are no overriding legitimate grounds
• The data has been processed unlawfully
• Deletion is required by law

How we protect personal data

Where we have a legal obligation to retain information, we may not be able to remove all records immediately, but we will explain why.

Please email us at: dataprivacy@onestop.co.uk

Data Portability

Request transfer of personal data you have provided to us.

Objection

Object to processing based on legitimate interests or direct marketing.

If you object to direct marketing, we will stop using your data for that purpose immediately.

Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Contact Us

If you have any questions about this Privacy & Cookies Policy or how we process your personal data, please contact:

Phone: 01543 363 133

Email: customer.services@onestop.co.uk

Post: One Stop Stores Ltd, Apex Road, Brownhills, Walsall, West Midlands, WS8 7HU

Please note that calls to and from our Customer Service Centre may be recorded for training, quality assurance and compliance purposes.

This Privacy & Cookies Policy was last updated in October 2026 and may be updated periodically to reflect changes in legislation, regulatory guidance, business practices or our services.