Last updated: 20 October 2026

Who we are

Portoá Group Ltd, a company registered in England and Wales (company number 14134124) trades as The Kangaroo Express and is the controller of your personal data. Our address is 159a Woodend Road, Frampton Cotterell, Bristol, BS36 2JD, England. For any privacy question, email [email protected].

The information we collect

  • Contact and order details: your name, email address, phone number, billing and delivery addresses, and the items you order.
  • Payment information: card payments are handled by our payment provider, Stripe. We receive confirmation of payment and limited card details (such as the card type and last four digits), not your full card number.
  • Messages: anything you send us by email or through forms on our website.
  • Marketing preferences: whether you have agreed to receive marketing emails from us.
  • Technical information: your IP address, browser and device type, and information collected through cookies, as described in our Cookie Policy.

How we use it and our legal basis

  • To process and deliver your order and handle returns, because this is necessary to perform our contract with you.
  • To keep accounting and tax records, because the law requires it.
  • To keep our website secure, prevent fraud and improve our service, because we have a legitimate interest in doing so.
  • To send you marketing emails, only with your consent. You can unsubscribe at any time using the link in any email.

Who we share it with

We share only what is needed with: our payment provider (Stripe); the suppliers and fulfilment partners who prepare and send your order, including our product platform AppScenic; delivery companies; our website hosting, email and IT providers; and professional advisers. We will also share information where the law requires it. We never sell your personal data.

International transfers

Some of our service providers process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement.

How long we keep it

We keep order and accounting records for six years, as required for tax purposes. We keep marketing preferences until you unsubscribe. Other information is kept only as long as we need it for the purposes above.

Your rights

Under UK data protection law, you have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email [email protected]. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve your concern first.

Security

Our website uses an encrypted (HTTPS) connection, and we limit access to personal data to people and providers who need it.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.