Privacy policy

Your privacy matters to us at Broomfield Coffee Company. This policy explains what personal information we collect, how we use it, and your rights over it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

www.broomfieldcoffee.co.uk (the "Website") is owned and operated by Broomfield Coffee Company Limited ("Broomfield Coffee Company", "we", "us", "our"). 

This policy covers: 

  • What data we collect and how we use it
  • The legal basis for processing your data
  • Whether your data is shared with third parties
  • How long we keep your data
  • Your rights, and how to raise a complaint 

1. What Data We Collect 

Depending on how you use our Website, we may collect: 

  • Your name – so we can address you personally and process payment.
  • Email address – to confirm your order, follow up on any fulfilment issues, and, if you've opted in, send you newsletters and updates about our products and services.
  • Telephone number – so we can contact you about your order if needed.
  • Postal and delivery address – to fulfil your order, including gift orders sent to a different address.
  • Billing address – to verify payment and prevent fraud.
  • Business details (for wholesale customers) – such as business name, VAT number, and billing/postal address, to set up and manage your account.
  • Website usage data – such as your IP address, browser, and device type, collected via cookies (see below). 

We do not store your payment card details. Card payments are processed securely by our payment provider, Stripe. Facilitating a transaction requires Stripe to process details such as your card number, expiry date, and CVC, in line with Stripe's own privacy policy: https://stripe.com/privacy. Please never send us your card details by email or post. 

2. Legal Basis for Processing 

We rely on the following legal bases to process your personal data: 

  • Consent – for example, when you sign up to receive marketing emails. You can withdraw this consent at any time by unsubscribing or contacting us.
  • Contract – where we need to process your data to fulfil an order, subscription, or wholesale agreement, or to take steps at your request before entering into one.
  • Legitimate interests – for example, to keep customers informed about new products relevant to them, or to improve our Website and services.
  • Legal obligation – where we're required to share data with authorities or regulators. 

3. Cookies 

Cookies are small text files stored on your device when you visit our Website. We use them to keep the Website running smoothly, remember your basket, and understand how the site is used so we can improve it. 

We use the following categories of cookies: 

  • Strictly necessary cookies – required for core Website functions, such as remembering your basket contents. These don't require consent.
  • Performance cookies – collect anonymous data on how visitors use the Website (e.g. Google Analytics), helping us improve it. No personally identifying information is collected.
  • Functionality cookies – remember your preferences, such as language or region, to improve your experience.
  • Targeting/advertising cookies – used to make advertising more relevant to you, and to measure the effectiveness of our marketing. 

You can manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect how well the Website works. For more general information on cookies, visit www.aboutcookies.org. 

4. How We Share Your Data 

We do not sell or share your personal data with third parties for their own marketing purposes. 

We do share data with trusted third parties who help us run our business, including: 

  • Payment processing providers (Stripe)
  • Couriers and delivery partners (e.g. Royal Mail)
  • Website hosting and e-commerce platform providers
  • Accounting and order management software providers 

These providers only use your data to the extent necessary to perform their services for us, and are subject to their own privacy policies, which we encourage you to review. 

We may also disclose your data where required by law, for example to comply with a legal obligation or to protect our legal rights, or those of our customers. 

5. Links to Other Websites 

Our Website may contain links to third-party websites. This Privacy Policy applies only to Broomfield Coffee Company's own Website; we are not responsible for the privacy practices of any linked third-party site, and recommend you review their policies before sharing any personal information with them. 

6. How Long We Keep Your Data 

We keep your personal data only for as long as necessary to fulfil the purposes it was collected for, or as long as you remain a subscriber, wholesale customer, or opted-in contact. If you ask us to delete your data, we will do so unless we have a legal obligation to retain it. 

7. Your Rights 

Under UK GDPR, you have the right to: 

  • Ask what personal data we hold about you
  • Ask us to correct or update inaccurate data
  • Ask us to delete your data
  • Withdraw consent to marketing at any time
  • Object to certain types of processing 

To exercise any of these rights, contact us at info@broomfieldcoffee.co.uk. We will not charge you for this and will respond as promptly as we can. 

8. Security 

We take the security of your personal data seriously. We use SSL encryption to protect data in transit between your device and our servers, and our systems are protected behind secure firewalls. However, no method of transmission over the internet is completely secure, and we cannot guarantee the absolute security of data you send to us. 

9. Wholesale Partners 

If you sign up for wholesale updates or services, we store your business and contact details in order to manage your account and provide relevant information about our wholesale offering, including barista training. This data is held securely and used only for the purposes you've agreed to. 

10. Changes to This Policy 

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and material changes will be clearly flagged. Continued use of the Website after an update means you accept the revised policy. 

11. Contact Us 

If you have any questions about this Privacy Policy, or would like to exercise any of your data rights, please contact us: 

Broomfield Coffee Company Limited Email: info@broomfieldcoffee.co.uk