Privacy Policy for Adams & Russell Coffee Roasters (referred to as “we”, “us”, or “our” in this policy).
We operate the website adamsandrussell.co.uk and are committed to protecting your personal data and respecting your privacy.
This privacy policy informs you how we look after your data when you visit our website (regardless of where you visit it from), purchase our coffees or equipment, or interact with us. It also tells you about your privacy rights and how the law protects you in the United Kingdom.
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of data about you, which we have grouped together as follows:
- Identity Data: Includes your first name, maiden name, last name, username or similar identifier, and title.
- Contact Data: Includes your billing address, delivery address, email address, and telephone numbers.
- Financial Data: Includes bank account and payment card details (processed securely via our third-party payment gateways).
- Transaction Data: Includes details about payments to and from you, and other details of products and services you have purchased from us.
- Technical Data: Includes your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Includes information about how you use our website, products, and services.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties, and your communication preferences.
3. How We Collect Your Data
We use different methods to collect data from and about you, including:
- Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes information you provide when you create an account, purchase products, subscribe to our newsletter, leave a comment, or contact customer service.
- Automated Technologies: As you interact with our website, we may collect Technical Data about your browsing actions, and patterns. We collect this data by using cookies, server logs, and other similar technologies.
- Third Parties: We may receive data from various third parties, such as analytics providers (like Google Analytics) and payment or delivery services.
4. Legal Basis for Processing Your Data
We will only use your information when the law allows us to. Most commonly, we will use your data in the following circumstances:
- Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., to process your payment and deliver your coffee order).
- Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., to protect our website from spam and fraud).
- Comply with a Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., keeping records for UK tax purposes).
- Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
5. Sharing Your Personal Data
We may share your data with internal and external third parties only for the strict purposes of running our business and fulfilling our legal obligations to you:
- Service Providers: Acting as processors who provide IT, system administration, secure e-commerce platforms, automated spam detection, and web analytics services.
- Payment Gateways: Secure external payment processors to securely handle billing and transactional credit/debit card data.
- Delivery Companies: Professional courier, postal, and shipping services used to deliver your coffee beans, grounds, and roasting equipment.
- Professional Advisers: Including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
- HM Revenue & Customs (HMRC): Regulators and other authorities based in the United Kingdom who require reporting of processing activities in certain circumstances.
6. Cookies and Third-Party Content
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
- Account & Comments: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies for your convenience. If you visit our login page or log in, temporary and persistent cookies will be set to manage your session and screen choices.
- Embedded Content: Articles or pages on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Order Data: By UK law, we must keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six tax years plus the current year after they cease being customers for tax and auditing purposes.
- Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
8. Your Legal Rights
Under certain circumstances, you have rights under the UK Data Protection Act 2018 and UK GDPR in relation to your data. You have the right to:
- Request Access to your data (commonly known as a “data subject access request”).
- Request Correction of the data that we hold about you.
- Request Erasure of your data where there is no good reason for us continuing to process it.
- Object to Processing of your data where we are relying on a legitimate interest.
- Request Restriction of processing of your data.
- Request the Transfer of your personal data to you or to a third party.
- Withdraw Consent at any time where we are relying on consent to process your personal information.
If you wish to exercise any of these rights, or if you have any questions about this privacy policy, please contact us using our official website contact channels.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.