Privacy Policy
1. Introduction
We respect your privacy and we are committed to protecting your personal information.
This privacy policy provides you with details of how we collect and process your personal data through your use of our site. By providing us with your data, you warrant to us that you are over 13 years of age.
This Policy applies as between you, the user of this website (https://downrivercoffee.co.uk/) and Downriver Coffee Roasters, the owner and provider of this website. Downriver Coffee Roasters is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy).
2. What personal data we collect and why we collect it
Personal data means any information capable of identifying an individual. It does not include anonymised data. We may collect and/or process the following categories of personal data about you, including:
- Customer data: this includes data relating to any purchases of goods and/or services such as your name, title, billing address, delivery address, email address, phone number, contact details, purchase details and card details. We process this data to supply the goods and/or services you have purchased and to keep records of such transactions. Our lawful ground for this processing is the performance of a contract between you and us and/or taking steps at your request to enter into such a contract.
- Communication data: this includes any communication and/or information that you send to us whether that be through the contact form on our website, through email, social media messaging, social media posting or any other communication that you send us. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests, which in this case are: to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.
- Marketing data: this includes data about your preferences in receiving marketing from us and our third parties and your communication preferences. We process this data to enable you to partake in our promotions such as competitions, prize draws and free giveaways, to deliver relevant website content and advertisements to you and measure or understand the effectiveness of this advertising. Our lawful ground for this processing is our legitimate interests which in this case are to study how customers use our products/services, to develop them, to grow our business and to decide our marketing strategy, and offer relevant products and information.
Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to perform the contract (for example, to deliver goods or services to you). If you don’t provide us with the requested data, we may have to cancel a product or service you have ordered but if we do, we will notify you at the time.
We will only use your personal data for a purpose it was collected or a reasonably compatible purpose if necessary. For more information on this please email us at hello@downrivercoffee.com. In case we need to use your details for an unrelated new purpose, we will let you know and explain the legal grounds for processing.
We may process your personal data without your knowledge or consent where this is required or permitted by law.
We do not collect any Sensitive Data about you. Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not collect any information about criminal convictions and offences.
3. How personal data may be collected from you
We may collect data about you by you providing the data directly to us. For example, by filling in forms on our site, purchasing goods, or by sending us emails.
4. Marketing communications
Our lawful ground of processing your personal data to send you marketing communications is either your consent or our legitimate interests (namely to grow our business).
Under the Privacy and Electronic Communications Regulations, we may send you marketing communications from us if (1) you made a purchase or asked for information from us about our goods or services or (2) you agreed to receive marketing communications and in each case you have not opted out of receiving such communications since. Under these regulations, if you are a limited company, we may send you marketing emails without your consent. However you can still opt out of receiving marketing emails from us at any time.
You can ask us or third parties to stop sending you marketing messages at any time by emailing us at hello@downrivercoffee.com at any time.
If you opt out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases, warranty registrations etc.
5. Disclosures of your personal data
We may have to share your personal data with third parties that perform specific functions on our behalf such as courier services to ship products. This involves providing them with personally identifiable information such as your name, shipping address, email, and phone number.
We may pass on your personal information if we have a legal obligation to do so, or if we have to enforce or apply our terms of use and other agreements.
6. Data security
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We also allow access to your personal data only to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
7. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.
In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
8. Your rights to access, collect and delete data
We respect your right to access and correct your personal information. Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent. You also have the right to object to us using your personal information for the purposes outlined above. You can see more about these rights at:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.
You may also request that we update your personal information or correct any factual errors that you believe may exist regarding this information. If you would like to correct or update your personal information, or would like to express your rights, please contact us at hello@downrivercoffee.com.
However, if we agree and comply with your objection, this may affect our ability to consider your comments, queries and suggestions in order to respond to you and improve our site/services.
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
9. Third-party websites
This website may link to other websites that are not maintained by or related to Downriver Coffee Roasters. We are not responsible for the privacy policies or practices of any third parties or third-party websites, including any linked or linking websites. To the extent that you disclose personally identifiable information to any such third parties, different rules may apply to their use and disclosure of personal information that you disclose to them. We encourage you to read the privacy notice of every website you visit.
10. Updates to this policy
The effective date of this Privacy Policy is 20 October 2023. We reserve the right to modify or amend this Privacy Policy at any time. All changes will be effective immediately upon posting to this website.
11. Contact us
If you have questions or concerns about this Privacy Policy or how we collect and use the information of our customers, we invite you to contact us by email at hello@downrivercoffee.com.
Registered address
Downriver Coffee Roasters, Unit 12, Kelburn Business Park, Port Glasgow, PA14 6TD.