Band of Beans Ltd ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, attend events, or engage with our services.
1. Who We Are
Band of Beans Ltd is a UK-based company offering artisanal coffee and cultural experiences. We are the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR).
2. What Data We Collect
We may collect the following types of data:
2.1. Personal Information You Provide
- Account Details: Name, email, password, phone number.
- Transaction Details: Billing and delivery addresses, payment details.
- Preferences: Coffee preferences, subscription details, and survey responses.
- Event Participation: Information shared when booking or attending events.
2.2. Automatically Collected Data
- Device Data: IP address, browser type, operating system.
- Usage Data: Pages visited, interaction with content, time spent on the site.
- Cookies: Browsing behaviour (see Section 8).
2.3. Third-Party Data
- Social media interactions (e.g., likes, shares, comments).
- Payment processors for secure transactions.
3. How We Use Your Data
We use your data to:
- Provide and deliver products, subscriptions, and services.
- Respond to inquiries or resolve complaints.
- Personalise coffee recommendations and subscription offerings.
- Share marketing updates (only with your consent).
- Organise and enhance cultural events and pop-ups.
- Comply with legal and regulatory obligations.
4. Subscription Services
For subscribers, we collect and process:
- Preferences for coffee type, grind, and frequency.
- Payment details for recurring charges (processed securely).
- Feedback to improve your subscription experience.
Subscribers may receive exclusive promotions, early access to new products, and invitations to events. You can update or cancel subscriptions via your account.
5. Mobile Pop-Up Events
When you engage with our mobile pop-up events, we may collect:
- On-Site Data: Name, contact details, and feedback (voluntary).
- Geo-Location Data: With your consent, to notify you of nearby events.
- Purchases: Securely processed via mobile payment systems.
We may use event data to:
- Improve future pop-ups.
- Share updates about upcoming events.
- Feature event highlights, such as testimonials or photos (with consent).
6. Cultural Engagement
For cultural events (e.g., coffee ceremonies, tastings), we may collect:
- Event registrations and preferences (e.g., dietary needs).
- Feedback to enhance cultural experiences.
- Multimedia content (photos, videos) for promotional use, with prior consent.
We may share curated stories, behind-the-scenes production content, or cultural insights, emphasising ethical sourcing and sustainability.
7. Sharing Your Data
We share your data only with trusted partners:
- Service providers (e.g., payment processors, delivery companies).
- Marketing platforms (e.g., Google Ads, Meta), only with your consent.
- Legal authorities, if required by law.
We do not sell your data to third parties.
8. Cookies and Tracking Technologies
We use cookies to enhance your browsing experience:
- Essential Cookies: Required for website functionality.
- Analytics Cookies: To understand user behaviour and improve the site.
- Marketing Cookies: To deliver personalised ads.
Manage or disable cookies via your browser settings. See our Cookie Policy for details.
9. Your Rights
Under the UK GDPR, you have the right to:
- Access: Request a copy of your personal data.
- Correct: Update inaccurate information.
- Delete: Request erasure of your data.
- Restrict: Limit certain types of processing.
- Object: Opt-out of direct marketing.
- Portability: Transfer your data to another service provider.
To exercise these rights, contact us at terms@bandofbeans.co.uk. We aim to respond within one month.
10. Data Retention
We retain your data only as long as necessary for the purposes outlined in this policy:
- Order and transaction data: Retained for 6 years to comply with tax regulations.
- Subscription data: Retained until you cancel or delete your account.
- Event data: Retained for up to 90 days unless you've opted into further communications.
11. Data Security
We use encryption, secure servers, and access controls to safeguard your data.
12. International Transfers
If your data is transferred outside the UK, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.
13. Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from minors.
14. Complaints
If you believe your data has been mishandled, contact us at terms@bandofbeans.co.uk. You may also file a complaint with the UK Information Commissioner's Office (ICO):
15. Policy Updates
This Privacy Policy may be updated periodically. Significant changes will be communicated via email or on our website.
