GDPR Data Protection Notice
Effective Date: 01/06/2025
Last Updated: 01/06/2025
Applies to: All users of Coffeeplaza.co (the “Platform”), including residents of the UK and European Union.
1. Who We Are
Coffeeplaza.co (“we”, “us”, or “our”) is a UK-based company operating a curated e-commerce marketplace for specialty coffee. We act as a Data Controller for the personal information you provide to us when registering, browsing, and purchasing products on our platform.
For certain services (e.g., when you buy from or interact with third-party vendors like roasters or cafés), those vendors may act as independent Data Controllers or joint controllers, depending on the specific case.
2. What This Notice Covers
This GDPR Notice explains:
- What personal data we collect and why
- How we use and share your data
- How data may be processed by third-party vendors
- Your rights under the UK GDPR and EU GDPR
- The limits of our responsibility regarding vendor actions
3. Types of Personal Data We Process
When you use Coffeeplaza.co, we may collect:
- Name, email address, phone number
- Delivery and billing addresses
- Purchase history and order details
- Preferences, reviews, and communications
- IP address, browser/device info, and analytics data
- Communication with vendors or reviews you leave
4. Lawful Basis for Processing
We process your data based on:
- Contractual necessity (e.g., order fulfillment)
- Legitimate interests (e.g., fraud prevention, analytics)
- Consent (e.g., marketing or vendor communication preferences)
- Legal obligations (e.g., tax compliance)
5. Sharing of Your Personal Data
We may share necessary personal data (such as name, address, email, phone number) with verified third-party vendors (e.g., roasters or cafés) in the following scenarios:
- Order Fulfillment: When you place an order fulfilled by a vendor
- Customer Support: When a vendor must contact you regarding shipping, delays, or product issues
- Communication Requests: If you opt in to receive updates or promotional messages from a vendor
⚠️ Important: Each vendor is independently responsible for how they handle your data once it is transferred to them. Vendors are contractually required to comply with applicable data protection laws (UK GDPR/EU GDPR).
6. Vendor Responsibilities and Limitations
We take reasonable steps to ensure vendors:
- Handle user data lawfully and securely
- Only contact users for service-related or consented purposes
- Do not use customer data for unrelated marketing without clear consent
- Delete or anonymize data after the legal retention period or upon request
However, we are not liable for any misuse of personal data by a third-party vendor once shared in accordance with this policy. Please refer to the vendor’s own privacy policy when interacting with them directly.
7. Your Data Protection Rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Object to or restrict processing
- Withdraw consent at any time (e.g., for vendor marketing)
- File a complaint with a supervisory authority (e.g., ICO in the UK)
To exercise your rights or make a data request, contact:
📧 info@coffeeplaza.co
8. International Data Transfers
Where data is transferred outside the UK/EU (e.g., to cloud services or international vendors), we ensure adequate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Transfers to countries with an adequacy decision
9. Data Retention
We retain your data for as long as necessary for:
- Fulfilling your orders and service needs
- Legal and regulatory compliance (e.g., accounting)
- Resolving disputes or support issues
You may request deletion of your account and associated data at any time (subject to legal limitations).
10. Updates to This Notice
We may revise this GDPR Notice to reflect changes in legal or operational requirements. Updates will be posted here with a revised “Effective Date.”
11. Contact Information
For all questions regarding this GDPR Notice or our data practices:
Data Protection Officer
Coffeeplaza.co
Email: info@coffeeplaza.co
Address: 128 City Road, EC1V 2NX, London
United Kingdom