Privacy Policy
Privacy Policy
Type of website: Ecommerce
Effective date: 1st January 2025
www.cuppachai.co.uk (the “Site”) is owned and operated by The Cafe Box Limited, trading as Cuppa. The Cafe Box Limited is the data controller and can be contacted at:
Address: 34-35 Wilbury Way, Hitchin, SG4 0TP
Email: cuppa@thecafebox.co.uk
Purpose
The purpose of this privacy policy (this “Privacy Policy”) is to inform users of our Site of the following:
- The personal data we collect;
- How we use the collected data;
- Who has access to the data collected;
- The rights of Site users;
- The Site’s cookie policy.
This Privacy Policy applies in addition to the Terms of Use of our Site.
GDPR Compliance
For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, known as the General Data Protection Regulation (“GDPR”). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.
Consent
By using our Site, users agree that they consent to:
- The conditions set out in this Privacy Policy.
Legal Basis for Processing
We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.
Personal Data We Collect
We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect additional data beyond what is listed below without notifying you first.
Data Collected Automatically
When you visit and use our Site, we may automatically collect and store the following information:
- IP address
- Location
- Pages visited and time spent on the Site
- Traffic source (e.g., search engines, referrals)
- Browser type and operating system
- Cookies and tracking data
Data Collected in a Non-Automatic Way
We may also collect the following data when you perform certain functions on our Site:
- Name
- Email address
- Billing address
- Shipping address
- Payment information (processed securely via third-party services such as Stripe and PayPal)
This data may be collected using the following methods:
- Account registration
- Order placement
- Subscribing to our newsletter
- Contacting us via email
How We Use Personal Data
Data collected on our Site will only be used for the purposes specified in this Privacy Policy or as indicated on the relevant pages of our Site.
Automatically Collected Data is Used For:
- Improving Site functionality and user experience
- Analytics and performance tracking
- Marketing and retargeting purposes
Data Collected When User Performs Certain Functions is Used For:
- Processing orders and payments
- Delivering purchased products
- Customer support and communication
- Sending promotional emails (if opted-in)
Who We Share Personal Data With
Employees
We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
Other Disclosures
We will not sell or share your data with third parties, except in the following cases:
- If the law requires it;
- If it is required for any legal proceeding;
- To prove or protect our legal rights;
- To buyers or potential buyers of this company in the event that we seek to sell the business.
If you follow hyperlinks from our Site to another website, please note that we are not responsible for and have no control over their privacy policies and practices.
How Long We Store Personal Data
User data will be stored until the purpose for which the data was collected has been achieved. If your data is retained for longer, you will be notified.
How We Protect Your Personal Data
We take all reasonable precautions to ensure that user data is secure and that users are protected. However, the Internet can be insecure, and we cannot guarantee absolute security beyond what is reasonably practical.
Your Rights as a User
Under the GDPR, you have the following rights:
- Right to be informed;
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restrict processing;
- Right to data portability;
- Right to object.
If you wish to exercise any of these rights, please contact our data protection officer at cuppa@thecafebox.co.uk.
Children
We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible. If a child under 16 has provided personal data, their parent or guardian may contact us.
Do Not Track Notice
Do Not Track (“DNT”) is a privacy preference that can be set in web browsers. We do not track users over time and across third-party websites and therefore do not respond to DNT signals.
Cookie Policy
A cookie is a small file stored on a user’s hard drive by a website to collect browsing data. Users can choose to be notified each time a cookie is transmitted and can disable cookies entirely in their browser settings.
Types of Cookies We Use:
- Essential Cookies: Required for the basic functionality of our Site.
- Performance & Analytics Cookies: Helps us understand how visitors use our Site.
- Functionality Cookies: Enhances user experience.
- Marketing & Advertising Cookies: Used for targeted advertising.
For more details, please see our Cookies Policy.
Modifications
This Privacy Policy may be amended from time to time to comply with the law and reflect any changes to our data collection process. Users are encouraged to review the Privacy Policy periodically. If necessary, we may notify users by email of changes.
Complaints
If you have any complaints about how we process your personal data, please contact us at cuppa@thecafebox.co.uk so we can address the issue. If unresolved, you have the right to lodge a complaint with a supervisory authority.
Contact Information
If you have any questions, concerns, or complaints, you can contact us at:
The Cafe Box Limited
Address: 34-35 Wilbury Way, Hitchin, SG4 0TP
Email: cuppa@thecafebox.co.uk