Privacy policy
alturaroast.co.uk
PRIVACY POLICY
Last updated: April 2025
1. Who We Are
This Privacy Policy explains how Altura Roast ("Altura", "we", "us", or "our") collects, uses, and protects your personal data when you visit our website at www.alturaroast.co.uk or purchase from us.
Altura Roast is the data controller for the purposes of UK GDPR and the Data Protection Act 2018. If you have any questions about how we handle your data, please contact us at:
Email: hello@alturaroast.co.uk
Website: www.alturaroast.co.uk
2. What Data We Collect
We may collect and process the following personal data about you:
2.1 Data you provide to us
• Name and contact details (email address, phone number, delivery address)
• Order information (products purchased, order value, payment method used)
• Account login credentials if you create an account on our website
• Communications you send us (enquiries, complaints, feedback)
• Email address if you sign up to our newsletter or request a free brewing guide
2.2 Data collected automatically
• IP address and browser type
• Pages visited on our website, time spent, and referring URLs
• Cookie data (see our Cookie section below)
• Device type (desktop, mobile, tablet)
3. How We Use Your Data
We use your personal data for the following purposes:
• To process and fulfil your orders, including passing your delivery details to our fulfilment partner
• To send you order confirmations, shipping updates, and receipts
• To respond to your enquiries or complaints
• To send you marketing emails and promotions, only where you have given consent, and you can unsubscribe at any time
• To improve our website and understand how customers use it
• To comply with legal and regulatory obligations
4. Legal Basis for Processing
We rely on the following lawful bases under UK GDPR:
• Contract: Processing your order and delivering your coffee requires us to use your personal data
• Legitimate interests: Improving our service, preventing fraud, and analysing website usage
• Consent: Sending marketing emails and newsletters, you can withdraw consent at any time
• Legal obligation: Retaining records for tax and accounting purposes
5. Who We Share Your Data With
We only share your data with trusted third parties where necessary to run our business:
5.1 Fulfilment Partner
We work with a specialist coffee roaster and fulfilment partner. When you place an order, we share your name, delivery address, and order details with them so they can roast and dispatch your coffee directly to you. Our fulfilment partner processes your data only for this purpose and does not use it for their own marketing.
5.2 Shopify
Our website and online store is built on Shopify Inc. Shopify stores and processes data on our behalf as part of their e-commerce platform. For more information, see Shopify's Privacy Policy at www.shopify.com/legal/privacy.
5.3 Payment Processors
Payments are processed securely by Shopify Payments or other third-party payment providers (such as PayPal or Stripe). We do not store your full card details, these are handled directly by the payment processor under their own security standards.
5.4 Email Marketing
If you subscribe to our newsletter, your email address may be stored with our email marketing provider. You can unsubscribe at any time using the link in any email we send you.
5.5 Couriers and Delivery
Orders are delivered via DPD or Royal Mail depending on the service selected. Your name and delivery address will be shared with the relevant courier for the purposes of delivering your parcel.
We do not sell your personal data to any third party.
6. Cookies
Our website uses cookies, small text files stored on your device, to help the site function and to understand how visitors use it. The types of cookies we use include:
• Essential cookies: Required for the website and shopping cart to function correctly
• Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies: Used to show relevant advertising and track the effectiveness of campaigns
You can control cookies through your browser settings. Disabling certain cookies may affect how the website works. By continuing to use our site, you consent to our use of cookies.
7. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes described in this policy:
• Order data: Retained for 7 years to comply with HMRC requirements
• Account data: Retained while your account is active, and for a reasonable period after if you close it
• Marketing data: Retained until you unsubscribe or withdraw consent
• Communication records: Retained for up to 3 years
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Ask us to correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data (subject to legal obligations)
• Right to restriction: Ask us to limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent for marketing at any time, without affecting previous processing
To exercise any of these rights, please contact us at hello@alturaroast.co.uk. We will respond within 30 days.
9. Data Security
We take the security of your personal data seriously. Our website operates over HTTPS and all payment data is handled by PCI DSS-compliant payment processors. We use Shopify's industry-standard security infrastructure to protect your data.
No method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this page periodically.
12. Contact Us & Complaints
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: hello@alturaroast.co.uk
Website: www.alturaroast.co.uk
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:
ICO Website: www.ico.org.uk
ICO Helpline: 0303 123 1113
We would always prefer to resolve any concerns directly, so please contact us first, and we will do our best to help.
ALTURA ROAST — SPECIALITY COFFEE, ROASTED TO ORDER — ALTURAROAST.CO.UK