Pepita Coffee Ltd
Company Number: 11744785
Registered Office: 23 Granden Road, London, England, SW16 4ST
www.pepitacoffee.co.uk

Last Updated: February 2026

1. Introduction

Pepita Coffee Ltd (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.pepitacoffee.co.uk (the “Website”) and make purchases from us.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Website. By accessing and using the Website, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. Information We Collect

We collect information in the following ways:

Information You Provide Directly

When you place an order, create an account, or contact us, we collect:

– Full name
– Email address
– Phone number
– Postal address, city, state, and postal code
– Payment information (processed securely via Stripe/PayPal; we do not store full card details)
– Order history and preferences

Information Collected Automatically

When you use our Website, we automatically collect:

– Internet Protocol (IP) address
– Browser type and version
– Pages visited and time spent on each page
– Date and time of your visit
– Device identifiers and diagnostic data
– Cookies and similar tracking technologies

3. Legal Basis for Processing Your Data

Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process your personal data on the following legal bases:

– Performance of Contract: To process your orders, manage delivery, and provide customer service
– Consent: To send marketing communications, including information about new events and new collaboration coffee tins (you may withdraw consent at any time)
– Legitimate Interest: To improve our Website, prevent fraud, and enhance customer experience
– Legal Obligation: To comply with tax, accounting, and legal requirements

4. How We Use Your Information

We use your personal data for the following purposes:

– Processing and fulfilling your orders
– Sending order confirmations, delivery updates, and receipts
– Providing customer support and responding to inquiries
– Sending marketing emails about new events, new collaboration coffee tins, product launches, and special offers (with your consent)
– Improving our Website, products, and services
– Detecting and preventing fraud or unauthorized access
– Complying with legal and regulatory obligations
– Conducting market research and analyzing customer preferences

5. Marketing Communications and Email Consent

We will send you marketing emails about new events and new collaboration coffee tins only if you have given us your explicit consent. These communications will include:

– Information about exclusive new coffee blends and limited-edition collaboration tins
– Details of upcoming events and product launches
– Special promotions and offers
– Updates on artist collaborations

You have the right to withdraw your consent and opt out of marketing emails at any time by:

– Clicking the “unsubscribe” link at the bottom of any marketing email
– Contacting us at order@pepitacoffee.co.uk with your request
– Updating your preferences in your account settings

Withdrawal of consent will not affect the lawfulness of processing before withdrawal.

6. Data Sharing

We share your personal data only with:

– Payment processors (Stripe/PayPal) to process transactions securely
– Delivery carriers to fulfill and track your orders
– Service providers who assist with Website maintenance, customer support, and analytics
– Legal authorities when required by law

We do not sell, rent, or trade your personal data to third parties for marketing purposes without your explicit consent.

7. International Data Transfers

If you order from outside the United Kingdom, your data may be transferred internationally for order processing and delivery. We ensure that any international transfers comply with UK GDPR requirements and include appropriate safeguards such as Standard Contractual Clauses.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

– Order and payment data: Retained for 6 years to comply with tax and accounting requirements
– Marketing consent data: Retained until you withdraw consent
– Account information: Retained while your account is active; deleted upon request
– Website usage data: Retained for up to 12 months for analytics purposes

9. Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

– Right of Access: Request a copy of your personal data
– Right to Rectification: Correct inaccurate or incomplete data
– Right to Erasure: Request deletion of your data (subject to legal obligations)
– Right to Restrict Processing: Limit how we use your data
– Right to Data Portability: Receive your data in a portable format
– Right to Object: Object to processing based on legitimate interest or direct marketing
– Right to Withdraw Consent: Withdraw marketing consent at any time
– Rights Related to Automated Decision-Making: You have the right to not be subject to automated decision-making that produces legal or similarly significant effects

To exercise any of these rights, contact us at order@pepitacoffee.co.uk with details of your request.

10. Data Security

We implement industry-standard security measures to protect your personal data, including:

– Secure Socket Layer (SSL) encryption for all transactions
– Secure payment processing via Stripe/PayPal
– Restricted access to personal data
– Regular security assessments and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Cookies

Our Website uses cookies to enhance your browsing experience. Cookies are small files stored on your device that help us:

– Remember your preferences and login information
– Analyze Website traffic and user behavior
– Provide personalized content and recommendations
– Track marketing campaign effectiveness

You can manage cookie preferences through your browser settings. Disabling cookies may affect Website functionality.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

13. Children’s Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our Website with a new “Last Updated” date. Continued use of the Website constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to report a data breach, contact us:

Pepita Coffee Ltd
23 Granden Road, London, SW16 4ST, England
Email: order@pepitacoffee.co.uk