Privacy Policy
Last updated: 30 July 2026
At Ebor Coffee ("we", "us", "our"), we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use and protect your information when you visit our website or place an order.
Who We Are
Ebor Coffee is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy or how we use your data, please contact us:
Email: hello@eborcoffee.co.uk
What Information We Collect
When you use our website, we may collect the following information:
Information you provide
- Name
- Billing and delivery address
- Email address
- Telephone number
- Order details
- Newsletter preferences
- Any information you provide when contacting us
Information collected automatically
When you browse our website, we may collect:
- IP address
- Device and browser information
- Pages viewed
- Time spent on pages
- Referral source
- Cookies and similar technologies
How We Use Your Information
We use your information to:
- Process and fulfil your orders
- Deliver products to you
- Process payments securely
- Respond to enquiries
- Provide customer support
- Send order confirmations and delivery updates
- Improve our website and customer experience
- Prevent fraud
- Meet our legal obligations
If you have opted in, we may also send you marketing emails about new products, offers and news.
You can unsubscribe at any time by clicking the unsubscribe link in any email.
Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract – to process your orders.
- Legal obligation – for accounting and tax requirements.
- Legitimate interests – to improve our website, prevent fraud and analyse performance.
- Consent – for marketing emails and non-essential cookies.
Payment Information
Payments are processed securely through Shopify Payments.
We do not store or have access to your full payment card details.
Third-Party Services
We use trusted third-party providers to operate our business.
These may include:
- Shopify (website hosting and ecommerce)
- Shopify Payments (payment processing)
- Shopify Email (email marketing)
- Google Analytics (website analytics)
- Meta (advertising and conversion tracking)
- Hotjar (website usability analysis)
These providers only process your information as necessary to provide their services and are required to protect your information appropriately.
Cookies
We use cookies to:
- Make our website function correctly
- Remember your preferences
- Understand how visitors use our website
- Measure marketing performance
- Improve our services
Non-essential cookies are only used where you have provided consent through our cookie banner.
For more information, please see our Cookie Policy.
Marketing
If you choose to receive marketing communications, we may send you updates about:
- New coffees
- Promotions
- Special offers
- Company news
You can withdraw your consent at any time.
How Long We Keep Your Information
We only retain personal information for as long as necessary.
Typically:
- Order records are retained for up to 6 years for tax and accounting purposes.
- Marketing preferences are retained until you withdraw your consent.
- Analytics data is retained in accordance with the settings of the relevant platform.
Your Rights
Under UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your information
- Restrict processing
- Object to certain processing
- Request transfer of your information
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details above.
Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse.
No website or online transmission is completely secure, but we work hard to protect your information.
International Transfers
Some of our service providers may process data outside the United Kingdom.
Where this happens, appropriate safeguards are in place, including approved contractual clauses or adequacy decisions where required.
Children's Privacy
Our website is not intended for children under 16, and we do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on this page, with the date of the most recent revision shown at the top.
Contact Us
If you have any questions about this Privacy Policy or how we process your personal information, please contact:
Ebor Coffee
Email: hello@eborcoffee.co.uk
If you remain unhappy with how we handle your personal information, you also have the right to complain to the UK Information Commissioner's Office (ICO).