Privacy Policy of The Artisan's Roast
At The Artisan's Roast, located at Holbein Place, London, London, City of, SW1W 8NP, United Kingdom, your privacy is paramount. This Privacy Policy outlines how we collect, use, disclose, and protect information gathered through our site, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Information We Collect
We collect various types of information to provide and improve our services, including artisan coffee roasting, specialty coffee beans, freshly brewed coffee, pastries and light bites, and coffee education workshops.
- Personal Data: This includes information you voluntarily provide to us when you make a purchase, sign up for our newsletter, register for a workshop, create an account, or contact us. This may include your name, email address, postal address, phone number, and payment information.
- Transaction Data: Details about the products and services you have purchased from us.
- Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our site.
- Usage Data: Information about how you use our site, products, and services.
2. How We Use Your Information
We use the information we collect for various purposes, primarily:
- To Process Orders: To fulfill and manage your purchases of coffee beans, pastries, and workshop registrations.
- To Provide Services: To deliver the products and services you have requested, including online ordering and workshop schedules.
- To Communicate with You: To send you order confirmations, service updates, marketing communications (if you have opted in), and respond to your inquiries.
- To Improve Our Site and Services: To analyze how our site is used and to enhance your experience, customize content, and develop new offerings.
- For Security and Fraud Prevention: To protect our site, customers, and business from fraudulent or illegal activities.
- For Marketing: To send you information about promotions, new products, and upcoming workshops that may be of interest to you, based on your preferences. You can opt out at any time.
3. Legal Basis for Processing Personal Data (GDPR)
We will only process your personal data when we have a lawful basis to do so, including:
- Contract: When it is necessary for the performance of a contract with you, or to take steps at your request before entering into such a contract (e.g., processing an order).
- Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our services, preventing fraud).
- Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You have the right to withdraw consent at any time.
- Legal Obligation: Where processing is necessary to comply with a legal or regulatory obligation.
4. Sharing Your Information
We do not sell your personal data to third parties. We may share your information with:
- Service Providers: Third-party vendors who perform services on our behalf, such as payment processing, shipping, website hosting, and marketing assistance. These providers are bound by confidentiality agreements and are prohibited from using your personal data for any purpose other than providing services to us.
- Legal and Regulatory Authorities: When required by law, to comply with legal proceedings, or to protect our rights, property, or safety, and the rights, property, or safety of our customers or others.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We use secure servers, encryption, and other security technologies to safeguard your information.
6. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.
7. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- The Right to Be Informed: About how your personal data is collected and used.
- The Right of Access: To request copies of your personal data.
- The Right to Rectification: To request that we correct any information you believe is inaccurate or incomplete.
- The Right to Erasure (Right to Be Forgotten): To request that we erase your personal data under certain conditions.
- The Right to Restrict Processing: To request that we restrict the processing of your personal data under certain conditions.
- The Right to Data Portability: To request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The Right to Object to Processing: To object to our processing of your personal data under certain conditions.
- Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in specific circumstances.
To exercise any of these rights, please contact us at the details provided below. We will respond to your request within one month.
8. Cookies
Our site uses cookies to enhance your browsing experience, analyze site traffic, and for advertising purposes. Cookies are small data files stored on your device. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.
9. Third-Party Links
Our site may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically for any updates.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
The Artisan's Roast
Holbein Place,
London, London, City of,
SW1W 8NP
United Kingdom
Phone: +447382713092
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.