GDPR Privacy Policy for Repetition Coffee Production Ltd

1. Introduction

Repetition Coffee Production Ltd ("we", "us", or "our") is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. This privacy policy outlines how we collect, process, store, and protect your personal data when you interact with our website or services.

2. Who We Are

Repetition Coffee Production Ltd is a white-label coffee roasting facility based in London, UK. For the purposes of this policy, we act as the "data controller," meaning we are responsible for deciding how your personal data is used and ensuring its protection. If you have any questions about this policy or your personal data, you can contact us at:

Contact Information
Email: james@repetition-espresso.com
Postal Address: Unit 7c Fountayne Road, London, England, N15 4QN

3. The Personal Data We Collect

We may collect and process the following types of personal data:

  • Name
  • Email address
  • Phone number
  • Billing and shipping addresses
  • Browsing activity on our website (e.g., IP address, cookies)
  • Communication preferences
  • Any other information you provide through forms or inquiries

We do not knowingly collect data from children or process sensitive personal data unless explicitly required for legal or contractual purposes.

4. How We Collect Personal Data

We collect personal data through:

  • Website forms (e.g., contact forms, order forms)
  • Direct communication (e.g., phone calls, emails)
  • Cookies and analytics tools to monitor website usage
  • Social media interactions

5. How We Use Your Data

We process your personal data based on lawful grounds, including:

  • Performance of a contract: To fulfill orders, provide services, and manage customer relationships.
  • Consent: When you opt-in to receive marketing communications.
  • Legitimate interests: To improve our services, analyze website performance, and maintain security.
  • Legal obligations: To comply with applicable laws and regulations.

6. Sharing Your Personal Data

We may share your data with trusted third parties such as:

  • Payment processors
  • Delivery services
  • Analytics providers (e.g., Google Analytics) These third parties will only process your data as instructed by us and in compliance with GDPR.

7. How We Store Your Data

Your personal data is stored securely within the UK or European Economic Area (EEA). If data is transferred outside these regions (e.g., via third-party services), we ensure adequate safeguards are in place to protect your information.

We retain personal data only for as long as necessary to fulfill its purpose or comply with legal requirements. Typically, this duration does not exceed seven years.

8. Your Rights Under GDPR

You have several rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Correct inaccurate or incomplete information.
  • Erasure ("Right to be Forgotten"): Request deletion of your data under certain circumstances.
  • Restriction: Limit how we process your data.
  • Data Portability: Receive your data in a structured format.
  • Objection: Object to processing based on legitimate interests. To exercise these rights, please contact us using the details provided above.

9. Cookies Policy

Our website uses cookies to enhance user experience and analyze site traffic. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date.

11. Complaints

If you believe we have violated GDPR regulations, you can file a complaint with the Information Commissioner's Office (ICO) in the UK at www.ico.org.uk.