Privacy Policy

Last updated: 13 July 2026

This policy explains how Gonzalez Brothers Coffee Ltd collects, uses, and protects your personal information when you visit our online store or buy from us. Please read it alongside our Terms and Conditions.

Who we are

Gonzalez Brothers Coffee Ltd ("we", "our", "us") is the data controller for the personal information described in this policy.

Registered company: Gonzalez Brothers Coffee Ltd, registered in England and Wales, company number 16834926.
Registered office: 32-33 Upper Street, London, N1 0PN, United Kingdom.
Contact: info@gonzalezbrothers.coffee
ICO registration: [ICO REGISTRATION NUMBER — confirm/register]

The information we collect

Information you give us

Order and account details: your name, email address, delivery and billing address, phone number, and — for trade customers — company name and VAT number.
Payment information: card and payment details are collected and processed by our payment providers (see "Who we share your information with"). We do not store full card numbers ourselves.
Contact and correspondence: anything you send us by email or through forms on the store.

Providing your order and delivery details is necessary for us to form and perform your contract with you — without them we cannot process or ship your order.

Information we collect automatically

Order and browsing activity: products viewed, items added to cart, and orders placed.
Device and usage data: IP address, device and browser type, and — where applicable and with your consent — analytics data collected via cookies and similar technologies (see "Cookies").

Why we use it, and our lawful bases

Under UK GDPR we must have a lawful basis for using your information. Our bases are:

What we do	Lawful basis
Process and deliver your orders, manage your account, and take payment	Performance of a contract with you
Prevent fraud, keep the store secure, and run our business	Our legitimate interests
Send marketing emails about our coffee and offers	Your consent (which you can withdraw at any time)
Keep tax, accounting, and transaction records	Legal obligation

We only send marketing with your consent, and every marketing email has an unsubscribe link.

Who we share your information with

We do not sell your personal information. We share it only with the service providers we need to run the store, and where required by law:

Shopify Inc. — our online store platform and hosting provider (processes and stores order, customer, and site data).
Shopify Payments and PayPal — our payment processors.
Delivery carriers — to ship your order (for example, Royal Mail, DHL, DPD, or similar).
Our email service provider — to send order confirmations and, where you've consented, marketing.
[Analytics/marketing providers — CONFIRM: e.g. Shopify Analytics, Microsoft Clarity, Segment, Meta/Google. If any run on the store, list them here and see "Cookies".]

We may also disclose information where required by law, regulation, or to protect our rights.

International transfers

Some of our providers (including Shopify) are based outside the UK, primarily in the United States. Where your information is transferred outside the UK, we rely on an appropriate safeguard — such as UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) / EU Standard Contractual Clauses with the UK Addendum — to keep it protected to UK standards. You can request a copy of the relevant safeguards by emailing us at info@gonzalezbrothers.coffee.

How long we keep it

Order, invoice, and tax records: 6 years, to meet HMRC and accounting requirements.
Account information: for as long as your account is active, then deleted or anonymised.
Marketing data: until you withdraw consent or unsubscribe.

Your rights

Under UK GDPR you have the right to:

Access the personal information we hold about you.
Rectify inaccurate or incomplete information.
Erase your information ("right to be forgotten"), subject to our legal retention obligations.
Restrict or object to certain processing.
Data portability — receive your information in a portable format.
Withdraw consent at any time, where we rely on consent.

To exercise any of these, email info@gonzalezbrothers.coffee. We'll respond within one month.

If you're not happy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) — ico.org.uk, 0303 123 1113 — though we'd appreciate the chance to put things right first.

Cookies

Cookies are small files stored on your device. Our store uses:

Essential cookies — set by Shopify to run the store, remember your cart, and process checkout securely. These are necessary and don't require consent.
Analytics and marketing cookies — [CONFIRM whether the store runs these — e.g. Shopify Analytics, Microsoft Clarity, Segment, Meta Pixel, Google. If it does, they are only set with your consent via our cookie banner, and you can change your choice at any time.]

Note: If the store runs any non-essential analytics or marketing cookies, UK PECR requires a cookie-consent banner with opt-in before they load. Confirm which apply so this section and the banner are accurate.

Children

Our store is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, contact us and we'll delete it.