Privacy Policy

1. Introduction

This Privacy Policy explains how Bruuk Coffee Ltd (“BRUUK”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit or make purchases through our website.

2. Information We Collect

We may collect and process the following personal information:

• Name
• Billing and delivery address
• Email address
• Telephone number
• Payment information (processed securely through third-party payment providers)
• Purchase and subscription history
• Website usage data and cookies
• Marketing preferences

3. How We Use Your Information

We use your information to:

• Process and fulfil orders and subscriptions
• Deliver products and customer support
• Improve our website and services
• Send transactional emails (order confirmations, shipping updates)
• Send marketing communications where consent has been provided
• Prevent fraud and maintain website security
• Comply with legal obligations

4. Legal Basis for Processing

We process your information under the following legal bases:

• Contractual necessity — to fulfil orders and provide our services
• Legitimate interests — to run our business, prevent fraud and improve our services
• Legal obligations — including tax and accounting record-keeping
• Consent — for marketing communications and non-essential cookies

5. Payment Processing

Payments are processed securely by third-party providers (including Stripe). We do not store full payment card details on our systems.

6. Sharing Your Data

We may share information with:

• Payment processors
• Delivery and logistics providers (e.g. Royal Mail)
• Website hosting and infrastructure providers
• Email and marketing platforms
• Legal or regulatory authorities where required

We do not sell your personal information.

7. Data Retention

We retain personal information only for as long as necessary for legal, accounting, operational, or regulatory purposes. Order and tax records are typically retained for at least 6 years to comply with HMRC requirements.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact hello@bruuk.coffee.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Marketing Communications

You may unsubscribe from marketing communications at any time using the unsubscribe link in our emails, from your account preferences, or by contacting us directly.

10. Cookies

Our website uses cookies. Please refer to our Cookie Policy for further information.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party websites.

12. Security

We implement reasonable technical and organisational measures to protect personal information, including encryption in transit (HTTPS) and access controls on internal systems.

13. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on this page.

14. Contact

For privacy-related enquiries, contact hello@bruuk.coffee.