Full name; shipping and billing address; email; phone; payment data (handled by secure providers; we do not store full card data); order data; browsing data (IP, device, on-site behaviour). We do not collect special category data.

We process data for:

• Order management, shipping and support — performance of the contract;
• Tax and accounting obligations — legal obligation;
• Newsletter and promotional communications — consent, withdrawable at any time;
• Site analytics, remarketing and personalised advertising — consent via the cookie banner;
• Fraud prevention and security — legitimate interest.

We use strictly necessary cookies and, subject to your consent via the banner (PECR), analytics and advertising tools (e.g. Google Analytics/Ads, Meta Pixel, Microsoft Clarity). You can manage or withdraw your preferences at any time via the banner or your browser settings.

Data may be processed by providers acting as processors: the e-commerce platform, hosting, payment providers (Stripe, PayPal, Klarna), email marketing, reCAPTCHA, CDN, and carriers for delivery. We do not sell personal data.

Any transfers outside the UK take place with appropriate safeguards (e.g. the UK International Data Transfer Agreement or adequacy regulations).

We retain data only as long as necessary for the stated purposes and as required by law (e.g. tax records); marketing data until consent is withdrawn.

You have the rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise them, email info@espressocoffeeshop.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), ico.org.uk.

This policy may be updated; changes will be posted on this page with a new "Last updated" date.