Privacy
What we know about you
Short version: your order details, and nothing we do not need to post you coffee.
What we collect
- When you order: your name, email, delivery address and what you bought.
- When you join the delivery list: your name, email, optional phone number, address and your grind, size and frequency preferences.
- When you message us: your name, email and whatever you wrote.
Card details
We never see them. Payments are handled entirely by Stripe on Stripe’s own checkout page. We receive a confirmation that a payment succeeded and the last four digits, nothing more.
Who else touches it
- Stripe — payment processing.
- Supabase — our database, hosted in London.
- Vercel — website hosting.
- Royal Mail or a courier, to the extent of your address.
We do not sell your data. There is no advertising network on this site.
How long we keep it
Order records are kept for six years, because HMRC requires it. Delivery-list entries are kept until you ask us to remove you. Contact messages are deleted once the conversation is finished.
Your rights
Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email cliffnaturalcoffee@gmail.com and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
Your bag is stored in your own browser using local storage, not a cookie, and it never leaves your device until you check out. Stripe sets its own cookies on its checkout page for fraud prevention.