Last updated: 20 October 2026
This policy explains what personal information we collect when you use blackcoocoffee.co.uk, why we collect it, and your rights. We keep it simple and only collect what we need.
Who we are
Black Coo Coffee, 4 High Street, Carluke, ML8 4AJ. Black Coo Coffee is a sole trader business.
We are the “controller” of your personal information under UK data protection law (UK GDPR and the Data Protection Act 2018).
To ask about your data, use our contact form or email [email protected].
Information we collect and why
When you contact us
If you use the contact form we collect your name, email address, subject and message. We use these only to reply to you. To stop spam, the form uses Google reCAPTCHA, which may collect your IP address and information about your device and how you use the page. See Google’s privacy policy: https://policies.google.com/privacy
Lawful basis: our legitimate interest in answering your enquiry and keeping the form free of spam (and taking steps you ask for before any order).
When you use our shop
If you place an order or create an account we collect your name, billing and delivery address, email address, phone number, order details and account login. We use this to process and deliver your order, send order emails, handle refunds and keep proper records. You can check out as a guest without creating an account.
Lawful basis: to perform our contract with you, and to meet our legal obligations (for example, tax and accounting records).
Subscriptions
If you take a coffee subscription, we keep your subscription details (products, delivery schedule and renewal dates) so we can send each delivery and take each payment. Your card is saved securely by our payment provider (see below) so renewals can be charged automatically. You can cancel at any time from your account.
Lawful basis: to perform our contract with you.
Payments
Card payments, Apple Pay and Google Pay are handled by WooPayments (provided by Automattic, with payments processed by Stripe). Your full card details go straight to them and are never stored by us. They may also use your details and device information to prevent fraud. See https://stripe.com/gb/privacy and https://automattic.com/privacy/. If you pay with Apple Pay or Google Pay, Apple or Google will also process your payment under their own privacy policies.
Lawful basis: to perform our contract with you, and our legitimate interest in preventing fraud.
Unfinished orders
If you start checking out but don’t finish, we save the email address and details you have typed in so far, so we can see which orders were not completed and help if you contact us about them. We don’t send reminder emails about unfinished baskets.
Lawful basis: our legitimate interest in running the shop and helping customers complete their orders.
Emails and Brevo
We use Brevo (an EU email service) to send our shop emails, such as order confirmations. Your name, email address and order history are kept in Brevo so we can do this. We don’t use Brevo to send marketing emails. See Brevo’s privacy policy: https://www.brevo.com/legal/privacypolicy/
Lawful basis: to perform our contract with you.
How you found us
With your consent, the shop records how you found our site (for example, the referring website or campaign) against your order, using sbjs_* cookies.
Lawful basis: your consent.
Website statistics
With your consent, we use Google Analytics (through Google Site Kit) and Jetpack Stats and WooCommerce Analytics (by Automattic) to count visits, see which pages and products are popular and improve the shop. These use cookies and your IP address. We only load them if you accept statistics cookies.
Lawful basis: your consent.
Google reviews
Our pages show reviews from Google using a Trustindex widget. To show it, your browser connects to Trustindex, which may receive your IP address. See https://www.trustindex.io/privacy-policy/
Lawful basis: our legitimate interest in showing genuine customer reviews.
Security
To keep the website and your account safe, our security tools (Wordfence, Jetpack Protect and Akismet) may record your IP address and the pages you request, for example to block repeated failed logins or spam. We also keep backups of the website.
Lawful basis: our legitimate interest in keeping the website secure.
Cookies
We use a cookie banner (Complianz) to ask for your consent and remember your choice. Essential cookies are always on, for example to remember your basket and keep you logged in; statistics and marketing cookies only run if you accept them. You can change your choice at any time using “Manage consent” at the bottom of the page. Full details are in our Cookie Policy: https://blackcoocoffee.co.uk/cookie-policy-uk/
Who we share it with
We don’t sell your information. We only share it with services that help us run the website and shop, who process it on our behalf:
- Our hosting provider (Cloudways, with servers run by DigitalOcean in London, UK).
- Cloudflare, which protects and speeds up the website and handles every visit.
- Automattic and Stripe (WooPayments card, Apple Pay and Google Pay payments).
- Brevo (order emails).
- Automattic (Jetpack Stats and WooCommerce Analytics with consent, Jetpack security and backups, Akismet spam checks).
- Google (Analytics with consent, reCAPTCHA on the contact form, and Google Pay if you use it).
- Trustindex (Google reviews widget).
- Delivery companies, where needed to deliver your order.
Some of these providers are based in, or may transfer data to, the USA. Where they do, they use legal safeguards approved under UK law, such as the UK-US Data Bridge or standard contractual clauses.
We may also share information if the law requires it.
How long we keep it
We keep personal information only for as long as we need it for the purpose it was collected, and to meet our legal, tax and accounting obligations.
Your rights
You have the right to:
- ask for a copy of your information;
- ask us to correct it;
- ask us to delete it;
- object to, or ask us to limit, how we use it;
- ask to move it to another provider;
- withdraw your consent at any time (this doesn’t affect anything done before).
To use any of these rights, contact us using the details above. We’ll reply within one month.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first. You can also complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/ or 0303 123 1113.
Changes
We may update this policy from time to time. The date at the top shows when it last changed.