Privacy Policy

Last updated: 26 May 2025

Laguanegra Coffee ("we", "our", "us") is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.laguanegra.com, including any other media form, media channel, mobile website, or mobile application related or connected thereto (collectively, the "Site"). Please read this Privacy Policy carefully. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE SITE.

This Privacy Policy has been compiled to better serve those who are concerned with how their 'Personally Identifiable Information' (PII) is being used online. PII, as described in UK data protection law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our Privacy Policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.

1. Data Controller

For the purpose of the General Data Protection Regulation (GDPR), the data controller is: Laguanegra Coffee, registered at 16 Queensgate, Lincoln Street, Swindon, SN1 2JD.

2. What Personal Data Do We Collect?

We may collect personal data from you in a variety of ways when you interact with our Site, including:

• Contact Information: When you fill out a contact form, we collect your name, email address, subject, and message.
• Account Information: If you create an account to purchase coffee beans, we collect your username, email address, and password.
• Transaction Data: When you make a purchase of coffee beans, we collect information necessary to process your order, including billing address, shipping address, and details of the coffee beans purchased (e.g., blend, size, quantity). Payment method details are typically processed securely by third-party payment processors like PayPal, not directly by us.
• Technical Data: We may collect your IP address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: Information about how you use our website, including pages viewed, duration of visit, navigation paths, and referring website addresses related to our coffee beans.
• Marketing and Communications Data: Your preferences in receiving marketing from us about our coffee and your communication preferences.
• Cookies and Tracking Technologies: As detailed in our Cookie Policy below.

3. How Do We Collect Your Data?

We collect data through various methods:

• Direct interactions: You provide us with your data when you fill in forms on our website (e.g., contact form, registration form, order form for coffee beans).
• Automated technologies or interactions: As you interact with our website, we may automatically collect Technical and Usage Data. We collect this personal data by using cookies, server logs and other similar technologies.
• Third parties or publicly available sources: We may receive personal data about you from various third parties, such as analytics providers (e.g., Google Analytics), advertising networks, and payment processors.

4. How Do We Use Your Personal Data? (Purposes and Legal Basis)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To fulfil a contract: To process and deliver your orders for coffee beans, manage your account, and provide customer support. (Legal Basis: Performance of a contract with you)
• Legitimate Interests: To improve our website and services, conduct analytics, prevent fraud, and ensure the security of our systems. (Legal Basis: Necessary for our legitimate interests and your interests do not override those interests)
• Legal Obligation: To comply with a legal or regulatory obligation (e.g., tax laws, fraud prevention). (Legal Basis: Compliance with a legal obligation)
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., sending marketing newsletters about our coffee). You have the right to withdraw consent at any time by contacting us.

Specifically, we use your personal data for:

• Processing your enquiries via the contact form.
• Managing your coffee bean purchases and ensuring delivery.
• Administering and protecting our business and this website.
• Measuring or understanding the effectiveness of the advertising we serve to you.
• Using data analytics to improve our website, coffee products/services, marketing, customer relationships, and experiences.
• Sending you marketing communications about our coffee where you have opted in.

5. How Do We Protect Your Data?

We implement a variety of security measures to maintain the safety of your personal data when you place an order for coffee beans or enter, submit, or access your personal information. These measures include:

• SSL/TLS encryption for data in transit.
• Regular malware scanning.
• Access controls and internal policies to restrict access to personal data.
• Secure storage of data.

While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. No method of transmission over the Internet, or method of electronic storage is 100% secure.

6. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party companies and individuals that assist us in operating our website, conducting our business, or serving our users (e.g., payment processors like PayPal for coffee purchases, shipping companies for delivery, website hosting providers, email service providers). These third parties are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
• Analytics Providers: Such as Google Analytics, to help us understand how users interact with our website.
• Legal Compliance: When required by law or in response to valid requests by public authorities (e.g., a court or a government agency).

We do not sell, trade, or otherwise transfer your Personally Identifiable Information to outside parties for their marketing purposes without your explicit consent.

7. International Transfers

Some of our external third parties may be based outside the European Economic Area (EEA) or the UK, so their processing of your personal data will involve a transfer of data outside the EEA/UK.

Whenever we transfer your personal data out of the EEA/UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or the UK government.
• Where we use certain service providers, we may use specific contracts approved for use in the EEA/UK which give personal data the same protection it has in the EEA/UK (e.g., Standard Contractual Clauses).

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. Your Data Protection Rights (GDPR Rights)

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

• Request access to your personal data (commonly known as a "data subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or to a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.
• Complain to the ICO: You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

To exercise any of these rights, please contact us using the details below.

10. Cookie Policy (What are Cookies?)

Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information.

We use cookies to:

• Help remember and process the items in your shopping cart (e.g., which coffee beans you've added).
• Understand and save user's preferences for future visits.
• Keep track of advertisements.
• Compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future.

We may also use trusted third-party services that track this information on our behalf.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies preferences.

If you turn cookies off, some features will be disabled. It won't affect the user's experience that make your site experience more efficient and may not function properly.

11. Third-Party Disclosure

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless we provide users with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users (e.g., fulfilling coffee bean orders), so long as those parties agree to keep this information confidential. We may also release information when its release is appropriate to comply with the law, enforce our site policies, or protect ours or others' rights, property, or safety.

12. Third-Party Links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "last updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, our data practices, or your rights, please contact us:

• By filling out the contact form on our website: www.laguanegra.com