Band of Beans Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we use it.
When you place an order: Name, email address, delivery address, billing address, phone number (if provided), and payment details. Payment is processed securely by Stripe, we never see or store your full card number.
When you sign up to Follow the Adventure: Email address and, if you choose to share it, your first name. This is stored in our email platform, Klaviyo.
When you browse the site: We use cookies and similar technologies to understand how people use our site. This includes pages visited, time spent, and referral source. We do not use this data to identify you personally.
When you contact us: Your name, email address, and the content of your message.
We process your data under the following legal bases (UK GDPR): contract performance (orders), legitimate interest (site improvement), and consent (marketing emails).
We share your data only with the services we need to run Band of Beans:
We do not sell your data. We do not share it with advertisers. We do not pass it to anyone else.
Essential cookies: Required for the site to function, including cart contents, login sessions, and security tokens. These cannot be disabled.
Analytics cookies: Help us understand how people use the site. You can opt out of these in your browser settings.
Marketing cookies: Klaviyo uses a cookie to recognise returning visitors and personalise your experience. This is only active if you've signed up to our emails.
Under UK GDPR, you have the right to:
To exercise any of these rights, email privacy@bandofbeans.co.uk. We'll respond within 30 days.
We use HTTPS encryption across our entire site. Payment processing is handled by Stripe, which is PCI DSS Level 1 certified. We do not store payment card details on our servers.
Some of our service providers (Klaviyo, Stripe, Resend) process data in the United States. These transfers are protected by Standard Contractual Clauses and the providers' participation in recognised data protection frameworks.
We may update this policy from time to time. The "last updated" date at the top will always reflect the current version. Significant changes will be communicated via email to subscribers.
If you have questions about how we handle your data, email privacy@bandofbeans.co.uk.
If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).