General Data Protection Regulation (GDPR) Compliance Notice

As a business operating in Stockport, England, Premium Coffee Beans is fully compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to safeguarding the privacy of our website visitors and customers, ensuring that all personal data is processed lawfully, fairly, and transparently.

Core Principles of Data Protection

In alignment with GDPR requirements, we adhere to the following core data protection principles:

• Lawfulness, Fairness, and Transparency: We only collect data with a valid legal basis (such as fulfilling an order or with your explicit consent) and are entirely transparent about how it is used.
• Purpose Limitation: Your data is collected for specified, explicit, and legitimate purposes (e.g., shipping your coffee or processing your secure Stripe payment) and is not repurposed.
• Data Minimization: We only ask for and retain the personal information that is absolutely necessary to provide our services.
• Accuracy: We take every reasonable step to ensure that inaccurate personal data is erased or rectified without delay.
• Storage Limitation: We do not keep your personal data for longer than is necessary for the purposes for which it is processed.
• Integrity and Confidentiality: We utilize secure industry standards, including encryption and tokenization via Stripe, to protect your data against unauthorized access, loss, or destruction.
• 
  

Your Rights Under GDPR

Under the GDPR, you hold specific rights regarding your personal data. You can exercise any of these rights at any time,

1. Right of Access You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
2. Right to Rectification You can ask us to correct or complete any inaccurate or incomplete personal information.
3. Right to Erasure Also known as "the right to be forgotten," you can request that we delete your data under certain condition's
4. Right to Restrict Processing You have the right to object to or restrict the processing of your personal data in certain circumstance's to Data PortabilityYou can request a digital copy of your personal data to transfer to another service provider.
5. Right to Object You have the absolute right to object to your data being used for direct marketing.

How to Exercise Your Rights

If you would like to make a request regarding your data, view the information we hold, or lodge a complaint regarding how your data has been handled, please contact our data protection team directly.

• Email: privacy@premiumbeans.co.uk
• Response Time: We aim to respond to all legitimate GDPR requests within one calendar month, free of charge.
• 
  

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner’s Office (ICO).