Privacy policy
Last updated: 27 July 2026. This policy takes effect on 27 July 2026.
This Privacy Policy describes how Pure Caffe Ltd, trading as Carraro Coffee UK ("we", "us", or "our"), collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from carrarocoffee.co.uk (the "Site") or otherwise communicate with us regarding the Site (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected under this Privacy Policy.
Please read this Privacy Policy carefully.
Who we are
Pure Caffe Ltd is the data controller for the personal information described in this policy.
Pure Caffe Ltd, trading as Carraro Coffee UK
Registered in England and Wales, company number 07384105
VAT number GB 998 037 369
Unit 551, Brixton Station Road, London SW9 8PF, United Kingdom
contact@carrarocoffee.co.uk
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law.
How we collect and use your personal information
To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide and improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.
What personal information we collect
The types of personal information we obtain about you depend on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal information we collect.
Information we collect directly from you
Information that you submit to us directly through our Services may include:
- Contact details including your name, address, phone number, and email.
- Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
- Account information including your username, password, security questions, and other information used for account security purposes.
- Customer support information including the information you choose to include in communications with us, for example when sending a message through the Services.
Some features of the Services may require you to provide us with certain information about yourself. You may choose not to provide this information, but doing so may prevent you from using or accessing those features.
Information we collect about your usage
We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address, and other information regarding your interaction with the Services.
Information we obtain from third parties
We may also obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:
- Companies that support our Site and Services, such as Shopify.
- Our payment processors, who collect payment information (for example bank account, credit or debit card information, and billing address) in order to process your payment, fulfil your orders, and provide you with the products or services you have requested, so that we can perform our contract with you.
- When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. See also the section below, Third party websites and links.
How we use your personal information, and our lawful bases
We rely on the following lawful bases under the UK GDPR, and under the EU GDPR where you are located in the European Economic Area:
- Providing products and services. We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfil your orders, send notifications relating to your account, purchases, returns, exchanges, or other transactions, create and maintain your account, arrange shipping, and facilitate returns and exchanges. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you choose to use, in which case Shopify will process your information as set out in its own privacy policies. Lawful basis: performance of a contract (Article 6(1)(b)).
- Marketing and advertising. We may use your personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email, text message, or post, and to show you advertisements for products or services. This may include using your personal information to tailor the Services and advertising on our Site and other websites. Lawful basis: our legitimate interest in promoting and selling our products (Article 6(1)(f)), or your consent where required by law (Article 6(1)(a)).
- Security and fraud prevention. We use your personal information to detect, investigate, and act on possible fraudulent, unlawful, or malicious activity. If you register an account, you are responsible for keeping your account credentials safe, and we strongly recommend you do not share your username, password, or other access details with anyone. If you believe your account has been compromised, please contact us immediately. Lawful basis: our legitimate interest in keeping our website secure for you and other customers (Article 6(1)(f)).
- Communicating with you and improving our Services. We use your personal information to provide customer support and to improve our Services. Lawful basis: our legitimate interest in being responsive to you, providing effective services, and maintaining our business relationship with you (Article 6(1)(f)).
- Meeting our legal obligations. We retain and process certain information, such as transaction and VAT records, to comply with law. Lawful basis: compliance with a legal obligation (Article 6(1)(c)).
Cookies
Like many websites, we use Cookies on our Site. For specific information about the Cookies used to power our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services, including to remember your actions and preferences, to run analytics, and to better understand how users interact with the Services. We may also permit third parties and service providers to use Cookies on our Site to tailor the services, products, and advertising shown on our Site and other websites.
Most browsers accept Cookies by default, but you can set your browser to remove or reject Cookies through your browser controls. Removing or blocking Cookies can affect your experience and may cause some features and general functionality to work incorrectly or become unavailable.
How we disclose personal information
In certain circumstances we may disclose your personal information to third parties for contract fulfilment, for the legitimate purposes described above, and for other reasons subject to this Privacy Policy. These circumstances may include:
- With vendors or other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping.
- With business and marketing partners who provide services and advertise to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
- When you direct or request us to disclose certain information to third parties, or otherwise consent to it, such as to ship you products or through your use of social media widgets or login integrations.
- With our affiliates or otherwise within our corporate group, in our legitimate interests in running our business.
- In connection with a business transaction such as a merger or insolvency, to comply with any applicable legal obligations, including responding to lawful requests from public authorities, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.
We disclose the following categories of personal information for the purposes set out above:
| Category | Categories of recipients |
|---|---|
|
|
We do not use or disclose special category personal data without your explicit consent, and we do not use it to infer characteristics about you.
Third party websites and links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on them. Information you provide in public or semi-public venues, including information you share on third-party social networking platforms, may also be visible to other users of the Services or of those platforms. Our inclusion of such links does not, by itself, imply endorsement of the content on those platforms or of their owners or operators.
Children's data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details set out below to request that it be deleted.
Security and retention of your information
We take appropriate technical and organisational measures to protect your personal information. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. Any information you send to us may not be secure while in transit, and we recommend you do not use insecure channels to send us sensitive or confidential information.
How long we retain your personal information depends on factors such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Transaction and tax records are ordinarily retained for six years in line with UK tax law.
Your rights
Under the UK GDPR, and under the EU GDPR where you are located in the European Economic Area, you have the following rights in relation to your personal information. These rights are not absolute, apply only in certain circumstances, and in some cases we may decline a request as permitted by law.
- Right of access: you may request access to the personal information we hold about you, including details of how we use and share it.
- Right to erasure: you may request that we delete personal information we hold about you.
- Right to rectification: you may request that we correct inaccurate personal information we hold about you.
- Right to data portability: you may request a copy of the personal information we hold about you, and ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
- Right to restrict processing: you may ask us to stop or restrict our processing of your personal information.
- Right to object: you may object to processing carried out on the basis of our legitimate interests, including direct marketing.
- Right to withdraw consent: where we rely on your consent, you may withdraw it at any time.
- Managing communication preferences: we may send you promotional emails, and you may opt out at any time using the unsubscribe link in our emails. If you opt out, we may still send you non-promotional messages, such as those about your account or orders you have placed.
You may exercise any of these rights by contacting us using the details provided below. We will not discriminate against you for exercising them. We may need to collect information from you to verify your identity before responding substantively. You may designate an authorised agent to make requests on your behalf, but we will require proof that you have authorised them and may need to verify your identity directly with you. We will respond within one month, as required by law.
Complaints
If you have a complaint about how we process your personal information, please contact us using the details below. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113. If you are located in the European Economic Area, you may instead lodge a complaint with your local data protection supervisory authority.
International transfers
We may transfer, store, and process your personal information outside the United Kingdom. Your personal information may also be processed by staff and third-party service providers and partners in other countries.
Where we transfer your personal information out of the United Kingdom, we rely on recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the European Commission's Standard Contractual Clauses.
Contact
If you have questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please contact us at contact@carrarocoffee.co.uk or on (+44) 0207 095 8009, or write to us at Pure Caffe Ltd, Unit 551, Brixton Station Road, London SW9 8PF, United Kingdom.