Orders and subscriptions
We process your details to take an order, arrange delivery, manage recurring coffee orders and deal with service requests.
Lawful basis: contract. We also keep certain records to meet legal obligations. Privacy & data
Privacy Policy
Buying coffee online involves sharing an address, an email and payment details. This policy explains how Lowe & Leigh uses personal data when you browse, place an order, manage a subscription or contact us.
In brief
We use the details needed to take orders, deliver coffee, manage accounts and answer messages. Payment is handled by payment providers; we do not store your full card details on our website.
The Data We Collect
We collect information when you place an order, create an account, join a coffee subscription, send a message or use the website. We keep the list short.
| Data category | What it may include | Why we need it |
|---|---|---|
| Account and order | Name, billing and delivery address, email address, phone number, items ordered and order history. | To take payment, confirm your order, deliver coffee and manage your account or subscription. |
| Payment | Payment status and limited transaction details supplied by the payment provider. | To confirm payment, handle refunds and keep accurate business records. Full card details are handled by the provider. |
| Delivery | Recipient name, delivery address and any delivery instructions you provide. | To pass the information needed to the carrier so your parcel can reach you. |
| Messages and preferences | Contact form details, the message you send, subscription preferences and marketing choices. | To reply, manage your requested service and record whether you want marketing emails. |
| Website use | Technical logs and, where you agree, analytics information such as pages viewed and broad device or browser details. | To keep the website working, protect it and understand how visitors use it. |
Who may receive it
We share only what a service needs. This can include payment processors, parcel carriers, website and email service providers, professional advisers and public authorities where the law requires it. Providers must protect the information they handle for us.
How We Use Your Data and Our Lawful Basis
UK GDPR requires a lawful reason for each use. The reason depends on what you ask us to do and which service you use.
Customer enquiries
We use the information in your message to reply and keep enough context to resolve the enquiry.
Lawful basis: steps you ask us to take, or our legitimate interest in responding and keeping service records.Security and service care
We may use technical logs to protect the website, check for misuse, prevent fraud and fix faults.
Lawful basis: legitimate interests in running a safe and reliable service.Marketing messages
We send marketing emails only where we have the permission or other legal condition required. You can opt out at any time using the link in an email or by contacting us.
Lawful basis: consent where required. Your choice does not affect order updates.How long we keep information
We keep account and order details while needed to provide the service. Order and accounting records may be kept for up to six years where required for tax, legal or accounting purposes. We normally review unanswered enquiry records after 12 months. Marketing details are kept until you opt out or we identify that they are no longer current. We delete or de-identify information when we no longer need it.
Cookies and Site Analytics
Cookies are small files saved by your browser. Some are needed for the basket and checkout; optional cookies need your choice first.
Your Rights and How to Get in Touch
You can ask us what personal information we hold and how we use it. Your rights depend on the lawful basis and circumstances of the processing.
Access and correction
Ask for a copy of your personal data or tell us when something is inaccurate.
Erasure and restriction
Ask us to delete information or limit how we use it where the law allows.
Objection and portability
Object to certain processing, including direct marketing, or ask for eligible data in a portable format.
Withdraw consent
Where we rely on consent, you can withdraw it at any time. This does not change processing already carried out.
If you have a concern, please contact us first so we can look into it. You can also raise a complaint with the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint.