Privacy Policy

Last updated: 26/11/25

Section 1 – What Do We Do With Your Information?

When you purchase something from our online shop, we collect the personal information you provide — such as your name, billing address, delivery address, email address, phone number and order details. This is required to process your order, arrange delivery, and support you if something goes wrong.

When you browse our website, Shopify automatically receives your device’s internet protocol (IP) address, browser type, and other standard technical information to help us understand website performance and user behaviour.

Email marketing

If you choose to opt into our mailing list, we may send you emails about:

• new coffees and products
  
  

• news from the roastery
  
  

• offers and promotions
  
  

• events, barista courses, or updates we think you’ll enjoy
  
  

Our email database and communications are managed through Omnisend.

Section 2 – Consent

How do we get your consent?

When you provide personal information to place an order, verify your payment, arrange delivery, or request support, you are giving consent for us to collect and use that information for those specific purposes.

If we ask for your information for a secondary purpose — such as marketing — we will ask for your express consent, or present you with a clear opportunity to decline.

How do I withdraw my consent?

If you change your mind after opting in, you can withdraw consent at any time by:

• clicking “unsubscribe” in any email from us
  
  

• emailing our team at help@stmartinscoffee.co.uk
  
  

• writing to us at:
  St Martins Coffee Roasters,
  The Roastery, Pennbury Farm, 142 Stretton Road, Great Glen, Leicester, LE8 9GP

Once withdrawn, we will stop contacting you for marketing and will only keep essential information required for legal, transactional, or operational reasons (e.g., past orders, tax records).

Section 3 – Disclosure

We may use your personal information to:

• process and fulfil your order
  
  

• arrange shipping and delivery
  
  

• verify payments
  
  

• provide customer support
  
  

• administer and improve our website
  
  

• monitor site performance and analytics
  
  

• send you marketing updates (if you consent)
  
  

• notify you of a prize win if you enter a competition
  
  

If you create an account during checkout, you may also be given the option to opt-in to marketing updates.

You agree that contacting you for the above reasons—via email, telephone, or post—does not constitute a breach of your rights under the Privacy and Electronic Communications Regulations (PECR).

We may share your data with trusted third-party partners only when necessary (e.g., courier services, email providers, payment processors). We never sell your data to third parties.

We may also disclose your information if required to by law, regulation, or government request.

Section 4 – Shopify

Our store is hosted on Shopify Inc., who provide the e-commerce platform that allows us to sell our products.

Your data is stored through Shopify’s data storage and databases, which may be located in Canada or the United States. All data is stored securely behind firewalls.

Payments

If you choose to pay using Shopify’s direct payment gateways, your payment details are encrypted and processed according to PCI-DSS (Payment Card Industry Data Security Standard).

Shopify only stores your payment information as long as necessary to complete the transaction, after which it is deleted.

All Shopify payment gateways follow PCI-DSS requirements to ensure your information is handled securely.

Section 5 – Third-Party Services

We use third-party service providers to help operate our online business. These may include:

• Shopify (e-commerce platform)
  
  

• Omnisend (email marketing, CRM, automations)
  
  

• Payment processors (Shopify Payments, PayPal, Apple Pay, Google Pay)
  
  

• Courier and fulfilment providers (DHL, Royal Mail, etc.)
  
  

• Analytics tools (Google Analytics)
  
  

Each provider has its own privacy policy. We recommend reviewing their policies to understand how they handle your data.

If a transaction involves a provider located in a different jurisdiction, your information may be governed by that jurisdiction’s privacy laws.

Once you leave stmartinscoffee.co.uk or interact with a third-party site, app, or payment gateway, this Privacy Policy no longer applies.

We are not responsible for the privacy practices of other websites.

Section 6 – Security

We follow industry best practices to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

If you provide payment information, it is encrypted using secure socket layer (SSL) technology and protected using AES-256 encryption.

While no method of digital transmission is 100% secure, we follow all PCI-DSS requirements and apply additional safeguards where appropriate.

Section 7 – Cookies

Cookies are small text files stored on your device when visiting our site. They help us:

• keep items in your shopping cart
  
  

• remember your preferences
  
  

• understand how the website is used
  
  

• improve your browsing experience
  
  

Shopify uses cookies such as:

• _session_id – session data
  
  

• _shopify_visit – analytics tracking
  
  

• _shopify_uniq – customer visit count
  
  

• cart – contents of your basket
  
  

• _secure_session_id – secure browsing
  
  

• shopfront_digest – login verification
  
  

We also use Google Analytics cookies to monitor performance. Google Analytics does not store personal identifiable information about users.

You can learn more about cookies and how to manage them at aboutcookies.org.

Third-Party Cookies

Some pages may contain embedded content (e.g., Vimeo, Instagram). These services may issue their own cookies, which we do not control.

Section 8 – Age & Personal Information Accuracy

By using this site, you confirm that:

• you are of legal age to enter into binding contracts in the UK
  
  

• all personal information you provide is accurate and up to date
  
  

• you will notify us of any changes via your account or by contacting our support team
  
  

Section 9 – Law and Jurisdiction

This site is governed by English law. Any disputes arising from use of the website or our services will be subject to the non-exclusive jurisdiction of the courts of England and Wales.

Section 10 – Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will take effect immediately upon being posted on this page.

If we make material changes, we will note the update clearly so you know what has changed.

If St Martins Coffee Roasters is acquired or merged with another company, your information may be transferred as part of that continuity.

Section 11 – GDPR

We comply with the UK General Data Protection Regulation (UK GDPR).

This means:

• You have the right to access, correct, update, or delete your personal data.
  
  

• You can request a copy of the information we hold about you at any time.
  
  

• Any marketing communication requires active opt-in consent.
  
  

• Omnisend maintains full GDPR compliance for all subscribers collected through our website.
  
  

• Any inactive or unengaged email addresses may be periodically removed to maintain a healthy, consent-based database.
  
  

Section 12 – Questions & Contact Information

To access, correct, amend, or delete any personal information we hold, or if you have questions about this policy, please contact us at:

Email: help@stmartinscoffee.co.uk

Telephone: 0116 251 2490
Address:
St Martins Coffee Roasters
The Roastery, Pennbury Farm, 142 Stretton Road, Great Glen, Leicester, LE3 2JY, United Kingdom