Privacy policy

Who we are

The Coffee Counter, an independent speciality coffee roastery in Leicester, UK. We're the data controller for the information described here. Contact: info@thecoffeecounter.co.uk.

What we collect, and why

• Account details (name, email, and a password if you choose one) — to run your account, orders and Counter Club subscription. Joining the Club creates an account with the email you pay with; you can sign in with an emailed link instead of a password. Passwords are stored hashed; we never see them.
• Order and delivery details — to fulfil your order and meet our legal record-keeping obligations.
• Payment details — taken directly by our payment provider, Stripe. Card numbers never touch our servers.
• Birthday (optional) — only if you add it, to send your birthday perk.
• Newsletter email — only if you sign up; every email includes an unsubscribe link.
• Referral activity — if you share a referral link, we record the connection so both of you get your £10.

What we don't do

We don't sell your data. We don't run third-party advertising trackers. Your cart is stored in your own browser, not on our servers, until you check out.

Who we share data with

Only the services that make the shop work: Stripe (payments), Resend (transactional email), Royal Mail / our couriers (delivery), and our hosting provider. Each processes your data under their own safeguards and our instructions.

How long we keep it

Order records are kept for 6 years to meet UK tax and accounting rules. Account data is kept while your account is active — email us to close it. Newsletter emails are kept until you unsubscribe.

Your rights

Under UK GDPR you can ask us to access, correct, delete or export the personal data we hold about you, or object to how we use it. Email info@thecoffeecounter.co.uk and we'll sort it. If you're unhappy with how we handle your data, you can complain to the ICO (ico.org.uk).

Changes

If we change this policy, we'll update this page. Last updated: September 2026.