Name: Full House Coffee
Address: 67-69 Nathan Way, London, SE28 0BQ, GB
Telephone: 0208 670 2000

Who we are

This policy explains how Full House Coffee ("we", "us", "our") uses personal data when you visit fullhousecoffee.com or contact us. We are the controller of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Full House Coffee
67-69 Nathan Way, London SE28 0BQ, United Kingdom
info@fullhousecoffee.com · 0208 670 2000

We have not appointed a Data Protection Officer. Send any privacy question to the email address above.

What we collect and why

Data	Purpose	Lawful basis	How long we keep it
Name, email, subject, message and the page you sent it from (enquiry form)	To reply to your enquiry and give you a quote	Steps you ask us to take before a contract (Art. 6(1)(b)); our legitimate interest in answering business enquiries (Art. 6(1)(f))	24 months from the enquiry, unless it becomes a customer contract
Your choice to receive marketing	To send updates and offers by email	Consent (Art. 6(1)(a)); you can withdraw it at any time	Until you withdraw consent, then kept on a suppression list so we don't contact you again
A one-way, keyed hash of your IP address	To limit how many enquiries one device can send and stop spam	Legitimate interest in keeping our forms secure (Art. 6(1)(f))	Deleted automatically after 1 hour
reCAPTCHA signals (device and browser data, interaction data) and a risk score	To prevent fraud, spam and abuse of our enquiry form. Required to submit the form	Legitimate interest in preventing fraud and securing our systems (Art. 6(1)(f), Recitals 47 and 49)	Score kept with the enquiry; Google's retention set by Google
Page views, referrer, browser and device type, and anonymous interaction events: product, contact, brochure, phone, email and map link clicks, copying our phone number or email address, shop filter and sort choices, and that an enquiry was started or sent (not its contents) (Umami)	To see which pages and products are useful and improve the site	Legitimate interest in understanding site use (Art. 6(1)(f)); Umami sets no cookies and stores no IP address	Aggregated statistics only
Advertising cookies and identifiers (Google Ads)	To measure which adverts lead to enquiries	Consent (Art. 6(1)(a)), asked for in our cookie banner	See our cookie policy

Our legitimate interests are running and protecting a business website and answering people who contact us. We have weighed these against your rights and keep the data to what we need. You don't have to give us your details, but we can't reply to an enquiry without a name and email address.

Google reCAPTCHA is a required part of our enquiry form and cannot be switched off, because it protects us and our customers from fraud and abuse. It can reject a submission automatically if the risk score is too high. This has no legal or similarly significant effect on you. If your enquiry is blocked, email or phone us instead.

Who we share it with

We do not sell your data. We share it only with service providers who process it for us under a contract:

Vercel Inc. hosts the website (USA)
Our database provider stores enquiries
Resend delivers enquiry emails to our team (USA)
Google LLC provides reCAPTCHA and Google Ads (USA)
Umami provides cookieless analytics

We may also disclose data where the law requires it, or to protect our legal rights.

International transfers

Some of these providers process data in the USA. Where they do, the transfer is protected by the UK Extension to the EU-US Data Privacy Framework or by the ICO's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. Ask us for a copy of the relevant safeguards.

Your rights

Under UK GDPR you have the right to:

get a copy of the personal data we hold about you
have inaccurate data corrected
have your data deleted
restrict how we use your data
object to processing based on legitimate interests, and to direct marketing at any time
receive data you gave us in a portable format
withdraw consent at any time, without affecting processing before you withdrew it

Email info@fullhousecoffee.com to use any of these rights. There is no charge. We may ask you to confirm your identity, and we will reply within one month.

Complaints

If you are unhappy with how we handle your data, contact us first and we will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Security

The site uses HTTPS. Enquiries are stored in an access-controlled database, and we only store a keyed hash of your IP address, never the address itself.

Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

Changes to this policy

We will post any changes on this page and update the date at the top.

Privacy Policy