A. The information that we collect about you will only be used lawfully (in accordance with the Data Protection Act 1998 and the General Data Protection Regulation 2018) All data is retained within the United Kingdom, or transferred only to ‘third countries’ where ‘adequacy of protection’ or specific certification as defined by The GDPR has been confirmed.

B. We may collect and process the following data about you:

a. information that you provide by filling in forms on our website www.pactcoffee.com. This includes information you provide at the time of registering or at any subsequent point. As part of the sign-up process, we’ll ask for you to fill in a form that will tell us your name, email address and phone number. We’ll also ask for your: coffee preferences, delivery & billing address and credit card details. By filling in these details, you consent for us to use them to the to fulfill our service to you;

b. once you've signed up, we keep a record of all billings and shipments made to you including the types and grinds of coffee you've received. This helps us troubleshoot if, for example, the coffee gets lost in the post and also helps us recommend new ways for you to enjoy coffee if asked;

c. if you contact us, we may keep a record of that correspondence;/p>

d. we may also ask you to complete customer satisfaction surveys that we use for our own research purposes, although you do not have to respond to them;

e. device-specific information (such as your hardware model, operating system version, unique device identifiers, and mobile network information); and/p>

f. details of your visits to our website.

C. We will hold the above information for as long as is necessary in order to provide you with our services, deal with any specific issues that you may raise or otherwise as is required by law or any relevant regulatory body. Unless otherwise required by law, your data will be stored for a period of 7 years after our last contact with you/some other identifiable action or period, at which point it will be deleted.

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical information about our users' browsing actions and patterns, and does not identify any individual. Again, this is common and fundamental to most online businesses and helps us understand how our website is being used and areas of it we could improve in the future

A. Pact uses cookies to distinguish you from other users. This helps us provide you with a good experience when you use our website and also allows us to improve our services. Please note that it is possible to disable cookies being stored on your computer by changing your browser settings. However, our website may not perform properly or some features may not be available to you if you disable cookies.

B. For detailed information on the cookies we use and the purposes for which we use them see our Cookie policy.

The data we collect from you is stored in the European Economic Area ("EEA") but may be transferred to and stored at a destination outside of the EEA. It may also be processed by staff operating outside of the EEA. By submitting your personal data, you agree to this transfer, storing and processing. Your passwords are stored on Pact servers in encrypted form. We do not disclose your account details, postal or email addresses to anyone except when legally required to do so.

A. Sensitive information between your browser and our website is transferred in encrypted form using Secure Socket Layer ("SSL"). When transmitting sensitive information, you should always make sure that your browser can validate the Pact certificate.

B. It is your responsibility to keep your password secure. Once we have received your information, we will use strict procedures and security features to try and prevent any unauthorised access.

C. We use industry-standard efforts to safeguard the confidentiality of Data, including encryption, firewalls and SSL (Secure Sockets Layer). We have implemented reasonable administrative, technical, and physical security controls to protect against the loss, misuse, or alteration of your Data.

A. The legal basis for processing your data is based on our legitimate interest to do so based on the information you have provided to us. We use information held about you (and information about others) in the following ways:

a. to provide you with our services;

b. To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.

c. To carry out our obligations arising from any contracts entered into between you and us.

d. to ensure the content on our website is presented in the most effective manner for you and your computer or mobile device; and

e. to notify you about changes to our service.

f. This website uses retargeting services from the social network Facebook. Facebook collects certain information via cookies to determine which web pages are visited. This data is then used to associate your browser with interest and demographic categories, and serve Facebook ads based on your past visits to this website. Please note that any information collected by Facebook via cookies is not linked to any customer's personal information collected by us.

A. We may disclose your personal information to any partner of Pact and/or a member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

B. We may disclose your personal information to third parties:

a. in the event that we sell or buy any business or assets;

b. if Pact or substantially all of its assets are acquired by a third party; or

A. We expect the information we hold to be accurate and up to date. You have the right as an individual to find out what information we hold about you and make changes if necessary; you also have the right, assuming we are not obligated by law to refuse, to ask us to stop using the information. To have your information erased or rectified, please contact ahoy@pactcoffee.com.

B. Unless we are precluded from doing so by law, you have the right to object to our processing of your data at any time either via the unsubscribe link included on all emails we send, or by contacting us and requesting that processing of your details be restricted or erased.

C. You also have the right to request the transfer of your information to another party, and to lodge a complaint with the Information Commissioners Office if you believe that “Pact” have not complied with the requirement of GDPR with regard to your personal data.

D. Unless otherwise required by law, your data will be stored for a period of 7 years after our last identifiable contact with you, at which point it will be deleted.

Any changes we make to our privacy policy in the future will be posted on this page, and where appropriate, notified to you by email.

A. Questions, comments and requests regarding this privacy policy are welcome and should be addressed to businesshelp@pactcoffee.com.

B. If you have a concern about how we handle your data, or you would like to lodge a complaint, you may do so by contacting The Information Commissioners Office.