Privacy policy

🔐 PRIVACY POLICY — Bruce & Luke’s Coffee

Last updated: 1/12/2025

This Privacy Policy describes how Bruce & Luke’s Coffee (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase from bruceandlukes.com.

We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

A. Information you provide

When you place an order, create an account, apply for a wholesale account, or contact us, we may collect:

  • Name

  • Billing & shipping address

  • Email address

  • Phone number

  • Payment information (handled securely by our payment processors)

  • Business details (for wholesale applications)

We do not store full credit card numbers.

B. Automatically collected information

When you browse our store, we automatically collect:

  • IP address

  • Browser type

  • Device information

  • Pages viewed & time spent

  • Referral source

This is collected via:

  • Shopify

  • Cookies

  • Google Analytics

  • Google Ads (conversion tracking)

C. Cookies

We use cookies to:

  • Operate the website

  • Remember your cart

  • Improve performance

  • Track marketing and analytics

  • Enable secure checkout

You can disable cookies via your browser, but the site may not work correctly.

2. How We Use Your Information

We use your information to:

  • Process and fulfil orders

  • Manage subscriptions

  • Communicate with you

  • Provide customer support

  • Screen for fraud

  • Improve our website and services

  • Run marketing and advertising campaigns (Google, Meta)

  • Comply with legal obligations

3. Sharing Your Information

We share information only with trusted partners necessary to operate our business:

A. Shopify

Our website and checkout are powered by Shopify, which processes your data on our behalf.

B. Payment Providers

Including Stripe, PayPal, Shop Pay, or other secure gateways.

C. Delivery Partners

e.g., FedEx, Royal Mail, DHL
We share your name, address, email, and phone number for delivery notifications.

D. Marketing & Analytics

We share anonymised or pseudonymised data with:

  • Google Ads

  • Google Analytics

  • Meta (if used)

This helps us track performance and improve advertising.

We never sell your personal data.

4. Wholesale Accounts

If you apply for a wholesale account, we may store additional business information to assess eligibility.
This is never shared outside our business.

5. Data Retention

We retain your information only for as long as necessary:

  • Order information: 6 years (for tax & accounting compliance)

  • Email enquiries: 12 months

  • Inactive customer accounts: 24 months, then deleted

  • Wholesale applications: retained only while account remains active

You may request deletion of your personal information at any time (unless we are legally required to retain it).

6. Your Rights (UK GDPR)

You have the right to:

  • Access the personal information we hold

  • Request correction or deletion

  • Restrict processing

  • Object to marketing

  • Request data portability

To exercise these rights, contact:
📧 hello@bruceandlukes.com

7. Email Marketing

If you sign up for our mailing list, we may send you:

  • Product updates

  • Offers

  • Wholesale information

  • News and announcements

You can unsubscribe at any time by clicking the link in any email.

8. Behavioural Advertising

We use Google Ads and other platforms to show relevant ads.
This may involve:

  • Remarketing

  • Conversion tracking

  • Audience optimisation

You can opt out of personalised advertising via:
https://www.google.com/settings/ads/anonymous

9. Data Security

We use industry-standard security measures such as:

  • Encrypted checkout

  • Secure payment gateways

  • HTTPS site encryption

  • Limited access to personal data internally

Despite this, no method of transmission is 100% secure.

10. Age Restrictions

Our website is not intended for individuals under 18 years old.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always appear on this page.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:

📧 hello@bruceandlukes.com
📍 Bruce & Luke’s Coffee, Carlisle, UK
(Registered Company: Jackson and Brown Ltd)