Legal
Privacy Policy
Last updated: 1 June 2025
Who we are
Chloris Coffee Ltd ("Chloris", "we", "us") operates chloriscoffee.com. We are the data controller for personal data collected through this site. Contact: [email protected]
What we collect and why
- Order data — name, delivery address, email, phone. Used to fulfil your order and communicate about it. Basis: contract.
- Payment data — processed by Stripe. We never see or store card numbers. Basis: contract.
- Email address (newsletter) — if you sign up. Used to send you product news and event dates. Basis: consent. You can unsubscribe at any time.
- Analytics — Google Analytics 4, only after you accept cookies. Used to understand how the site is used. Basis: consent.
- Cookies — see our Cookie Policy.
How long we keep it
Order data: 7 years (UK tax law). Email list: until you unsubscribe. Analytics: 14 months (GA4 default). We delete personal data when it is no longer needed for the purpose it was collected.
Who we share it with
We share data only with processors necessary to run the service: Stripe (payment processing), Cloudflare (hosting), Google (analytics — only with consent), and our 3PL fulfilment partner. We do not sell personal data.
Your rights
Under UK GDPR you have the right to access, correct, delete or restrict processing of your data, to data portability, and to withdraw consent at any time. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the ICO at ico.org.uk.
International transfers
Stripe and Google may process data outside the UK. Both maintain Standard Contractual Clauses and are covered by adequacy decisions where applicable.
Changes to this policy
We'll update the date above when this policy changes. Material changes will be communicated by email to registered customers.