Legal
GDPR Statement
Last updated: March 2026
Our Commitment
Black Brew Coffee Company Ltd is committed to handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains our obligations and your rights under that framework.
Data Controller
Black Brew Coffee Company Ltd is the data controller responsible for the personal data collected through this website. Contact: hello@blackbrewcoffeecompany.com Location: Edinburgh, Scotland
Data We Process
We process the following categories of personal data: — Contact and identity data: name, email address, company name. — Communication data: the content of messages submitted through our contact form. — Technical data: IP address, browser information, and anonymised usage data. We do not process special category data (such as health, biometric, or financial data).
Lawful Basis
Every instance of data processing at Black Brew is conducted under one of the following lawful bases: — Legitimate interests: managing enquiries and operating our business efficiently, balanced against your right to privacy. — Legal obligation: retention of records required by law (e.g. accounting or tax obligations). — Consent: where we explicitly request and receive your agreement before processing. We do not process personal data for automated decision-making or profiling.
Data Transfers
We store data within the United Kingdom or the European Economic Area. Where data is processed by third-party services (e.g. website hosting or email providers), we ensure appropriate data processing agreements are in place. We do not transfer personal data to countries outside the UK/EEA without ensuring an equivalent level of protection is applied.
Your Rights Under UK GDPR
You have the following rights regarding your personal data: — Right of access: request a copy of the data we hold about you. — Right to rectification: request that inaccurate data be corrected. — Right to erasure: request deletion of your data where there is no legal basis for us to retain it. — Right to restriction: ask us to limit how we use your data. — Right to data portability: receive your data in a structured, commonly used format. — Right to object: object to processing based on legitimate interests. — Rights related to automated decision-making: we do not use automated decision-making. To exercise any of these rights, contact us at hello@blackbrewcoffeecompany.com. We will respond within 30 days.
Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK's supervisory authority: Information Commissioner's Office (ICO) ico.org.uk Helpline: 0303 123 1113 We would, however, appreciate the opportunity to address your concern directly before you approach the ICO.
Policy Review
This GDPR statement is reviewed annually or whenever there is a material change to our data processing activities. The date of the most recent revision is noted at the bottom of this page.
Black Brew Coffee Company Ltd · Edinburgh, Scotland · hello@blackbrewcoffeecompany.com