Privacy Policy: Your Trust, Our Priority

At Brew & Hearth Collective, your privacy isn't just a compliance checkbox; it's a fundamental commitment woven into the fabric of our community. This policy details how we protect, use, and respect your personal information across all our services, ensuring a transparent and secure experience as you engage with our Oxford artisan coffee culture.

Abstract image representing data security and privacy, with intertwining lines forming a shield over digital information. — Securing your digital peace of mind as part of our community.

Our Commitment to Your Privacy

Brew & Hearth Collective is deeply committed to safeguarding your privacy across all interactions, whether you're enjoying a latte in our café, ordering beans online, or attending a workshop. This policy meticulously explains what information we collect, the rationale behind its collection, how we utilize it, and importantly, your inherent rights concerning your data.

We rigorously adhere to the General Data Protection Regulation (GDPR) and all relevant UK data protection regulations, ensuring our practices are not only compliant but also reflect a proactive approach to transparency and customer confidence. We regularly review and update this policy to integrate any changes in regulations and to continuously enhance our privacy protocols.

Information We Collect and Why

We only collect information essential for delivering our artisan coffee experiences and services effectively. This includes:

Contact Information: Names, email addresses, phone numbers, and delivery addresses collected for processing online orders, workshop bookings, event catering, and direct communication regarding your inquiries or purchases.
Payment Information: Processed securely via trusted, encrypted third-party payment gateways (e.g., Stripe, PayPal). Brew & Hearth Collective does not store your full payment card details on our servers.
Website Usage Data: Non-personally identifiable information such as IP addresses, browser types, and pages visited, collected to understand site performance, improve user experience, and optimize our digital presence. This includes details from analytics tools but remains anonymized where possible.
Marketing Preferences: Optional consent-based data, allowing us to send you personalized updates on new coffee blends, pastry specials, upcoming workshops, or exclusive community events. You always have full control to opt in or out.

Our data collection philosophy is minimal and purpose-driven, always with your best interests in mind.

How We Use Your Information

Your collected information is used to enhance your Brew & Hearth Collective experience and provide seamless services:

Service Delivery: Fulfilling online shop orders, managing café reservations, coordinating catering events, and providing prompt customer support for any queries you may have.
Communication: Sending transaction confirmations, service updates, and — with your explicit consent — newsletters or promotional offers designed to enrich your engagement with our brand.
Business Analytics: Analyzing aggregated data to understand customer preferences, optimize our product offerings, and improve the efficiency of our operations. This helps us ensure our coffee and pastries truly resonate with our community.
Legal Compliance & Fraud Prevention: Adhering to legal obligations and regulations, and taking necessary steps to prevent fraudulent activities, thereby protecting both our customers and our business.

Protecting Your Information

The security of your personal data is paramount. Brew & Hearth Collective implements robust technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: All data transmitted between your browser and our servers, especially sensitive details, is protected using industry-standard SSL/TLS encryption.
Secure Storage: Your data is stored on secure servers with restricted access, protected by firewalls and advanced security protocols.
Regular Audits: We conduct periodic security assessments and update our systems to guard against emerging threats, ensuring continuous protection.
Limited Access: Employee access to personal data is strictly limited to those who require it for specific job functions, and all staff receive regular training on data protection and privacy best practices.
PCI DSS Compliance: Our third-party payment processors are PCI DSS compliant, ensuring the highest standards for secure handling of payment card information.

Your Data Rights and Controls

Under GDPR and UK data protection laws, you have comprehensive rights regarding your personal data:

Right to Access: You can request a copy of the personal information we hold about you.
Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold about you.
Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data, subject to certain legal obligations.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data for direct marketing purposes or certain other situations.
Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority if you are concerned about our data handling practices.

To exercise any of these rights, or if you have any questions or concerns about your privacy, please contact us directly at info@brewandhearth.co.uk. We are here to help and committed to responding promptly to all requests.

Cookies and Website Tracking

Like most websites, Brew & Hearth Collective uses cookies to enhance your browsing experience. Cookies are small text files placed on your device by websites that you visit. We use different types of cookies for various purposes:

Essential Cookies: These are strictly necessary for the website to function correctly (e.g., managing your shopping cart, login sessions). Without them, certain services cannot be provided.
Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting aggregated, anonymous information. This data helps us improve our site's performance and usability.
Marketing Cookies: With your consent, these cookies track your browsing habits to enable us to display personalized content and relevant advertisements that align with your interests.

You have full control over your cookie preferences. Our website provides a clear cookie consent management tool upon your first visit, allowing you to accept or decline non-essential cookies. You can also adjust your browser settings to refuse cookies, though this may impact certain functionalities of the site.

Still Have Questions? Contact Us