Your cart (0)
Your cart is empty
Tax included and shipping calculated at checkout
Last updated · September 2026
What we collect, why we collect it, and how to make us stop. Short, because we do not collect much.
The short version: we hold your name, address, email and order history so we can roast and post your coffee. We do not sell your data and we do not share it for advertising.
Who is responsible
Rosso Coffee is the data controller for the personal data described here. For any question about your data, or to exercise any of the rights below, email hello@rossocoffee.co.uk.
What we collect
- Order details — your name, delivery address, email address, chosen grind, and what you ordered.
- Payment information — collected and processed at checkout by Shopify and its payment providers, not by us. We receive a payment reference and whether a payment succeeded. We never see or store your full card details.
- Correspondence — emails you send us and our replies.
We do not collect special category data, we do not profile you, and we do not make automated decisions about you.
Why we hold it, and on what basis
- To take payment, roast your order and deliver it — because it is necessary to perform our contract with you.
- To answer your emails and handle problems — our legitimate interest in running a business people can talk to.
- To keep records of sales for tax and accounting — a legal obligation.
If we ever want to email you marketing, we will ask you to opt in first, and every such email will carry a one-click unsubscribe.
Who we share it with
- Shopify — our store runs on Shopify, which hosts the site and processes orders and payments on our behalf.
- Our delivery carrier — your name and address, so the parcel arrives.
- Our accountant and HMRC — sales records, where required.
That is the complete list. We do not sell, rent or trade personal data, and we do not share it for advertising.
Cookies
This site runs on Shopify, which sets cookies that are necessary for the shop to work — keeping your cart, remembering your session and completing checkout — along with basic store analytics. Non-essential cookies are controlled by the consent banner shown on your first visit, where you can decline them.
How long we keep it
Order and payment records are kept for six years, which is the retention period UK tax law requires. Email correspondence is kept for two years.
Where it is held
Your data is held by Shopify and our other suppliers, and may be processed outside the UK. Where that happens, the transfer is covered by the appropriate safeguards under UK GDPR.
Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it if it is wrong; delete it; restrict or object to how we use it; or send it to another provider. Email hello@rossocoffee.co.uk and we will respond within one month. There is no charge.
If you are not happy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk — though we would appreciate the chance to fix it first.
Changes
If this policy changes we will update the date at the top, and we will email customers about anything material.