Privacy policy

Last updated: 13 October 2026

Handful Coffee Ltd ("Handful Coffee", "we", "us") operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the "Services"). The Services are powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in it.

Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you. Depending on how you interact with the Services, we may collect or process the following categories of personal information, including inferences drawn from this information:

Contact details, including your name, address, billing address, shipping address, phone number and email address.
Financial information, including credit card, debit card and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
Account information, including your account preferences and settings.
Transaction information, including the items you view, put in your basket, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
Communications with us, including the information you include in communications with us, for example when sending a customer support enquiry.
Device information, including information about your device, browser or network connection, your IP address and other unique identifiers.
Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
Automatically through the Services, including from your device when you use our products or services or visit our website, and through the use of cookies and similar technologies.
From our service providers, including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
From partners and other third parties, such as other platforms we sell through or businesses we run joint promotions with.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Provide, tailor and improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, process your payments, fulfil your orders, remember your preferences and items you are interested in, send you notifications related to your account, process purchases, returns, exchanges or other transactions, create and manage your account, arrange shipping, enable you to post reviews, and create a personalised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending marketing emails and showing you online advertisements for our products on the Services or other websites, including based on items you have previously purchased or added to your basket and other activity on the Services.
Security and fraud prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, and secure the Services. If you register an account, you are responsible for keeping your account credentials safe. We strongly recommend that you do not share your username, password or other access details with anyone else.
Communicating with you. We use your personal information to provide you with customer support, respond to you and maintain our relationship with you.
Legal reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to take part in legal proceedings, and to enforce or investigate potential breaches of our terms or policies.

Our Legal Bases for Using Your Personal Information

Under UK data protection law, we only use your personal information where we have a legal basis to do so:

Contract. To process and deliver your orders, manage your account, handle returns and exchanges, and provide customer support relating to your purchases.
Legal obligation. To keep transaction records for tax and accounting purposes, and to respond to valid requests from public authorities.
Legitimate interests. To prevent fraud and keep the Services secure, to understand how the Services are used so we can improve them, to run and protect our business, and to send marketing emails about our own similar products to people who have bought from us and were given the chance to opt out when they did. Where we rely on legitimate interests, we have considered your rights and you can object to this use of your information at any time.
Consent. To send you marketing emails where you have opted in, and to use non-essential cookies and similar technologies, including advertising technologies such as the Meta Pixel. You can withdraw your consent at any time by unsubscribing from our emails or updating your cookie preferences.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. These may include:

Shopify and other service providers who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping.
Business and marketing partners who provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. You can object to this, or withdraw your consent, at any time.
Meta Platforms, Inc. (including Facebook and Instagram), to help promote our products and provide shopping features such as product tagging and storefronts. This may involve sharing certain information, such as your interactions with our website, purchases and device information, through technologies like the Meta Pixel and Conversions API. Meta may use this information in accordance with its own Privacy Policy to provide personalised advertising and shopping experiences.
Other third parties at your direction, when you ask us to or otherwise consent to our disclosing certain information, such as to ship products to you or through your use of social media widgets or login integrations.
In connection with a business transaction such as a merger or insolvency, to comply with legal obligations (including responding to court orders and similar requests), to enforce our terms of service or policies, and to protect or defend the Services, our rights and the rights of our customers or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you live, in order to provide and improve the Services.

To help protect, grow and improve our business, we also use certain Shopify enhanced features that incorporate data from your interactions with our store, with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights over its use for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, see the Shopify Consumer Privacy Policy. You can exercise certain rights in relation to this information through the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may link to websites or other online platforms operated by third parties. If you follow links to sites we do not control, you should review their privacy and security policies and other terms. We are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of the information on them. Information you share in public or semi-public places, including on third-party social networks, may be visible to other users of the Services or of those platforms. Including a link does not by itself imply that we endorse the platform or its content.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about anyone under 18. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below to ask for it to be deleted.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights and Choices

Under UK data protection law, you have the following rights in relation to your personal information. Some of these rights are not absolute and apply only in certain circumstances, and in some cases we may decline a request where the law allows.

Access. You can ask for a copy of the personal information we hold about you.
Correction. You can ask us to correct personal information that is inaccurate or incomplete.
Deletion. You can ask us to delete the personal information we hold about you.
Restriction. You can ask us to limit how we use your personal information.
Objection. You can object to our use of your personal information where we rely on legitimate interests. You can object to direct marketing at any time, and we will stop.
Portability. You can ask for a copy of personal information you have given us in a commonly used format, or ask us to transfer it to another organisation.
Withdrawing consent. Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did with your information before you withdrew it.

You can unsubscribe from our marketing emails at any time using the link in any email. We may still send you non-marketing emails, such as those about your account or orders.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. Someone else can make a request on your behalf if you have authorised them to, but we may ask for proof of that authorisation and to verify your identity directly. We will respond within one month of receiving your request, or tell you within that time if we need longer.

To exercise rights over personal information that Shopify processes for its own purposes, visit the Shopify Privacy Portal.

Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below and we will do our best to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. If you live in the European Economic Area, you can also complain to the data protection authority in your country.

International Transfers

Some of our service providers, including Shopify and Meta, process personal information outside the UK, for example in the European Economic Area, Canada and the United States.

When we transfer your personal information outside the UK, we make sure it is protected. We rely either on the destination having been found by the UK government to provide adequate protection, or on appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and give notice where the law requires.

How to Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or would like to exercise any of your rights, please email us at info@handfulcoffee.com or write to us at Handful Coffee Ltd, Unit 10, Fieldfare Business Park, Old Malthouse Lane, Ford, Salisbury, SP4 6DR, United Kingdom.

For the purposes of UK data protection law, Handful Coffee Ltd is the data controller of your personal information.