Skip to main content

Privacy policy

 

Privacy Policy

The Roasting Shed Limited Last updated: 10 July 2026

1. Introduction

The Roasting Shed Limited ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, place an order, sign up for our newsletter, or interact with us by email, SMS, or in our shop.

This policy applies to all visitors, customers, and subscribers of The Roasting Shed Limited.

2. Data Controller

The Roasting Shed Limited 322 Hornsey Road, London, N7 7HE hello@theroastingshed.com

3. What Personal Data We Collect

Depending on how you interact with us, we may collect:

Website and browsing data

  • IP address, browser type, device information
  • Pages visited, time on site, referral source
  • Cookie and tracking identifiers (see Section 6)

Order and account data

  • Name, delivery and billing address, email address, phone number
  • Order history and payment confirmation (payment card details are handled directly by our payment processor and are not stored by us)

Email data

  • Email address
  • Name associated with the email address
  • Date of subscription or registration

SMS data

  • Phone number
  • Date of opt-in and message preferences

4. Why We Collect Personal Data

We use personal data to:

  • Process and fulfil orders, including wholesale accounts
  • Operate and improve our website and shopping experience
  • Send newsletters, product updates, and promotional offers (where you've opted in)
  • Send order confirmations, delivery updates, and SMS notifications
  • Run and measure the performance of our advertising campaigns
  • Respond to inquiries, feedback, and customer service requests
  • Comply with our legal and tax obligations

5. Legal Basis for Processing

We process personal data based on:

  • Consent — for marketing emails, SMS, and non-essential cookies
  • Contract — to fulfil orders and provide customer service
  • Legitimate interests — to improve our website, prevent fraud, and run advertising, in a way that does not override your rights
  • Legal obligation — for accounting, tax, and regulatory requirements

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to run properly, understand how visitors use the site, and show relevant advertising. This includes:

  • Essential cookies — required for the website and checkout to function
  • Analytics cookies — such as Google Analytics, to help us understand site usage
  • Advertising cookies — such as Google Ads, used to measure ad performance and show relevant ads to you on other websites

You can control or disable cookies through your browser settings or our cookie consent banner. Disabling some cookies may affect how the website functions.

7. How We Share Your Data

We do not sell, rent, or trade your personal data. We share limited personal data with trusted third-party service providers who help us run our business. These providers only receive the data necessary to perform their function and are contractually prohibited from using it for any other purpose. Our current providers include:

  • Shopify — our e-commerce platform, used to process orders, payments, and manage customer accounts
  • Simprosys — used to manage and optimise our product data feed for advertising purposes
  • Google Ads and Google Merchant Center — used to show relevant advertising and manage our product listings. Google may process data such as your email address (in hashed form) and browsing behaviour for audience matching, ad personalisation, and performance measurement
  • Google Analytics — used to understand website traffic and usage
  • Klaviyo — our email and SMS marketing platform, used to send newsletters, promotions, and order-related communications
  • Payment processors — used to securely process card payments (we do not store your full card details)
  • Delivery and courier partners — used to fulfil and deliver your orders

Some of these providers may be based outside the UK/EEA (for example, in the United States). Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the provider's participation in an approved data protection framework, to ensure your data is protected to UK standards.

We may also share personal data where required by law, to protect our legal rights, or in connection with a business sale, merger, or restructuring.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are typically retained for at least 6 years to comply with UK tax law.

9. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to certain processing
  • Request a copy of your data in a portable format
  • Withdraw consent at any time, where consent is our legal basis for processing

To exercise any of these rights, contact us at hello@theroastingshed.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. SMS Communications

By providing your phone number, you consent to receive SMS messages from The Roasting Shed Limited related to order confirmations, delivery updates, promotions, and product news. You can opt out at any time by replying "STOP" to any message. We do not sell, rent, or share your phone number with third parties, except as required by law or with service providers (such as Klaviyo) who assist us with messaging and are bound by strict confidentiality obligations.

11. Security

We implement appropriate technical and organisational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

12. Children's Privacy

Our website and services are not directed at children, and we do not knowingly collect personal data from anyone under 16.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated by email or a notice on our website.

14. Contact Us

For any questions or concerns about this Privacy Policy, please contact us at hello@theroastingshed.com or write to us at 322 Hornsey Road, London, N7 7HE.