Privacy.
The short version: we only collect what we need to reply to you or tell you about our coffee, we keep it safe, we never sell it, and you can ask us to see or delete it any time.
The longer version is below. It explains how Nowhere Coffee Co. handles your personal information under the Data Protection (Jersey) Law 2018.
Who we are
Nowhere Coffee Co. is a mobile speciality coffee business in Jersey, run by Morgan and Harvey. We are the "data controller" for the personal information described here, which means we decide how it's used and we're responsible for looking after it.
We are registered with the Jersey Office of the Information Commissioner (JOIC) as a data controller, registration number 104241. Our Data Protection Lead, the person responsible for how we handle personal information, is Harvey.
Questions about your information? Email harvey@nowherecoffee.co.uk.
What we collect, and why
When you send an enquiry (Book us): your name, email address, phone number if you give it, and the details of your event (date, location, type of event, rough number of guests, and anything you write in the message). We use this to reply to you, give you a quote and, if you book, organise and deliver your event.
When you buy beans: your name, email address, phone number, delivery address and delivery notes, and what you ordered. We use these to take your payment, deliver your order and keep the records we have to keep. Payment is handled by SumUp on their secure page: we never see or store your card details.
When you sign up for coffee news (Notify me / New coffees by email): your email address and which coffee you're interested in. We use it only to email you when our beans are available, and occasionally about new coffees. Nothing else.
When you email or message us directly: whatever you choose to send, used to reply to you.
When you visit the website: like every website, our hosting provider automatically handles basic technical information (such as your IP address, browser type and the pages requested) to deliver the site and keep it secure. We don't use this to identify you, and we don't run advertising or tracking on this site.
Please don't send us sensitive information (for example health details) through the forms. If you need to tell us about an allergy for an event, we'll only use it to keep you or your guests safe.
Our legal reasons for using it
- Enquiries, bookings and orders: because you've asked us to take steps towards a booking or purchase, and to carry it out.
- The beans list: your consent, which you give by signing up or by ticking the box at checkout (it's never ticked for you). You can withdraw it at any time and we'll remove you.
- Running the business: our legitimate interests in replying to messages, keeping simple records and keeping the website secure, balanced against your rights.
- Legal obligations: where we have to keep records, for example for accounts and tax.
Who else handles it
We don't sell, rent or trade your information, and we don't share it with anyone for their own marketing. We use a few trusted services to run the website, and they only handle your information on our instructions:
- Supabase stores form submissions securely (in the EU, Ireland).
- Resend delivers the email that tells us about your enquiry, and any emails we send to the beans list.
- Vercel hosts the website.
- SumUp takes payments for beans orders (card details go straight to them, never to us).
- Google provides our email inbox.
Some of these providers may process information outside Jersey, the UK and the European Economic Area (for example in the United States). Where that happens, we rely on the safeguards the law requires, such as recognised adequacy arrangements or the providers' standard contractual data protection terms.
We'd only share your information with anyone else if the law requires it, or to protect our rights or someone's safety.
The site links to other services, such as Instagram and Google or Apple Maps for directions. If you follow those links, their own privacy policies apply.
How long we keep it
- Enquiries that don't become a booking: up to 2 years, then deleted.
- Bookings and orders: as long as we need to provide the service, and then as long as we're legally required to keep business and tax records.
- The beans list: until you unsubscribe or ask us to remove you.
How we keep it safe
Form submissions are sent over an encrypted connection and stored in a database that can't be read from the public internet. Access is limited to the two of us, and our accounts are protected with two-step login. No system is perfect, but we take reasonable care, and if something ever went wrong that put your information at risk, we'd act quickly and tell you and the regulator where the law requires it.
Cookies and storage
We don't use advertising or tracking cookies. Your browser keeps your basket and, if you switch the site's sound on, that choice, on your own device until you check out or clear it; neither is sent to us until you place an order. Fonts and images are served from our own website rather than third parties.
Your rights
Under the Data Protection (Jersey) Law 2018 you have the right to:
- ask what information we hold about you and get a copy of it;
- ask us to correct anything that's wrong or incomplete;
- ask us to delete your information;
- ask us to limit how we use it, or object to us using it;
- ask for a copy in a format you can take elsewhere;
- withdraw your consent (for example, leave the beans list) at any time.
To do any of these, email harvey@nowherecoffee.co.uk. It's free, and we'll reply within the time the law allows (normally within four weeks). We may need to check who you are first.
If you're unhappy with how we've handled your information, please tell us so we can put it right. You also have the right to complain to the Jersey Office of the Information Commissioner (jerseyoic.org).
Children
Our website and forms are meant for adults. We don't knowingly collect information from children.
Changes
If we change how we use your information, we'll update this page and the date at the top.