Privacy policy

2. PRIVACY POLICY

Last updated 6 October 2026

Who we are Cuppa Collective is run by Matthew Pye, a sole trader trading as Cuppa Collective, ADD YOUR POSTAL ADDRESS, England. We are the data controller for the personal information described here. Email: cuppacollective@proton.me.

What we collect

  • Order details: your name, delivery and billing address, email address, phone number (if you give one) and what you bought.
  • Payment details: these are handled by our payment providers. We never see or store your full card number.
  • Messages: anything you send us by email or through our contact form.
  • Newsletter: your email address, if you sign up.
  • Device and browsing data: such as your IP address, browser and the pages you view, collected through cookies (see our Cookie Policy at cuppacollective.co.uk/pages/cookie-policy).
  • Reviews and photos: anything you choose to submit for publication.

Why we use it and our lawful basis

  • To take, make and deliver your order, and to handle returns (to perform our contract with you).
  • To keep tax and accounting records (legal obligation).
  • To answer your messages, prevent fraud and improve our shop (our legitimate interests).
  • To send marketing emails (your consent, or for existing customers, messages about similar products that you can opt out of at any time).
  • To set non-essential cookies (your consent, where required).

Who we share it with

  • Shopify, which runs our online shop.
  • Printful, our print partner, which prints and posts your mug.
  • Payment providers, such as Shopify Payments and PayPal.
  • Delivery companies.
  • Our email provider, for newsletters and order emails.
  • Advertising and analytics platforms (for example Meta, Pinterest, TikTok and Google), only if you agree to marketing cookies.
  • Professional advisers and authorities, where the law requires it. We never sell your personal information.

International transfers Some of our providers store data outside the UK (for example in the USA, Canada or the EU). Where that happens, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Addendum.

How long we keep it Order and accounting records: 6 years after the end of the tax year (HMRC rules). Messages: 2 years. Newsletter data: until you unsubscribe. Cookies: see the Cookie Policy.

Your rights You can ask to see, correct, delete, restrict or move your data, object to how we use it, or withdraw consent at any time. Email cuppacollective@proton.me and we will reply within one month.

Complaints Please tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Children Our shop is not aimed at under-16s and we do not knowingly collect their data.

Changes We will post any changes here with a new date.