Legal
Privacy Policy
How we collect, use and protect your personal information.
Last updated: 9 October 2026
1. Who we are
Authority Coffee is a trading name of Agilistix Ltd, a company registered in England and Wales with company number 08541139. Our registered office is 10 London Mews, London, W2 1HY. We are the controller of your personal information. We are registered with the Information Commissioner's Office (ICO), registration number ZB176694.
If you have any questions about this policy or your information, email [email protected].
2. The information we collect
- Contact and delivery details: your name, email address, phone number and delivery address.
- Order and subscription details: what you buy, when, how much you pay, your subscription status and your order history.
- Payment information: payments are handled by Stripe. We do not see or store your full card details. We receive confirmation of payment and limited details such as the card type and last four digits.
- Account details: if you log in, the email address you use and your saved delivery addresses.
- Unfinished checkouts: if you start a checkout but do not complete it, the details you entered up to that point.
- Messages: emails and other messages you send us.
- Marketing choices: whether you have agreed to hear from us, and whether you have unsubscribed.
- Technical information: information about the device and browser you use to visit our website, collected through cookies (see section 9).
We need your contact and delivery details to take and deliver your order. If you do not provide them, we cannot accept your order.
3. How we use your information and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Processing, delivering and managing your orders and subscriptions, your account, and payments | Performing our contract with you |
| Sending order confirmations, delivery updates and subscription notices | Performing our contract with you, and legal obligation where the law requires a notice |
| Answering your questions and handling complaints, returns and refunds | Performing our contract with you, and our legitimate interest in giving good customer service |
| Keeping accounting and tax records | Legal obligation |
| Preventing fraud and keeping our shop secure, including fraud checks by our payment providers | Our legitimate interest in preventing fraud and protecting our business and customers |
| Marketing emails, if you sign up | Your consent, which you can withdraw at any time |
| Website visit statistics (analytics cookies) | Our legitimate interest in understanding how our website is used, as allowed by law. You can object at any time (see section 9). |
4. Marketing
- We do not send marketing emails unless you sign up for them.
- You can unsubscribe at any time using the link in our emails, or by emailing [email protected]. We will still send you messages about your orders and subscription.
- We never sell your personal information.
5. Who we share your information with
We only share your information with organisations that help us run our shop, and only as much as they need:
- HighLevel (LeadConnector): our online shop, customer records and email platform.
- Stripe: card and Apple Pay payments, subscription billing and fraud checks.
- Mailgun and Microsoft 365: sending and receiving email.
- Google: supplies the fonts on our website, and receives your device's IP address when a page loads.
- Our roasting and fulfilment partner: packing and posting your order. They receive your name, delivery address and order details.
- Delivery companies, such as Royal Mail and DPD: delivering your parcel.
- Our accountants and professional advisers, HMRC and other authorities: where needed for accounting, tax or legal reasons.
Stripe also uses some information for its own purposes, such as fraud prevention and meeting its legal obligations. When it does, it is responsible for that use under its own privacy policy, which is available on its website.
6. International transfers
Some of our service providers, including HighLevel, Stripe, Mailgun, Microsoft and Google, may store or access your information outside the UK, mainly in the United States. Where this happens, we make sure your information is protected as UK law requires, for example by relying on the UK-US data bridge where the provider is certified under it, or on UK-approved contract clauses. You can ask us for more details.
7. How long we keep your information
- Orders, payments and accounting records: 6 years after the end of the financial year they relate to, as required for tax and accounting.
- Customer and account details: while you are a customer, and for up to 3 years after your last order or contact with us, unless the law requires us to keep them longer.
- Marketing: until you unsubscribe. We then keep a record that you have unsubscribed so that we do not email you again.
- Complaints and correspondence: for up to 3 years after the matter is closed.
- Email delivery records: kept by our email providers under their own policies.
8. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use your information;
- ask for information you gave us in a format you can reuse elsewhere;
- withdraw your consent at any time, where we rely on consent.
Your right to object: you can object at any time to us using your information based on our legitimate interests. You have an absolute right to stop us using your information for marketing.
To use any of these rights, email [email protected]. We will respond within one month. For complex requests we may extend this by up to two further months, and we will tell you if we do. Some rights have limits: for example, we cannot delete records the law requires us to keep, such as orders and payments for tax.
9. Cookies and similar technologies
Cookies are small files stored on your device. Our website also uses your browser's local storage, which works in a similar way.
Needed for the shop to work
These keep items in your basket, process your checkout, keep you logged in and protect the site and payments from fraud (including cookies set by Stripe at checkout and by our website security provider, Cloudflare). They do not need your consent.
Analytics
Our shop platform, HighLevel, uses a cookie (msgsndr_id) and browser storage to record the pages you visit, so we can understand how our website is used and which visits lead to orders. Cloudflare also counts visits to our website without using cookies.
The law allows these visit statistics without asking for your consent, as long as we tell you about them and you can object. You can object at any time by blocking or deleting cookies for our website in your browser settings, or by using a private browsing window. A banner on our website tells you about these cookies when you first visit.
You can also control and delete cookies through your browser settings. Blocking the cookies needed for the shop may stop parts of it from working.
10. Automated checks
When you pay, Stripe automatically screens payments for fraud. In rare cases this may cause a payment to be declined. If you think a decision is wrong, contact us and we will look into it.
11. Keeping your information safe
We use reputable service providers and appropriate security measures to protect your information. Payments are processed securely by Stripe and we never store your full card details. Account logins use one-time codes sent to your email, so there are no passwords to steal. If a personal data breach is likely to put your rights at risk, we will report it to the ICO within 72 hours of becoming aware of it. If it is likely to put you at high risk, we will tell you directly and without undue delay what happened and what you can do.
12. Children
Our shop is not intended for children, and we do not knowingly collect information about anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
13. Complaints
If you are unhappy with how we have used your information, please email [email protected] first. We will acknowledge your complaint within 30 days and respond as soon as we can. You do not have to contact us before complaining to the ICO.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.
14. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make a significant change, we will tell customers by email.