Privacy policy
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from bru-cups.com (the "Site"). The Site is operated by bru Global Limited, trading as "bru".
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as "Device Information".
We collect Device Information using the following technologies:
Cookies are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit https://www.allaboutcookies.org. Log files track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring and exit pages, and date and time stamps. Web beacons, tags, and pixels are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit or debit card numbers), email address, and phone number. We refer to this information as "Order Information".
When we talk about "Personal Information" in this Privacy Policy, we are talking both about Device Information and Order Information.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we collect generally to fulfil any orders placed through the Site, including processing your payment information, arranging for shipping, and providing you with invoices and order confirmations. Additionally, we use this Order Information to:
Communicate with you; Screen our orders for potential risk or fraud; and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimise the Site, for example by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns.
LAWFUL BASIS FOR PROCESSING
Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we rely on the following lawful bases to process your Personal Information:
Performance of a contract, when we process your Order Information to fulfil your order and provide our products and services to you. Legitimate interests, when we use your information to prevent fraud, improve the Site, and understand how customers use the Site, provided these interests are not overridden by your rights. Consent, when you have agreed to receive marketing communications or to the use of non-essential cookies. You may withdraw your consent at any time. Legal obligation, when we need to process your information to comply with applicable laws.
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We may also share your information with delivery partners such as Royal Mail and Evri to arrange shipping of your order, and with payment providers to process your payment securely.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
BEHAVIOURAL ADVERTISING
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. We currently use advertising services provided by Meta (Facebook and Instagram) and Google. For more information about how targeted advertising works, you can visit the Network Advertising Initiative's educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the links below:
Meta (Facebook and Instagram): https://www.facebook.com/settings/?tab=ads
Google: https://www.google.com/settings/ads/anonymous
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance's opt-out portal at https://optout.aboutads.info/.
COOKIES AND CONSENT
We use cookies and similar technologies on the Site as described above. Essential cookies are required for the Site to function, for example to keep items in your basket and to process your order. We also use analytics and advertising cookies to understand how the Site is used and to show you relevant advertising.
You can control and manage cookies through your browser settings, and where a cookie consent tool is available on the Site, you can set your preferences for non-essential cookies there. Disabling certain cookies may affect how the Site functions.
DO NOT TRACK AND GLOBAL PRIVACY CONTROL
Some browsers offer a "Do Not Track" (DNT) feature. As there is no common industry standard for how DNT signals should be interpreted, we do not currently respond to browser DNT signals. However, where required by applicable law, we will treat a recognised opt-out preference signal, such as the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of your Personal Information for that browser or device.
YOUR RIGHTS (UK AND EUROPE)
If you are a UK or European resident, you have the right to access the personal information we hold about you, to ask that your personal information be corrected, updated, or deleted, to object to or restrict certain processing, and to request that we transfer your information to another provider. Where we rely on your consent, you have the right to withdraw that consent at any time. If you would like to exercise any of these rights, please contact us using the contact information below.
We process your information in order to fulfil contracts we might have with you, for example if you make an order through the Site, or otherwise to pursue the legitimate business interests listed above. Please note that your information may be transferred outside of the UK and Europe, including to Canada and the United States, and where this happens we take steps to ensure your information is protected in line with UK data protection law.
If you have a concern about how we handle your Personal Information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at https://ico.org.uk. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please do contact us first.
YOUR RIGHTS (UNITED STATES)
If you are a resident of the United States, you may have privacy rights under the laws of your state, including California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws. Depending on where you live, these rights may include:
The right to know what Personal Information we collect about you and how we use and share it.The right to access a copy of the Personal Information we hold about you. The right to request that we correct inaccurate Personal Information. The right to request that we delete your Personal Information, subject to certain legal exceptions. The right to opt out of the sale or sharing of your Personal Information, and of targeted advertising. The right not to be discriminated against for exercising any of these rights.
We do not sell your Personal Information for money. However, our use of advertising cookies and similar technologies with partners such as Meta and Google may be considered a "sale" or "sharing" of Personal Information for targeted advertising under some US state laws. You can opt out of this at any time by setting your preferences in the cookie consent tool on the Site, by using the advertising opt-out links in the Behavioural Advertising section above, or by enabling a Global Privacy Control (GPC) signal in your browser.
To exercise any of your rights, please contact us by email at info@bru-cups.com or by post using the details below. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request, and you may use an authorised agent to submit a request on your behalf where permitted by law.
CALIFORNIA "SHINE THE LIGHT"
If you are a California resident, California Civil Code Section 1798.83 permits you to request information about the disclosure of your Personal Information to third parties for their direct marketing purposes. To make such a request, please contact us using the details below.
DATA RETENTION
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information, and for as long as necessary to comply with our legal and accounting obligations.
CHANGES
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at info@bru-cups.com or by post using the details below:
bru Global Limited, 20 Laburnum Rd, Coopersale, Epping, CM16 7RA, United Kingdom