Last updated: 26 October 2026.
This explains what we do with your personal information. Kohima Ltd (trading as Coffee Cabinet) is the controller, registered with the Information Commissioner's Office, number [ICO registration number]. Questions: info@coffeecabinet.co.uk.
What we collect
- Your name, email, phone number and delivery and billing addresses when you order.
- What you bought, and your subscriptions, so we can send, support and refund orders.
- The coffee machine you own, if you tell us, so we can show what fits.
- Your email address and consent if you sign up for emails or back-in-stock alerts.
- Messages you send us, and reviews you write.
- Basic, anonymous visit counts (pages viewed, products added). These use a daily changing code, not a cookie, and cannot identify you.
We never see or store your full card details; Stripe handles them.
Why we use it, and our lawful basis
- To take, send and support your order and subscription: to perform our contract with you.
- To keep accounts and VAT records: a legal obligation.
- To prevent fraud and keep the site secure: our legitimate interests.
- To send care reminders, offers and news: only with your consent, which you can withdraw at any time with the unsubscribe link in every email.
- Service emails about an order or subscription (confirmations, tracking, payment reminders) are sent whether or not you agreed to marketing, because they are part of the service.
Who helps us
These companies process information for us, only on our instructions and under contracts that protect it:
- Stripe: payments and subscription billing.
- Vantage Point Digital: the platform that runs this shop and its Site Manager.
- Supabase: database hosting for the shop.
- Cloudflare: website hosting and security.
- Resend: sending our emails.
- Microsoft 365: our email inbox.
- ShipStation (Auctane): buying delivery labels.
- Royal Mail, Evri, DPD, Yodel or another carrier: delivering your parcel (name, address, and email or phone for delivery updates).
If you choose to review us on Trustpilot, Trustpilot's own privacy policy applies to what you give them. We do not sell your information, or share it for anyone else's marketing.
Outside the UK
Some of these providers store or access data outside the UK, for example in the United States. Where they do, the transfer is protected by UK adequacy regulations or the UK's approved contract clauses.
How long we keep it
- Orders and invoices: 6 years after the end of the financial year, as HMRC requires.
- Your account and machine details: until you ask us to delete them, or 3 years after your last order.
- Marketing consent: until you unsubscribe. We keep a record that you unsubscribed so we do not email you again.
- Back-in-stock requests: until the alert is sent.
Your rights
You can ask for a copy of your information, ask us to correct it, delete it or restrict how we use it, object to how we use it, or ask for it in a form you can take elsewhere. Email us and we will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
See our cookie policy. We use no advertising or tracking cookies.
