Privacy Policy

Privacy Policy

Last Updated: September 2026

This Privacy Policy explains how Filicori Zecchini UK (“we”, “us”, or “our”) collects, uses, stores, and protects personal information when you visit our website, purchase our coffee products or equipment, register for an account, or otherwise interact with us.

We are committed to safeguarding your privacy in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

For the purposes of applicable data protection law, the data controller responsible for your personal data is:

• Entity: Filicori Zecchini UK
• Email: info@filicorizecchini.co.uk (or your designated contact email)
• Registered Address: Unit A1, Rose Business Estate, Marlow Bottom, Marlow, SL7 3ND

 

2. The Personal Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, categorized as follows:

• Identity Data: First name, last name, title, date of birth (where required for age-restricted services), and business name (for wholesale/trade accounts).
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial & Transaction Data: Payment card details (processed securely via PCI-DSS compliant payment gateways; we do not store full card numbers), bank details (for wholesale invoicing), details of products purchased, order history, and order values.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types, operating system, and platform.
• Usage Data: Information about how you navigate and interact with our website, products, and marketing communications.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

 

3. How We Collect Your Data

• Direct Interactions: You provide data when filling in website forms, creating an online account, ordering products, signing up for newsletters, or contacting customer support.
• Automated Technologies: As you interact with our website, we automatically collect Technical and Usage Data via cookies, server logs, and similar tracking technologies.
• Third Parties: We may receive data from payment service providers, analytics providers (e.g., Google Analytics), delivery carriers, and business intelligence services.

 

4. Legal Basis and Purposes for Processing

Under the UK GDPR, we rely on specific legal grounds to process your personal information:

Purpose / Activity	Type of Data	Lawful Basis for Processing
Registering you as a new retail or wholesale customer	Identity, Contact	Performance of a contract
Processing and delivering orders, managing payments, fees, and charges	Identity, Contact, Financial, Transaction	Performance of a contract; Legal obligation
Managing relationship (order updates, service notices, policy updates)	Identity, Contact, Marketing	Performance of a contract; Legal obligation
Administering website security, troubleshooting, and fraud prevention	Identity, Contact, Technical	Legitimate interests (protecting business operations and preventing crime)
Delivering relevant website content and direct marketing	Identity, Contact, Usage, Marketing	Consent (for email marketing); Legitimate interests (for existing customer marketing)
Website optimization, analytics, and service improvements	Technical, Usage	Legitimate interests (improving products and services)

5. Cookies and Tracking Technologies

Our website uses cookies and similar tools to distinguish you from other users, provide core e-commerce functions (such as maintaining your shopping basket), and analyse site traffic.

• Strictly Necessary Cookies: Essential for the operation of our shop, user logins, and secure checkout.
• Analytical/Performance Cookies: Allow us to count visitors and track how users move around our website.
• Functionality Cookies: Used to recognise you when you return to our website (e.g., language selection).
• Targeting/Advertising Cookies: Record your visit, pages visited, and links followed to deliver relevant product recommendations.

You can adjust your browser settings to refuse some or all cookies or manage your preferences via our on-site Cookie Consent Banner. Disabling essential cookies may impact site functionality.

 

 

6. Sharing Your Personal Data

We do not sell your personal data. We only share your data with trusted third parties strictly necessary to deliver our services:

• Payment Processors: Secure third-party gateways (e.g., Stripe, PayPal) to process transactions.
• Logistics & Couriers: Delivery partners (e.g., Royal Mail, DPD, DHL) to dispatch coffee and equipment orders.
• IT & Hosting Providers: Cloud infrastructure providers, e-commerce platforms (e.g., Shopify, WooCommerce), and email service providers.
• Parent Company / Group Entities: Gruppo Filicori Zecchini (Italy) for legitimate administrative and order fulfilment purposes where cross-border coordination is required.
• Professional Advisers & Regulators: Accountants, legal counsel, insurers, and UK regulatory bodies (such as HMRC or law enforcement) where legally required.

 

7. International Data Transfers

If we transfer personal data outside the UK (for example, to our Italian headquarters or cloud servers located within the European Economic Area or the United States), we ensure a similar degree of protection is afforded by utilizing:

• Transfers to countries deemed by the UK Government to provide an adequate level of data protection.
• Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) with appropriate supplementary safeguards.

 

8. Data Security and Retention

• Security: We maintain robust technical, physical, and organizational security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorized way. Access is limited strictly to personnel and contractors on a need-to-know basis.
• Retention: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, tax, or reporting requirements (typically 6 to 7 years following transaction completion under UK tax law).

 

9. Your Legal Rights

Under UK data protection law, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you (Subject Access Request).
• Right to Rectification: Request correction of incomplete or inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of data where there is no good reason for us continuing to process it.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Restriction: Request the suspension of processing your personal data.
• Right to Data Portability: Request transfer of your data to you or a third party in a structured format.
• Right to Withdraw Consent: Withdraw previously granted consent at any time (e.g., via the “unsubscribe” link in any marketing email).

To exercise any of these rights, contact us at privacy@filicorizecchini.co.uk. We do not charge a fee for standard requests and aim to respond within one calendar month.

 

10. Complaints and Regulatory Authority

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue directly.

You also have the right to lodge a complaint at any time with the UK supervisory authority:

• Information Commissioner’s Office (ICO)
• Website: ico.org.uk
• Helpline: 0303 123 1113

 

11. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our operational practices or legal obligations. Any updates will be posted directly to this page with an updated revision date.