Privacy Policy

Last updated: 5 September 2026

This privacy policy explains how Just Bru Ltd, trading as Harmony Coffee ("Harmony Coffee", "we", "us" or "our"), collects, uses, stores and shares personal information when you visit www.harmonycoffee.co.uk, buy from our online shop, subscribe to our emails, contact us or submit a wholesale enquiry.

1. Who we are

Just Bru Ltd, trading as Harmony Coffee, is the controller responsible for the personal information described in this policy.

Company number: 12566408
Address: 6 Concept Court, York, YO30 4XF, United Kingdom
Email: hello@harmonycoffee.co.uk

2. Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact information: your name, billing address, delivery address, email address and telephone number.
• Order information: products ordered, order value, delivery method, transaction history, refunds, subscriptions and customer-service records.
• Payment information: payment status and limited payment details provided by our payment processors. We do not normally receive or store your complete card number.
• Account information: login and customer-account details where you create or use an account.
• Wholesale information: your business name, role, business address, contact details and information included in a wholesale enquiry.
• Communications: emails, contact-form submissions, enquiries, complaints, reviews and other correspondence with us.
• Marketing information: your email-marketing preferences, consent records and interactions with our emails.
• Technical and usage information: IP address, device and browser information, cookie identifiers and information about how you use our website.

Please do not send us special-category information, such as medical information, unless it is genuinely necessary for us to deal with your request.

3. How we collect personal information

We collect information:

• directly from you when you order, subscribe, create an account, contact us or submit a wholesale enquiry;
• automatically through cookies and similar technologies when you use our website; and
• from service providers involved in payments, fraud prevention, delivery and ecommerce administration.

4. How and why we use your information

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against your rights and reasonable expectations.

5. Email marketing

We use Shopify Email to send marketing communications. We will send marketing where you have consented or where the law otherwise permits us to contact existing customers about similar products.

You can unsubscribe at any time by selecting the unsubscribe link in an email or contacting hello@harmonycoffee.co.uk. Unsubscribing from marketing will not prevent us from sending service messages about an order, subscription or enquiry.

6. Cookies and analytics

Our website uses cookies and similar technologies. Some are necessary for functions such as the shopping basket, checkout, account access, security and remembering privacy choices. These essential technologies do not require consent.

We also use Google Analytics to understand website use and improve our services. Where consent is required, analytics cookies are not used unless you accept them through our cookie-preference tool. You can reject non-essential cookies or change your preferences through that tool. You can also restrict cookies through your browser, although this may affect website functions.

7. Who we share information with

We share personal information only where necessary with appropriate recipients, including:

• ecommerce, website-hosting and customer-account providers, including Shopify;
• payment processors and fraud-prevention providers;
• postal, courier, fulfilment and delivery providers;
• email and marketing service providers, including Shopify Email;
• analytics providers, including Google Analytics, where you have consented;
• accounting, record-management, IT and professional advisers;
• regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law; and
• a purchaser, investor or adviser involved in a proposed sale, reorganisation or transfer of our business, subject to appropriate confidentiality arrangements.

These organisations may act as our processors or, in some circumstances, as independent controllers responsible for their own use of your information.

We do not sell your personal information.

8. International deliveries and international data transfers

We may accept orders from customers worldwide. We will share the information needed to fulfil an international order with relevant payment, postal, courier and customs providers.

Some of our service providers may process information outside the United Kingdom. Where this constitutes a restricted transfer under UK data-protection law, we rely on a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another legally permitted safeguard. You may contact us for more information about the safeguards relevant to your information.

9. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, traceability, dispute and fraud-prevention requirements. Our usual approach is:

• Orders, payments, refunds and associated correspondence: generally six years after the end of the relevant accounting period or completion of the transaction, where required for tax, accounting or legal purposes.
• Customer accounts: while the account is active and afterwards for as long as associated transaction or legal records must be retained.
• Unsuccessful wholesale enquiries and general enquiries: normally up to two years after the enquiry is closed, unless a longer period is justified by an ongoing relationship, dispute or legal requirement.
• Marketing information: until you unsubscribe or we determine that the information is no longer current. We may retain a minimal suppression record so that we respect your opt-out.
• Cookie and analytics information: for the period described through our cookie-preference tool or determined by the relevant service settings, after which it is deleted or aggregated.

We may retain information for longer where reasonably necessary in connection with a complaint, legal claim, regulatory investigation or suspected fraud.

10. How we protect information

We use reasonable organisational and technical measures designed to protect personal information against accidental loss and unauthorised access, alteration, disclosure or destruction. Access is limited to people and service providers who need the information for their work and who are subject to appropriate duties.

No internet transmission or storage system can be guaranteed completely secure. Please contact us promptly if you believe your account or information has been compromised.

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase your information;
• ask us to restrict how we use your information;
• object to processing based on legitimate interests;
• object at any time to the use of your information for direct marketing;
• receive certain information in a portable format or ask us to transfer it to another provider; and
• withdraw consent at any time where we rely on consent. Withdrawal does not affect processing that occurred before consent was withdrawn.

These rights are not absolute and may be subject to legal exceptions. To exercise a right, email hello@harmonycoffee.co.uk. We may need to ask for information to verify your identity. We will not normally charge a fee.

12. Complaints

Please contact us first if you have a concern so that we can try to resolve it.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: ico.org.uk/make-a-complaint

If you live outside the UK, local data-protection or consumer laws may also give you the right to contact the regulator in your country.

13. Children

Our website and services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us.

14. Third-party websites

Our website may link to websites operated by other organisations. We are not responsible for their privacy practices, and you should review their privacy information separately.

15. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on our website with its updated date. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.

16. Contact us

For questions about this policy or how we use personal information, contact:

Just Bru Ltd, trading as Harmony Coffee
Company number 12566408
6 Concept Court
York
YO30 4XF
United Kingdom
Email: hello@harmonycoffee.co.uk