Privacy Policy

Coffee & Candle (“Coffee & Candle,” “we,” “our,” or “us”) values your privacy and is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with us through our website, services, or communications.

1. The information we collect may include the following categories:

   • Personal Identification Data: Name, email address, phone number, job title, company name.

   • Financial Information: Billing details, invoices, and payment records.

   • Business Information: Project requirements, brand assets, and communications related to our services.

   • Technical Information: IP address, browser type, operating system, and usage data when you visit our website.

   • Cookies & Tracking Data: Information used to enhance user experience and analyze site performance.
     
     

2. We process your personal data for the following purposes:

   • To provide and manage our branding consultancy services.

   • To communicate with you regarding inquiries, proposals, and projects.

   • To issue invoices, process payments, and maintain financial records.

   • To comply with legal and regulatory obligations in the United Kingdom.

   • To improve our website, services, and client experience.

   • To send you updates, newsletters, and marketing communications (with your consent).
     
     

3. We process your personal data only when permitted by UK data protection law, including:

   • Consent: When you opt in to receive marketing or share details voluntarily.

   • Contractual Necessity: To deliver our services under an agreement.

   • Legal Obligation: To comply with accounting, tax, and regulatory requirements.

   • Legitimate Interests: To enhance service delivery, protect our rights, and prevent misuse.
     
     

4. We do not sell or trade your personal data. We may share it with:

   • Service Providers: IT, accounting, cloud hosting, and payment processors, under strict confidentiality.

   • Calendly: our booking calendar, which handles the details you enter when you book a call.

   • Regulatory Authorities: When required by law.

   • Business Transfers: In the event of a merger, acquisition, or restructuring.
     
     

5. Data is securely stored on servers and cloud platforms compliant with international security standards. Personal data is retained only as long as necessary for the purposes outlined in this Policy, unless a longer retention period is required by law.
   
   

6. If data is transferred outside the United Kingdom, we ensure it is protected with appropriate safeguards in compliance with the UK GDPR.
   
   

7. Under UK data protection law, you have the right to:

   • Access your personal data.

   • Request correction or deletion of inaccurate data.

   • Withdraw consent at any time (without affecting prior lawful processing).

   • Restrict or object to certain data processing activities.

   • Request data portability, where applicable.
     
     Requests may be submitted to hello@coffeeandcandle.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
     
     

8. We use technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or loss. However, no method of transmission over the internet is 100% secure.
   
   

9. Our website uses cookies and similar technologies to improve user experience and to understand how the site is used. We use Google Analytics for traffic statistics and Contentsquare for heatmaps and anonymised session analytics, which help us improve the site. These tools run whenever you visit the site. You can block or delete cookies in your browser settings. Our booking page uses Calendly to run the booking calendar. When you open that page, Calendly loads its own cookies and receives the details you enter to book a call, including your name, email address and the time you choose. Calendly’s own privacy notice is at calendly.com/privacy.
   
   

10. We may send you updates, newsletters, or event invitations. You may opt out at any time by clicking “unsubscribe” in our emails or by contacting us directly.
    
    

11. This Privacy Policy may be updated from time to time to reflect changes in law, technology, or business practices. Updates will be posted on our website with a revised effective date.
    
    

12. For any questions about this Privacy Policy or to exercise your rights, please contact us at hello@coffeeandcandle.com.