Privacy policy

Who we are

Beyond Boundaries is the trading arm of the registered charity 13 Not Out, charity number 1216500. It is operated by Beyond Boundaries Coffee LTD, a company registered in England and Wales under company number 17432463, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For the purposes of UK data protection law the data controller is Beyond Boundaries Coffee LTD. Returns and post go to Florentine House, Cuckoo Close, Barlaston, Stoke on Trent, ST12 9FP.

We are registered with the Information Commissioner’s Office under number ZC271371.

What we collect

• Order details. Your name, email address, delivery address, phone number if you give one, and what you bought.
• Payment details. Handled entirely by Stripe. Your card number never reaches this website and we never see or store it.
• Correspondence. Anything you send us through the contact form or by email, and our replies.

Why we hold it, and on what basis

• To fulfil your order, including sending the details to whoever is packing it and to the courier. The lawful basis is performance of a contract.
• To answer your enquiry when you contact us. The lawful basis is legitimate interests, namely replying to someone who has asked us a question.
• To meet our tax and accounting obligations. The lawful basis is legal obligation, and it is why order records are kept for six years.

We do not send marketing emails, and there is no mailing list to join. If that ever changes we will ask for your consent first, and this page will say so before it happens.

Who we share it with

Only the companies needed to take your money and get your order to you, and only with what each of them needs:

• Stripe, who take the payment and hold the card details we never see.
• Resend, who send the emails this site generates, including your enquiry and the alert telling us an order has come in.
• Vercel, who host the website.
• Limini Coffee, our roastery, who dispatch orders directly to you and so need your name and delivery address.
• DPD and Royal Mail, who need your name and address to deliver the parcel.

We do not sell your data to anyone. We do not pass customer details to 13 Not Out for fundraising unless you have asked us to.

When you place an order, the details needed to pack and post it are emailed to the shop’s own mailbox. That is how a small operation finds out it has an order to send.

Sending data outside the UK

Stripe, Resend and Vercel are United States companies, so your information is stored and processed outside the United Kingdom.

Where that happens we rely on the safeguards in each company’s data processing agreement, which are intended to give your information the same protection it has here. The exact mechanism is being confirmed. (not yet confirmed)

How long we keep it

• Orders: six years, because tax law requires it.
• Enquiries: no longer than we need to deal with them and any follow up, normally within a year.

If you contact us and never order, there is nothing to keep beyond the conversation itself, and you can ask us to delete that at any point.

Cookies

We use a small number of cookies that are strictly necessary to make the site work, including remembering what is in your basket. These do not require consent. We set no analytics or advertising cookies. If that changes, this page will change with it and you will be asked first.

Your rights

You can ask us to:

• give you a copy of what we hold about you;
• correct anything that is wrong;
• delete it, where we are not required to keep it;
• hand it over in a portable form, or send it to someone else;
• stop using it for a particular purpose, or pause using it while a disagreement is sorted out.

Email us and we will respond within one month. Nothing on this site makes automated decisions about you, and there is no profiling.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

Contact: 13notout@gmx.com