Privacy Policy

1. Introduction

Wakiru & Co. ("we," "us," or "our") is a company registered in the United Kingdom. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and share information about you when you visit or make a purchase from wakiru.co (the "Site"), and informs you about your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of the applicable data protection laws, the Data Controller is Wakiru & Co.

2. The Data We Collect

We collect Personal Data, which is any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: Name, username, title.
• Contact Data: Billing address, delivery address, email address, telephone numbers.
• Financial Data: Payment card details (processed securely via Stripe; we do not store full card numbers).
• Transaction Data: Details about payments and products you have purchased.
• Technical Data: IP address, browser type, time zone, location, operating system.
• Usage Data: Information about how you use our website.

3. Legal Basis for Processing

Under the UK GDPR, we are required to rely on a legal basis to process your personal data. These bases include:

• Performance of Contract: Processing necessary to fulfill your order (e.g., delivering coffee).
• Legitimate Interests: Processing necessary for our business interests (e.g., preventing fraud, improving our services), provided your rights do not override these interests.
• Legal Obligation: Processing necessary to comply with the law (e.g., keeping tax records).
• Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., newsletter subscription).

4. Sharing Your Personal Data

We may share your data with third parties who provide services on our behalf. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

• Payment Processors: Stripe (for secure payments).
• Service Providers: IT and system administration services, shipping/delivery partners (e.g., Royal Mail, DPD).
• Professional Advisers: Lawyers, bankers, auditors, and insurers.
• Regulators: HM Revenue & Customs, regulators and other authorities based in the UK.

5. International Transfers

Some of our external third parties (like Stripe) may be based outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by utilizing specific contracts approved for use in the UK which give personal data the same protection it has in the UK.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• access your personal data (Subject Access Request).
• correct any incomplete or inaccurate data we hold about you.
• erase your personal data ("right to be forgotten").
• object to processing of your personal data.
• restrict processing of your personal data.
• transfer your personal data to you or to a third party.

To exercise any of these rights, please contact us at info@wakiruandco.com.

7. Abandoned Carts and Incomplete Orders

If you begin the checkout process but do not complete your purchase, we may retain the contact details you have entered (such as your email address) for up to 48 hours to assist you with any technical difficulties or to allow you to easily restore your cart. If you have explicitly opted in to receive marketing communications or cart reminders, we may use these details to send you a reminder about your incomplete order. You can unsubscribe from these reminders at any time.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.

9. Contact Us

Wakiru & Co. is responsible for your personal data. If you have any questions about this privacy policy, please contact us at: info@wakiruandco.com.