Privacy Policy

1. Who we are

Burra Bristol Ltd (“Burra”, “we”, “us”) operates three cafés across Bristol and this website at burrabristol.co.uk. We are the data controller for personal information collected through this site. You can contact us at hello@burrabristol.co.uk.

2. What data we collect

• Order data — name, email address, delivery address, phone number and order details when you purchase from our shop or book an event.
• Payment data — card details are handled entirely by Stripe. We never see or store your card number, expiry or CVV.
• Contact form submissions — name, email, and any information you include in your message.
• Newsletter sign-ups — email address only.
• Cookies & analytics — basic, anonymised browsing data to understand how the site is used.

3. How we use your data

• To process and fulfil your orders, and send you confirmation and dispatch emails.
• To forward your enquiries to our team and respond to them.
• To send you our newsletter, if you have subscribed. You can unsubscribe at any time via the link in any email.
• To improve and maintain this website.
• To comply with our legal and financial obligations.

We will never sell your data to third parties or use it for unsolicited marketing beyond what you have consented to.

4. Legal basis for processing

• Contract — processing your orders and event bookings.
• Legitimate interest — responding to enquiries and improving our services.
• Consent — sending marketing emails (newsletter sign-ups).
• Legal obligation — retaining financial records as required by HMRC.

5. Third-party processors

We use the following trusted services to operate our business. Each has their own privacy policy and is GDPR-compliant:

• Stripe (payment processing) — stripe.com/gb/privacy
• Resend (transactional email) — resend.com/privacy
• Netlify (website hosting) — netlify.com/privacy
• Inkthreadable (merchandise fulfilment) — inkthreadable.co.uk/privacy

6. How long we keep your data

• Order records — 7 years, as required by UK tax law.
• Contact enquiries — up to 12 months after the enquiry is resolved.
• Newsletter subscribers — until you unsubscribe.

7. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data, where we are not legally required to keep it.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest or for direct marketing.
• Withdraw consent — at any time for processing based on consent (e.g. newsletter).

To exercise any of these rights, email us at hello@burrabristol.co.uk. We will respond within 30 days.

8. Cookies

This website uses only essential cookies required for it to function (e.g. your shopping cart). We do not use tracking or advertising cookies. If we add analytics in future, we will update this policy and request your consent.

9. Complaints

If you are unhappy with how we handle your data, you can complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. Any material changes will be posted on this page with a revised “last updated” date. Continued use of the site after changes constitutes acceptance of the updated policy.