Privacy Policy

Effective date: 25 May 2018
Last updated: 5 January 2026

Like most websites, we collect certain personal information when you visit our website or place an order. This helps us process orders, provide customer support, comply with legal requirements, and improve our services.


Who We Are

Nextdaycoffee.co.uk is a trading name of NDCC Limited, a company incorporated in Scotland (Company No. SC362615). NDCC Limited is the data controller responsible for your personal data.

Contact (Data Protection):
The Data Protection Officer
NDCC Limited T/A Nextdaycoffee.co.uk
1 South Caldeen Road
Coatbridge
North Lanarkshire
ML5 4EG

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.


The Personal Information We Collect

When we refer to “Personal Information”, we mean information that identifies you or can reasonably be linked to you.

Order Information

When you make (or attempt to make) a purchase through the website, we may collect:

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Phone number
  • Order details and purchase history

Payments are processed by third-party payment providers (such as Mollie, Stripe or PayPal). We do not store full card details on our servers.

Device Information

When you visit the website, we may automatically collect certain information, including:

  • IP address
  • Browser type and version
  • Time zone
  • Cookie data
  • Information about how you interact with the website

Customer Support Information

If you contact us, we collect the information you choose to provide so we can respond to your enquiry.


How We Use Your Personal Information

We use Order Information to:

  • Process and fulfil orders
  • Arrange delivery
  • Provide invoices and order confirmations
  • Communicate with you about your order

We use Device Information to:

  • Help screen for potential risk or fraud
  • Improve and optimise our website

Age Verification and Identity Checks

Some products sold on this website are age-restricted and may only be purchased by customers aged 18 or over.

Where required by law, or where we reasonably believe an age check is necessary, we may request proof of age before dispatching an order.

What information is collected

This may include a photograph or scan of an official photo ID document, such as a passport or driving licence. We only require information necessary to confirm your age.

How ID is collected

ID documents are collected via a secure third-party form provider (for example, Fillout, operated by Restly Inc). This provider acts as a data processor on our behalf and processes information only under our instructions.

Who controls and accesses the data

NDCC Limited remains the data controller for any ID information you provide. Access to ID documents is restricted to authorised staff and is used solely for age verification purposes.

How long ID information is retained

ID documents are retained only for as long as necessary to complete the age verification process and resolve any related issues. In most cases, ID images are deleted within 72 hours.

Legal basis

Age verification information is processed under the following legal bases:

  • Legal obligation – where we are required to verify age before supplying certain products
  • Legitimate interests – to prevent unlawful sales and protect our business

If you choose not to provide ID when requested, we will be unable to complete your order and will cancel it with a refund.


Legal Bases for Processing (UK GDPR)

Depending on the context, we process personal data under one or more of the following lawful bases:

  • Contract – to fulfil orders and provide services
  • Legal obligation – for accounting, tax, and regulatory compliance
  • Legitimate interests – to operate our business, prevent fraud, and improve services
  • Consent – for certain marketing communications and non-essential cookies

Marketing and Newsletter

If you opt in to receive marketing communications, we may send you emails about products, services, and offers. Every marketing email includes an unsubscribe link.

We may use email analytics (such as opens and link clicks) to improve the relevance of our communications.


Cookies

We use cookies and similar technologies to operate the website, enable checkout functionality, and analyse site usage.

  • Essential cookies are required for core site functionality
  • Non-essential cookies (such as analytics) are used where permitted and may require consent

You can manage cookies via your browser settings. Disabling essential cookies may affect site functionality.


Sharing Your Personal Information

We do not sell your personal information.

We share personal data with trusted third parties where necessary, including:

  • Delivery providers (such as Royal Mail, DPD, and Parcelforce)
  • Payment processors (such as Mollie, Stripe and PayPal)
  • Feedback providers (such as Trustpilot and Google)
  • Age verification service providers, as described in the “Age Verification and Identity Checks” section above

We may also disclose information where required by law or to protect our legal rights.


International Transfers

Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place.


Data Retention

We retain personal data only for as long as necessary:

  • Order and transaction records: up to 6 years
  • Marketing data: until you unsubscribe
  • Account data: while your account is active and for a reasonable period thereafter
  • Age verification documents: typically no longer than 72 hours

Data no longer required is securely deleted or anonymised.


Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent where applicable

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk/


Security

We use appropriate technical and organisational measures to protect personal data. Access is restricted to authorised personnel only.


Children

This website is not intended for children under the age of 18. We do not knowingly collect personal data from children.


Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices.


Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when published on the website.


Contact Us

If you have questions about this policy or how we use personal data, contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..