Privacy policy

Last updated: 6 May 2026

1. Who We Are

This website is operated by Grass & Roots Blends Ltd. We are a limited company registered in England and Wales with company number 17054905. We sell coffee and related products online throughout the United Kingdom.

For any privacy-related enquiries, please contact us at:

2. What Information We Collect

We collect personal information when you visit and use our website, place an order, create an account, or sign up to receive marketing communications. This may include:

Information about your browser, network and device

  • Information about your browser, network, and device

  • Web pages you visited before coming to this website

  • Your IP address

  • Details of your use of this website, including clicks, pages visited, scrolling, searches, and timestamps

We provide this information to Google Analytics, our website analytics provider, to help us understand site traffic and activity.

Information you provide when placing an order

When you buy something on this website, we collect personal information from you to fulfil the order, including:

  • Your name

  • Billing and shipping address

  • Email address

  • Phone number

  • Details relating to your purchase

We share this information with Squarespace, our online store hosting provider. We also share it with our chosen shipping service provider(s) so we can deliver your order. Our payment processor will collect payment information directly from you.

Information collected via cookies

This website uses cookies and similar technologies, small files that download to your device when you visit a website. We use both necessary cookies (required for the site to function) and analytics cookies (only placed once you have acknowledged our cookie banner). Please see our Cookie Policy section below for more detail.

3. Why We Collect Your Information

We collect and use your personal information for the following purposes:

  • To process and fulfil your orders

  • To communicate with you about your order or account

  • To send marketing emails (with your consent, and you may unsubscribe at any time)

  • To improve our website and customer experience through analytics

  • To comply with legal obligations

4. Our Legal Basis for Processing (UK GDPR)

As a UK-based business, we rely on the following legal bases to process your personal data:

  • Contract: Processing necessary to fulfil your order

  • Legitimate interests: Website analytics and fraud prevention

  • Consent: Marketing emails (you may withdraw consent at any time)

  • Legal obligation: Retaining records as required by law

5. Cookies

This website is hosted by Squarespace. Squarespace uses necessary and analytics cookies. Necessary cookies are always used, as they allow Squarespace to securely serve this website to you. Analytics cookies are only used when you acknowledge our cookie banner.

For a full list of cookies this site uses, please visit: support.squarespace.com/hc/articles/360001264507

6. Sharing Your Information

We share your personal information only as necessary to run our business and as described in this policy. This includes:

  • Squarespace, our website hosting, analytics, and commerce platform

  • Our payment processor, to handle payment transactions securely

  • Our shipping provider(s), to deliver your orders

We do not sell your personal information to any third party.

7. How Long We Retain Your Information

We retain personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. For example, we are required to retain financial records for a minimum of six years under UK law.

8. Your Rights

  • Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate personal data

  • Request deletion of your personal data

  • Object to or restrict processing of your personal data

  • Data portability, receive your data in a machine-readable format

  • Withdraw consent at any time (for processing based on consent)

To exercise any of these rights, please contact us at the details in Section 1. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take reasonable steps to protect your personal information. Our website is hosted on Squarespace, which maintains industry-standard security practices. Payment information is handled securely by our payment processor and is not stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify visitors of significant changes via an announcement on our website. The date at the top of this page reflects when the policy was last updated.