Privacy Policy

Privacy Policy for Espresso Care Solutions Ltd

Effective Date: 2025

Espresso Care Solutions Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Information We Collect

We collect personal information that is necessary to provide our services. This may include:

Personal Identification Information: Name, email address, phone number, etc.
Transaction Information: Billing address, payment information, services requested, and any communication related to those services.
Usage Data: Information about how you interact with our website or services, including IP address, browser type, operating system, and location data.
Cookies and Tracking Technologies: We may use cookies to track your browsing activities on our website (see our Cookie Policy for more details).

How We Use Your Information

We use your personal information for the following purposes:

To provide our services: Process payments, fulfil orders, and manage customer support.
To communicate with you: Respond to inquiries, provide updates, and send marketing materials if you’ve opted in.
To improve our services: Understand how you interact with our website and services to enhance user experience.
For legal compliance: We may need to use or disclose your data to comply with legal obligations.

Legal Basis for Processing Your Data

Under the GDPR, we rely on the following legal bases to process your personal data:

Contractual necessity: When processing is required to fulfil a contract you have entered into with us (e.g., to provide services or process payment).
Consent: When we have received your consent to use your data for specific purposes, such as sending marketing emails.
Legal obligations: When processing is necessary to comply with the law.
Legitimate interests: We may process data to pursue our legitimate interests (e.g., improving our services or preventing fraud), provided that these interests do not override your rights and freedoms.

Sharing Your Information

We may share your personal data with the following entities:

Service providers: Third-party vendors who help us provide our services (e.g., payment processors, IT support, marketing agencies).
Legal compliance: If required by law, or to protect our legal rights, we may disclose your information to regulatory authorities or law enforcement agencies.
Business transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred.

Data Security

We take reasonable steps to protect your personal information using industry-standard security measures, such as encryption, firewalls, and secure server technology. However, please note that no method of transmission over the internet is entirely secure, and we cannot guarantee the absolute security of your data.

Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal or regulatory obligations.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request corrections to any inaccurate or incomplete data we hold about you.
Right to erasure (“Right to be forgotten”): You can request that we delete your personal data, subject to certain conditions.
Right to restrict processing: You can request a restriction on how we process your data in certain circumstances.
Right to data portability: You can request a copy of your personal data in a commonly used electronic format.
Right to object: You can object to the processing of your data for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us at service@espressocaresolutions.co.uk.

International Transfers

We do not transfer personal data outside the UK or European Economic Area (EEA). If this changes in the future, we will ensure that adequate safeguards are in place, such as data processing agreements, to protect your data.

Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Effective Date.” We encourage you to review this policy periodically to stay informed about how we protect your information.