Privacy Policy

For data-protection purposes, the controller is:

Stardust Family Group Limited
Registered in England and Wales under company number 14487135
Registered office: 5 Poole Road, Bournemouth, BH2 5QL, United Kingdom
Email: contact@astericoffee.com

Asteri Coffee is a trading name of Stardust Family Group Limited.

Depending on how you use Asteri, we may collect:

Order and account information

Your name, email address, delivery and billing address, telephone number where provided, account details, order history, returns, communications and coffee, grind or brewing preferences.

Membership and CoffeeBank information

Your membership type and status, deposit amount, payment or Direct Debit status provided by our payment processor, customer-deposited balance, CoffeeInterest balance, refund or goodwill credit, transaction history and related account activity.

CoffeeInterest is promotional coffee credit. It is recorded separately from money you deposit into CoffeeBank.

Payment information

Payments are processed by Stripe. Payment-card and bank details are entered directly into Stripe's systems and are not stored by Asteri. We may receive limited payment information such as payment status, payment method type, transaction reference and the final digits of a card.

Marketing and preference information

Your journal subscription, release-notification choices, marketing permissions, cookie choices and records of when those choices were made or changed.

Technical and usage information

Your IP address, device and browser type (user-agent), approximate location derived from your IP address, pages viewed, referral source, interaction information and security logs.

Acceptance records

When you place an order or join the Asteri Collective, CoffeeBank or an Asteri Ritual, we record which legal documents and versions you accepted, the date and time of acceptance, the page you accepted them on, and the IP address and browser user-agent captured at that moment. We keep this as evidence of the contract between us.

Information you provide to us

Information contained in enquiries, customer-support requests, reviews, surveys, competitions or other communications with Asteri.

We normally collect information directly from you, automatically through the website, or from service providers involved in processing payments, delivering orders or operating our website.

We use personal information for the following purposes and lawful bases:

To perform our contract with you

• Process, prepare and deliver orders
• Operate your account, Asteri Collective membership or CoffeeBank
• Collect CoffeeBank deposits and apply CoffeeInterest
• Maintain accurate balances and transaction records
• Process cancellations, withdrawals, returns and refunds
• Provide order and customer support
• Send essential service and account communications

To comply with legal obligations

• Maintain tax, accounting and transaction records
• Meet consumer-protection and product-safety requirements
• Respond to lawful requests from regulators and authorities
• Detect, investigate and report unlawful activity where required

For our legitimate interests

• Keep our website, accounts and payment processes secure
• Prevent fraud, abuse and misuse of CoffeeBank or promotional benefits
• Maintain and improve our products, website and customer service
• Understand overall website and purchasing activity
• Establish, exercise or defend legal claims

Where we rely on legitimate interests, we consider whether our use is necessary, proportionate and consistent with what you would reasonably expect.

With your consent

• Send journal, marketing and selected release emails where consent is required
• Set non-essential cookies and similar technologies
• Send optional notifications you have requested

You may withdraw consent at any time without affecting processing that took place before withdrawal.

Essential communications about an order, payment, account or membership are service messages and are not marketing messages.

We share personal information only where necessary with organisations that help us operate Asteri, including:

• Stripe, for card payments, recurring payments and Direct Debit mandates
• Website-hosting, cloud-infrastructure and database providers
• Email-delivery and customer-communication providers
• Delivery carriers and fulfilment partners
• Analytics providers, where you have consented to non-essential analytics
• Professional advisers, including accountants, insurers and legal advisers
• Regulators, law-enforcement bodies or public authorities where required by law

Some providers, including payment providers and delivery carriers, may also act as independent controllers for certain uses of personal information under their own privacy policies.

We do not sell personal information.

Some of our service providers may process personal information outside the United Kingdom.

Where this involves a restricted international transfer, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses, together with any additional safeguards required.

You may contact us for more information about the safeguards relevant to your personal information.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Generally:

• Order, payment and financial transaction records are retained for six years after the relevant financial year or transaction, where required for tax, accounting and legal purposes.
• Account and membership information is retained while the account remains open and afterwards where necessary for legal, security or transaction-record purposes.
• CoffeeBank ledger records may be retained for six years after the relevant transaction or account closure.
• Customer-service correspondence is retained for as long as reasonably necessary to resolve the matter and protect the parties' legal rights.
• Marketing preferences and consent records are retained until consent is withdrawn and afterwards where necessary to demonstrate compliance.
• Acceptance records for orders, memberships, CoffeeBank enrolments and Rituals, including the document version, acceptance timestamp, IP address and browser user-agent, are retained for six years after the end of the relevant contract, membership or CoffeeBank relationship.
• Technical and security logs, including IP addresses collected for security and abuse prevention, are retained for a limited period appropriate to their purpose and normally no longer than twelve months.
• Cookie and analytics information is retained according to the periods described on our Cookies page and the settings of the relevant service.

We may retain limited information after a deletion request where required by law or necessary to record that the request has been honoured.

We use strictly necessary cookies and similar technologies to provide essential website functions, including account access, basket operation, checkout security and saving your privacy choices.

Optional analytics or marketing technologies are used only where the required consent has been given. You can accept, reject or change your choices through the cookie controls available on the website.

Further details, including individual cookies and their durations, are available on our Cookies page.

We use appropriate technical and organisational measures to protect personal information.

These include encrypted connections, restricted access, authentication controls, database access policies, security monitoring and payment processing through specialist providers. Asteri does not store complete payment-card numbers.

No system can be guaranteed to be completely secure. If a personal-data breach creates a risk to individuals, we will notify the Information Commissioner's Office and affected individuals where required by law.

Depending on the circumstances, you may have the right to:

• Request access to your personal information
• Ask us to correct inaccurate or incomplete information
• Request deletion of your information
• Restrict how your information is used
• Receive certain information in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Object to direct marketing

You have an absolute right to object to your personal information being used for direct marketing.

These rights are not absolute in every circumstance. For example, we may need to retain transaction information to comply with tax or accounting law.

To exercise a right, email contact@astericoffee.com. We will normally respond within one month and may ask for information needed to verify your identity.

If you are dissatisfied with our response, you may complain to the Information Commissioner's Office.

We may use automated checks to help detect suspicious payments, account misuse or fraud. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Payment providers may conduct their own fraud and security checks under their respective privacy policies.

Asteri's website and services are not directed at children, and we do not knowingly collect personal information from anyone under 16.

If you believe a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.

We may update this policy as our services, providers or legal obligations change.

The current version will always be published on this page with its effective date. Where a change materially affects how we use personal information, we will provide additional notice where appropriate.

For privacy and data-protection enquiries:

contact@astericoffee.com

Stardust Family Group Limited
5 Poole Road
Bournemouth
BH2 5QL
United Kingdom