Who we are

This website is run by Cup of Joy, a café at 117 High Road, East Finchley, London N2 8AG. For this website we are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Registered business name: Juni Limited (trading as Cup of Joy)
Company number: 12545129
Email: cafecupofjoy@gmail.com
Phone: 020 3651 4839
Post: Cup of Joy, 117 High Road, East Finchley, London N2 8AG

If you have any question about this policy or your information, just get in touch. There's a real person on the other end.

What we collect and why

Online orders for collection

When you order on this website we collect your name, email address, phone number, what you ordered, your chosen pickup time and any notes you add (for example, allergy information you choose to tell us). We use this to prepare your order, let you know when it's ready and deal with any problems or refunds.

Table reservations

When you book a table we collect your name, email address, phone number, the date, time and number of guests, and any notes you add. We use this to hold your table, send you a confirmation or reminder, and contact you if something changes.

Contact form

When you use our contact form we collect your name, phone number, the reason you're getting in touch, any company name you give, and your message. We use it only to reply to you.

Gift cards

When you buy an eGift Card we collect your name, email address and payment details (handled by the payment provider, see below). If it's a gift, we also collect the recipient's name, email address and your message so the card can be emailed to them. Please only give us someone else's details if you're happy they'd expect to receive a gift from you.

Share the Joy loyalty card

Our Share the Joy loyalty card is a paper stamp card that you keep. We don't collect any personal information for it through this website.

Newsletter and marketing

We don't currently send a newsletter or marketing emails through this website. If we ever do, we'll only send them if you've clearly opted in, and every email will have an easy way to unsubscribe.

Allergy and dietary information

If you tell us about an allergy or a dietary need connected to your health, that can be "special category" data. We only use it to keep you safe when preparing your food or setting your table, and only because you chose to tell us. Please feel free to call us instead of writing it down.

Payments

Payments on this website are processed on the secure Wix checkout by Wix Payments or the card payment provider connected to it. We never see or store your full card details. We receive confirmation that you've paid, the amount, and limited details such as the card type and last four digits.

Our legal reasons for using your information

Contract: to take and prepare your order, hold your reservation and issue your gift card, because you've asked us to.
Legal obligation: to keep sales and accounting records required by HMRC, and to meet food safety rules.
Legitimate interests: to reply to your messages, deal with complaints, keep the website secure and prevent fraud. We always weigh these against your rights.
Consent: for any optional cookies and for any marketing, if you opt in. You can withdraw consent at any time.
Explicit consent: for any allergy or health-related information you choose to share with us.

Cookies and analytics

This website is built and hosted on Wix. It uses cookies and similar technologies that are strictly necessary to make it work, for example to remember your basket, keep your checkout secure and protect the site from abuse. These don't need your consent.

Wix may also provide basic statistics about how the website is used (such as pages visited). We don't use advertising or tracking cookies to follow you around the web. Any non-essential cookies, such as analytics, will only be used where you have agreed to them. You can also block or delete cookies in your browser settings, although some parts of the site, like ordering, may then not work. You can read more in Wix's cookie policy.

Who we share your information with

We never sell your information. We only share it with trusted companies that help us run the café and this website, and only as much as they need:

Wix.com, which hosts this website and runs our online ordering, reservations, contact form, gift cards and checkout. See Wix's privacy policy.
Our payment provider (Wix Payments or the card processor connected to our checkout), which processes your payment securely.
Google, which provides our email service, if you email us or we reply to you.
Our accountant and professional advisers, where needed for our accounts and legal obligations.
Authorities such as HMRC, the police or the local council, only when the law requires it.

Uber Eats: if you order from us on Uber Eats, you're using Uber's platform. Uber collects your details and is responsible for them under Uber's privacy notice. Uber passes us what we need to prepare and hand over your order, such as your first name, order and any notes, and we use it only for that.

International transfers

Some of our service providers, including Wix and Google, store or access data outside the UK, for example in the European Economic Area, Israel or the United States. When this happens, the transfer is protected in a way UK law recognises: a UK "adequacy" decision for that country (such as the EEA, Israel, or the UK–US Data Bridge for certified US companies), or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

How long we keep it

Orders, payments and gift card sales: 6 years after the end of the financial year, because tax law requires it.
Gift card and recipient details: until the card is used up or expires, and then as part of our sales records above.
Table reservations: up to 12 months after your booking date.
Contact form messages and emails: up to 12 months after we've finished dealing with your enquiry, unless it relates to a complaint or claim, in which case we keep it for as long as needed to resolve it.
Allergy notes: only for as long as needed for that order or booking.

After that, we delete the information or make it anonymous.

Keeping it safe

Your information is stored on Wix's secure systems and our email account, protected by passwords and two-step sign-in. Only the people who run the café can see it, and only when they need to.

Your rights

Under UK GDPR you have the right to:

be informed about how we use your information (that's this page);
access the information we hold about you and get a copy;
rectification: ask us to correct anything wrong or incomplete;
erasure: ask us to delete your information, unless we have to keep it by law;
restrict how we use your information in certain situations;
data portability: receive information you gave us in a common format, or have it sent to someone else;
object to us using your information on the basis of legitimate interests, and to any direct marketing at any time;
withdraw consent at any time, where we rely on consent;
not be subject to decisions made only by automated means (we don't make any).

To use any of these rights, email cafecupofjoy@gmail.com, call 020 3651 4839 or ask us in the café. It's free, and we'll reply within one month. We may need to check your identity first.

Children

This website isn't aimed at children under 13, and we don't knowingly collect their information online. Families are, of course, always welcome in the café.

Complaints

If you're unhappy with how we've handled your information, please tell us first and we'll do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Changes to this policy

We'll update this page if anything changes, and the date at the top will always show the latest version.

Privacy policy