Privacy policy
Privacy policy
Last updated: 20 October 2026
This policy explains how Hinba Ltd, trading as Hinba Coffee Roasters (“we”, “us”), collects and uses your personal information when you visit hinba.co.uk, buy from us, subscribe or contact us. We are the data controller for this information.
Hinba Ltd, registered in Scotland, company number SC621002. Registered office: Kilbrandon House, Balvicar, Oban, Argyll PA34 4RA. Trading address: 34 Bogmoor Place, Glasgow G51 4TQ. Email: hello@hinba.co.uk.
What we collect
- Contact and order details: your name, email address, phone number, billing and delivery addresses, the items you order and your order history.
- Account and subscription details: your login email, subscription choices (coffee, grind, size, frequency) and delivery preferences.
- Payment information: payments are handled by our payment providers. We do not see or store your full card number.
- Messages: anything you send us by email or through our contact and wholesale forms.
- Loyalty and marketing: your loyalty points and rewards, and whether you have agreed to receive our emails.
- Device and browsing information: such as your IP address, browser, pages viewed and how you reached our site, collected through cookies and similar technologies.
How we use it and our lawful basis
- To take, roast, pack, deliver and support your orders and subscriptions, and to manage your account (performance of a contract).
- To keep accounting and tax records (legal obligation).
- To prevent fraud, keep our site secure and understand how it is used so we can improve it (legitimate interests).
- To send you our newsletter and offers (consent). You can unsubscribe at any time using the link in every email.
- To reply to your messages and enquiries (legitimate interests, or contract if it relates to an order).
Who we share it with
We only share what each provider needs to do its job:
- Shopify, which hosts our online store and processes orders.
- Our payment providers, to take and refund payments.
- Royal Mail, to deliver your parcel and send you tracking updates.
- Appstle, which runs our subscriptions.
- Smile.io, which runs our loyalty rewards.
- MailerLite, which sends our marketing emails if you have opted in.
- Our professional advisers, and authorities where the law requires it.
We do not sell your personal information.
International transfers
Some of these providers store or process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by approved safeguards such as the UK International Data Transfer Agreement or Addendum.
Cookies
We use cookies that are needed for the store to work (for example, your basket and checkout), and, where you allow them, cookies for analytics and marketing. You can manage cookies through your browser settings and through our cookie banner where it is shown.
How long we keep it
We keep order and accounting records for six years after the end of the financial year they relate to, as required for tax purposes. We keep account and subscription details while your account is active. Marketing data is kept until you unsubscribe. Messages are kept for as long as needed to deal with them and any follow-up.
Your rights
Under UK data protection law you have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use any of these rights, email hello@hinba.co.uk. We will reply within one month.
Children
Our store is not intended for children and we do not knowingly collect personal information from children under 13.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.