Privacy Policy

This Global Privacy Notice explains how your personal data is collected, used and shared when you visit https://www.reviva-coffee.com/. It also provides information about your rights in relation to your personal data.

Reviva Coffee is owned by Gulf Oil International Limited, which is the controller of your personal data.

Our website, products and services are not intended for children and we do not knowingly collect personal data relating to children.

What personal data do we collect about you and how?

The personal data we collect about you depends on your interaction with Reviva Coffee, your privacy settings and applicable law.

Direct interactions. We collect personal data when you provide it to us directly, such as through your use of our website, or in the course of doing business with us. For example:

• • If you contact us to request information about our products, services or partnerships, we may collect your name, contact details, information about the organisation you work for and your role within such organisation.
  • If you register and create an account, we may collect your name, contact details, login information (username and password) and any other information you add to your account.
  • If you participate in any of our marketing activities, including offers, sweepstakes, contests and promotions, we may collect your name, contact details, electronic identification data, consumption habits or interests and any other information you may provide.
  • We will collect business contact information when you do business with us on behalf of a company, which may include the company name, your name, your role at your company, and the business email address.
  • We may also keep records of your interactions with us both on our website and in person including if you ask us a question, submit an enquiry form or contact our customer service team.

• If you make a purchase via our website (please note that this is only available in the UK), then we will collect details of the transaction and certain associated billing or delivery information [which may include credit/debit card details or other payment related data].
• If you engage with us on social media or use the social media integrations on our website, then we may collect information about this engagement.

Automated technologies or interactions. We will also collect information about how you use and interact with our website, such as:

• Technical information about your use of our website, including your IP address, browser type and version, time-zone setting and location, operating system and platform and other device information; and
• Information collected automatically using cookies and other similar technologies, such as which pages you viewed and which content you interacted with. We explain more about this below.

Third-party or publicly available sources. We may collect personal data about you from third parties, including our subcontractors, when they send us your personal data to enable the supply of our products or services to you. This may include receiving personal data from payment processors when you make a purchase on our website, or where permitted by law or when we interact with governmental or regulatory authorities, including from various tax agencies. If you do not wish to provide your personal data where we need to collect such data by law or under a contract with you, we may not be able to perform our obligations under the contract or otherwise (for example, we may be unable to provide you with products or services).

What do we use your personal data for?

Depending on how you use our website or otherwise do business with us, your interactions with us, and the permissions you give us, the purposes for which we use your information include:

• To maintain, promote and/or provide the products, services and information you have requested via our website.
• To manage and respond to any queries, feedback or messages.
• To improve, administer and maintain our website and records, and monitor our website’s usage.
• To build and manage our business relationships.
• To organise, host and promote events and marketing activities.
• For marketing and market research, e.g. to target advertising effectively and to use any feedback you provide to develop and improve our products and services.
• To provide and maintain your Reviva account (if you have one).
• To provide our social media pages and integrations.
• To tell you about Reviva partnerships, products and services we think you will be interested in, e.g. we may send marketing messages and newsletters where we have your consent or are otherwise permitted to do so.
• For security purposes, to investigate fraud and where necessary to protect ourselves and third parties.
• To comply with our legal and regulatory obligations, including undertaking appropriate due diligence on our suppliers, clients and other business contacts.

We will only use your personal data for the purposes for which we collected it or for another reason compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

We rely on the following legal bases under applicable data protection laws, to process your personal data:

• Because it is in our legitimate interests, unless your interests and fundamental rights override those interests (e.g. to administer our website or social media pages and deliver relevant content. This enables us to establish, manage and maintain our customer and commercial relationships).
• Because we have obtained your consent (e.g. where you contact us with a query, where you add optional information to your account, or if you consent to receive marketing from us). You have the right to withdraw your consent at any time by contacting us using the “Contact Us” section of our website.
• Because the processing is necessary to perform a contract with you, or take steps prior to entering into a contract with you (e.g. where you have made a purchase with us, we and our service providers use your personal data to communicate with you, process the payment and fulfil your order).
• Because we need to comply with a legal obligation.

Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law.

Marketing Communications

We may send you newsletters and marketing materials about our products, services and partnerships where you have permitted us to do so, or where otherwise permitted by law. If you no longer want to receive these communications, you can change your preferences at any time by contacting us or clicking on the ‘unsubscribe’ link in any email. Please note that where you unsubscribe or opt out from a marketing communication, we need to keep a record of your email address to ensure that we do not send you marketing emails in the future.

Who do we share those personal data with?

We may share your personal data with third parties in the following circumstances:

• Reviva Coffee is owned by Gulf Oil International Limited, which is part of a global group of companies that share various operations and business processes. Accordingly, we may need to share your personal data with other members of our group as part of our business relationship with you, or because it is in our legitimate interests to do so.
• Where we are working with our partners and licensees, it may be necessary to share your personal data to deliver the products or services to you.
• Where we are using a third party service provider to provide products or services that involve data processing (for example, fulfilling delivery of a coffee order or hosting our website). We use a third party payment provider to process transactions when you make a purchase through our website. We do not collect payment card details ourselves and such information submitted by you to the payment provider is not disclosed to us and is subject to the payment provider’s own terms and conditions and privacy policy.
• Where we work with online advertisers, social media platforms and advertising networks to deliver, tailor and measure advertising to you and others both on our website and elsewhere on the internet.
• If we are required to seek legal advice to defend our rights, property or interests then we may share your personal data with our legal and other external advisers.
• Where we are under a legal or regulatory obligation to disclose your personal data, or to protect the rights, property or safety of our company, or customers or others.
• If our company, or substantially all of our company’s assets, are merged or acquired by a third party, your personal data may form part of the transferred or merged assets.

If we share your personal data, we will do so on strict conditions of confidentiality and with appropriate levels of security to safeguard your data.

Due to Gulf’s global operations, your personal data may be processed in countries outside your jurisdiction. This means that your information may be transferred to countries where you may have fewer legal rights in respect of your personal data than you do under local law. In such cases, we take appropriate steps (as required by applicable law) to ensure that your privacy rights are adequately protected in accordance with UK data protection law. For example, we may use contracts or the Standard Contractual Clauses approved by the UK Government

Security, Storage and Retention

We have put in place reasonable security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

We will keep your personal data for as long as we need it for our legitimate business purposes (as set out above under ‘What do we use your personal data for?’), taking into account any applicable legal, accounting, reporting or regulatory requirements with specified retention periods, and so this period will vary depending on your interactions with us. For example, if you make a complaint about a product or service, we may keep a record of our correspondence with you for as long as is necessary to protect us from a legal claim.

Cookies

We use cookies and similar technologies to provide certain functionality to our website (e.g. to remember your log-in details), to allow you to set preferences, to understand and measure our website’s performance (e.g. to make certain parts of our website easier to use), and to deliver targeted advertising. This means we may obtain information about your general internet usage through the use of cookies or other internet tracking technologies.

For example, you may see adverts for our products and services on third party websites, including on social media. These adverts may be tailored to you using cookies (which track web activity to enable us to serve relevant content to individuals who have visited our website). Where you see an advert on social media, this may be because we have engaged the social network to show adverts to our customers or users who match the demographic profile of our customers. If you no longer want to see tailored adverts you can change the cookie and privacy settings on your browser or the third party website.

Where legally required, we will obtain your consent to use cookies which are not strictly necessary for us to provide our website. Normally, this is done by a notification banner when you first use our website. You can adjust the cookie and privacy settings at any time.

Further details of the cookies we use can be found in our Manage Cookies.

Your Rights and Complaints

Depending on the country in which you are based, you may have certain rights in respect of your personal data, such as the right to access, correct, and request the erasure of your data. You may also have the right to object to your personal data being used for certain purposes, including to send you marketing (see ‘Marketing’ above for more details of how to opt-out).

We will comply with any requests to exercise your rights in accordance with applicable law. Please be aware that there are a number of limitations to these rights, and there may be circumstances where we are not able to comply with your request.

To make any requests regarding your personal data, or if you have any questions or concerns regarding your personal data, you should contact us using the “Contact Us” section of our website.

If you are unsatisfied with how we have handled your personal data, you may be entitled to contact your local supervisory authority for data protection. In the UK, you may complain to the UK data regulator, the Information Commissioner’s Office (https://www.ico.org.uk).

Links to third party websites

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notices of every website you visit.

Changes to our Global Privacy Policy and your duty to notify us of changes

We may update this Global Privacy Notice periodically to reflect changes in our privacy practices. We recommend that you revisit this page on occasion to see the latest version.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Contact us

If you have any queries or concerns on any aspect of this Global Privacy Notice or the handling of your personal data, please contact us using the Contact Us section on our website or using the details below:

Reviva Coffee
C/O Gulf Oil International LTD
1st Floor,12 Charles II Street
London SW1Y 4QU