Privacy policy

Last updated: 8 October 2026

This Privacy Policy explains how Unity Coffee Technologies Limited ("Unity Coffee", "we", "us" or "our") collects, uses, shares and protects your personal information when you use any of the following (together, the "Services"):

  • the Unity Coffee mobile app for iOS and Android (the "App");
  • our website at unitycoffee.uk and our online store, Unity Coffee UK (the "Store"), which is powered by Shopify; and
  • our coffee machines and locations, and any other way you engage with us, including sales, marketing and events.

Our Store runs on Shopify, which processes some of your information to provide the Store and, for certain features, as a separate controller. You can read more in Our Store and Shopify in section 6.

We are the data controller of your personal information. If you have any questions, contact us using the details in Contact us (section 15).

1. Summary

  • What we collect: the details you give us when you create an App account (such as your name, email address and date of birth), your activity in the App (such as drinks, vouchers and rewards), basic device information, and, if you shop in our Store, your Store account, browsing and order details.
  • What we do not collect: we do not collect your device's GPS or precise location, and we do not process sensitive ("special category") personal information.
  • Why: to run your account and rewards, to make the App work, to keep it secure, to improve it, and, only if you agree, to send you marketing.
  • Who we share it with: the service providers that help us run the Services, listed in section 6. We do not sell your personal information.
  • Your choices: you can unsubscribe from marketing at any time, turn off push notifications, manage cookies, exercise your privacy rights, delete your App account from within the App, and ask us to delete your Store data.

2. Information we collect

Information you give us

  • App account details: your first and last name, email address, password (stored in hashed form), and date of birth.
  • Store account details: if you create a customer account on our Store, your name, email address and sign-in details. Your Store account is run by Shopify and is separate from your App account.
  • Preferences: your marketing email and notification preferences.
  • Communications: anything you include when you contact us, for example a customer support request.
  • Store orders: if you buy from our Store, your billing and shipping address, phone number, the items you purchase, return, exchange or cancel, and your past orders. Payments are processed by Shopify and its payment partners, such as PayPal; we do not see or store your full card details.

Information from using the App and our machines

  • Activity and rewards: drinks you buy at Unity Coffee machines, the vouchers and rewards you receive and redeem, event codes you scan, referrals you send or receive, the Unity Coffee locations you have used, and how you came to install the App (for example, from an event QR code).
  • Device information: device identifiers, device model, operating system and version, app version, IP address and a push notification token (if you allow notifications).
  • Usage and diagnostics: how you use the App (for example, which screens and offers you view), crash and error reports, and session replays of App screens with text hidden, which we use to find and fix problems.

Information from using our website and Store

  • Browsing and device information: your IP address, browser and device type, the pages and products you view, items you add to your cart, and how you interact with the site, collected through cookies and similar technologies (see section 8).

Information from third parties

  • Sign in with Google or Apple: if you choose to sign in this way, we receive your name and email address from that provider. If you use Apple's "Hide My Email", we receive a relay address instead.
  • Coffee machine operator: our machine partner shares transaction details with us so we can credit your rewards.

Information we do not collect

The App does not access your device's GPS or precise location, your contacts, your camera or your photo library. We do not process special category data such as health, religion or ethnicity.

3. How we use your information

  • To provide the Services: create and manage your account, let you sign in, and issue and redeem vouchers and rewards (including your birthday reward).
  • To run our Store: process payments, fulfil and ship your orders, handle returns and exchanges, remember your cart and preferences, and recommend products related to your purchases.
  • To communicate with you: send service messages about your account, vouchers and orders, push notifications you have allowed, and replies to your enquiries.
  • Marketing: send you offers and news by email or push notification, only where you have agreed, and show you relevant offers for our Store (see section 5).
  • To improve the Services: understand how the App is used, measure how well our campaigns work, and fix bugs and crashes.
  • Security and fraud prevention: protect accounts, prevent abuse of vouchers, rewards and referrals, and keep the Services secure.
  • Legal reasons: comply with the law, respond to valid legal requests, and enforce our terms.

4. Legal bases for processing

Under the UK GDPR (and the EU GDPR where it applies), we rely on the following legal bases:

  • Contract: to provide your account, rewards, vouchers and Store orders.
  • Consent: to send marketing emails and push notifications. You can withdraw consent at any time.
  • Legitimate interests: to keep the Services secure, prevent fraud, understand how the Services are used and improve them, where these interests are not overridden by your rights.
  • Legal obligation: to keep records required by law (for example tax and accounting records) and respond to lawful requests.

5. Marketing communications and your choices

  • Email: we only send marketing emails if you opt in, for example when you sign up. Every marketing email includes an unsubscribe link; you do not need to sign in to use it.
  • Push notifications: the App asks for your permission before sending notifications. You can turn them off at any time in your device settings.
  • Store emails: if you subscribe to marketing on our Store, for example at checkout, we send you emails about our products and offers. You can unsubscribe at any time using the link in any of these emails.
  • Personalised advertising: we use Shopify to support personalised advertising based on your activity on our Store and with other merchants and websites. You can turn this off through the cookie settings on our website, and, depending on where you live, you may have the right to ask us not to share your information for this purpose.
  • Service messages: even if you opt out of marketing, we may still send messages needed to run your account, such as voucher or order updates.

6. Who we share your information with

We do not sell your personal information. We share it only with the service providers that help us run the Services, under contracts that require them to protect it and use it only on our instructions:

  • Supabase: hosting, database and account authentication.
  • Vercel: website and server hosting.
  • Amplitude: product analytics for the App.
  • Sentry: crash and error reporting, and session replays.
  • Resend: sending emails.
  • Expo, Apple and Google: delivering push notifications and sign-in with Apple or Google.
  • Shopify: our online Store, including Store accounts, checkout, Store analytics and marketing (see below).
  • Payment providers, such as Shopify Payments and PayPal: processing payments for Store orders.
  • Delivery and fulfilment partners: packing and delivering your Store orders.
  • Coffee machine and voucher partners: running our machines, processing drink transactions and issuing vouchers.

We may also share personal information:

  • with our affiliates within our corporate group;
  • in connection with a business transaction, such as a merger, acquisition or sale of assets;
  • where required by law, or to protect the rights, property or safety of Unity Coffee, our users or others; and
  • with your consent or at your direction.

Our Store and Shopify

Our Store is hosted by Shopify, which collects and processes personal information about your access to and use of the Store in order to provide and improve it. Information you submit on the Store is shared with Shopify and with third parties that may be located in countries other than where you live.

We also use certain Shopify enhanced features that combine data from your interactions with our Store, with other merchants and with Shopify, to help protect, grow and improve our business. For these features, Shopify is responsible for processing your personal information, including responding to requests to exercise your rights over it. To learn more, see the Shopify Consumer Privacy Policy or use the Shopify Privacy Portal.

Third-party websites and links

The Services may link to websites and platforms run by others, such as social networks and app stores. We are not responsible for their privacy practices, so please review their own privacy policies. Anything you share publicly on social networks may be seen by others.

7. International transfers

Some of our service providers are based in, or process data in, countries outside the UK, including the European Economic Area and the United States. Where we transfer your personal information outside the UK, we rely on recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Addendum, or the European Commission's Standard Contractual Clauses.

8. Cookies and similar technologies

Our website and Store use cookies and similar technologies to keep the site working, remember your preferences, and understand how the site is used. Where required, we ask for your consent before setting non-essential cookies. You can also block or delete cookies in your browser settings, although some features may not work.

The App does not use browser cookies. It uses Amplitude for product analytics, together with the device information described in section 2.

9. How long we keep your information

We keep your personal information only for as long as we need it for the purposes in this policy. When you delete your account, we delete or anonymise your personal information within six (6) months, except where we must keep some records for longer to meet legal, tax or accounting obligations, resolve disputes, or prevent fraud. Information held in backups is isolated from further use until it is deleted.

10. How we keep your information safe

We use appropriate technical and organisational measures to protect your personal information, including encryption in transit, access controls and secure hosting. No system is completely secure, so we cannot guarantee absolute security. Please keep your login details safe and do not share them with anyone.

11. Children

The Services are not intended for anyone under 18 years of age, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

12. Your rights

Under UK data protection law you have the right to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your information;
  • ask us to restrict or object to our processing;
  • receive your information in a portable format, where applicable; and
  • withdraw your consent at any time, where we rely on consent. This does not affect processing that happened before you withdrew it.

To exercise any of these rights, contact us using the details in section 15. We may need to verify your identity before responding, and we will reply within one month. You can ask someone to make a request on your behalf, in which case we will ask for proof that you have authorised them. We will not treat you differently for exercising your rights.

If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you live in the EEA, you can contact your local data protection authority.

13. Deleting your account and data

Your App account

You can delete your Unity Coffee App account at any time:

  • In the App: go to Profile, tap Delete account and send the request.
  • By email: email us at hello@unitycoffee.uk from the address linked to your account and ask us to delete it.

We start processing deletion requests within 24 hours. When your account is deleted, we permanently remove your profile, rewards, preferences and device and notification tokens, and your purchase history is no longer linked to an account. This cannot be undone. We keep records of your past drink purchases, including the email address on them, for as long as the law requires (for example, for tax and accounting), as described in section 9.

Your Store account and order data

To delete your Store customer account or the personal information linked to your Store orders, email us at hello@unitycoffee.uk from the address you used on the Store. You can also make requests about the information Shopify processes through the Shopify Privacy Portal. We keep order records for as long as the law requires, for example for tax and accounting.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date. If the changes are significant, we will let you know in the App or by email.

15. Contact us

If you have any questions about this policy or want to exercise your rights, contact us:

Email: hello@unitycoffee.uk
Post: Unity Coffee Technologies Limited, 8 King Edward Street, Oxford OX1 4HL, United Kingdom