Privacy policy

Last updated: 2 November 2026

1. Who we are

This Privacy Policy explains how Zesto Limited, trading as Zesto Coffee ("Zesto", "we", "us", "our"), collects and uses your personal information when you visit www.zesto.coffee (the "Website"), buy from us, request a sample, or contact us.

Zesto Limited is the data controller of your personal information. We are a company registered in England and Wales (company number 16475896) with our registered office at 66 Paul Street, London, EC2A 4NA, United Kingdom.

If you have any questions about this policy or your personal information, email us at support@zesto.coffee.

2. The information we collect

Information you give us

Order details: your name, email address, phone number, delivery and billing addresses, the products you buy and any notes you add at checkout.

Subscription details: your chosen coffee, quantity and delivery frequency, and any changes you ask us to make.

Gift subscription details: the recipient's name and delivery address, and any gift message. Please only give us someone else's details if you're sure they are happy for you to do so.

Sample, office and wholesale requests: your name, role, business name, business website or social media, business address, company registration number, email, phone number and information about your coffee needs (such as monthly usage and equipment).

Messages: anything you tell us when you email us, message us on WhatsApp or social media, or use our contact or enquiry forms.

Mailing list: your email address if you sign up to hear from us.

Information collected automatically

Device and usage information: your IP address, browser and device type, approximate location (country or city, based on your IP address), pages you visit, and how you arrived at the Website. Some of this is collected using cookies (see Section 8).

Currency and region: we use your approximate location to show prices in your local currency.

Payment information Card and payment details are collected and processed directly by our payment providers. We do not see or store your full card number.

Information from others We may receive information from delivery companies (for example, delivery status), our payment providers (for example, confirmation of payment or fraud checks), and publicly available sources such as Companies House or a business's website when we verify sample requests.

We do not knowingly collect sensitive personal information (such as health information), and we ask that you don't send it to us.

3. How we use your information and our legal basis

Under UK data protection law, we must have a legal basis for using your personal information. We use it:

Purpose	Legal basis
To process, pay for and deliver your orders and subscriptions, and send order and delivery emails	Performance of our contract with you
To manage your subscription, including skipping, pausing, changing or cancelling it, and to tell you before each delivery	Performance of our contract with you
To review and verify sample requests and decide whether to approve them	Our legitimate interest in offering samples to genuine businesses and preventing misuse
To respond to enquiries, complaints and requests	Our legitimate interest in providing good customer service, or taking steps at your request before entering a contract
To manage wholesale and office customer relationships	Performance of our contract, or our legitimate interest in running our business
To send you marketing emails	Your consent (you can withdraw it at any time). For existing customers, we may send emails about similar products, which you can opt out of at any time
To run, secure and improve the Website, and to understand how it is used	Our legitimate interests, and your consent where non-essential cookies are used
To show you relevant advertising on other websites and social media	Your consent
To prevent fraud and misuse of our offers	Our legitimate interest in protecting our business and customers
To keep accounting and tax records and meet other legal obligations	Legal obligation

4. Marketing

We will only send you marketing emails if you've signed up, or if you've bought from us and didn't opt out at the time. Every marketing email includes an unsubscribe link, or you can email support@zesto.coffee. Unsubscribing won't stop service emails about your orders or subscription.

We do not sell your personal information.

5. Business contacts

If you contact us or request a sample on behalf of a business, we use your work contact details to deal with that request and, if we start working together, to manage our business relationship. We may also send you relevant business updates, which you can opt out of at any time.

6. Who we share your information with

We only share your information where needed for the purposes in Section 3, with:

Shopify, which hosts our online shop and processes orders.

Payment providers, such as Shopify Payments, PayPal, Shop Pay, Apple Pay and Google Pay, to take payments and check for fraud.

Delivery companies, such as Royal Mail, to deliver your order and send tracking updates.

Our subscription app, Shopify Subscriptions, which manages subscription billing and scheduling.

Email and marketing services, such as Klaviyo, to send order and marketing emails.

Analytics and advertising partners, such as Google (Google Analytics, Google Tag Manager and Google Ads), Meta (Facebook and Instagram) and TikTok, where you have agreed to cookies.

Review service, Judge.me, to collect and show product reviews.

hCaptcha, which protects our forms from spam.

Professional advisers, such as accountants and lawyers, where needed.

Authorities and regulators, if required by law, or to protect our rights, our customers or others.

A buyer of our business, if we sell or reorganise all or part of our business.

These providers may only use your information to provide their services to us and must keep it secure.

If you buy from us through Amazon, Amazon's own privacy notice applies to that purchase.

7. International transfers

Some of our service providers, including Shopify and some payment, email and advertising providers, may store or process your information outside the UK, for example in Canada, the European Economic Area or the United States. Where this happens, we make sure appropriate protections are in place, such as transfers to countries the UK considers to have adequate data protection, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

If we ship your order outside the UK, your delivery details will be shared with carriers and customs authorities in the destination country.

8. Cookies

Cookies are small files stored on your device when you visit a website. We use:

Essential cookies, which are needed for the Website to work, for example to keep items in your basket, process checkout, keep the Website secure and remember your currency. These don't need your consent.

Analytics cookies, which help us understand how visitors use the Website so we can improve it. We may use Google Analytics and Shopify analytics.

Advertising cookies and pixels, which help us measure our ads and show you relevant ads on other sites and social media. We may use the Meta Pixel, TikTok Pixel and Google Ads tags.

We only use analytics and advertising cookies if you agree to them through our cookie banner. You can change your choice at any time through our cookie banner or your browser settings. For more information about the cookies used by Shopify, see Shopify's cookie policy.

9. How long we keep your information

Orders and subscriptions: we keep order, payment and invoice records for 6 years after the end of the financial year they relate to, as required for tax and accounting.

Sample requests that aren't approved: up to 12 months, to prevent repeat misuse of the offer.

Enquiries and correspondence: up to 2 years after our last contact, unless they relate to an order or an ongoing relationship.

Wholesale and office customers: for as long as we work together and up to 6 years afterwards.

Marketing list: until you unsubscribe. We then keep your email address on a suppression list so we don't contact you again.

Analytics data: for the period set in the relevant tool, typically up to 14 months.

After these periods we securely delete or anonymise your information.

10. Keeping your information secure

We use reputable service providers and appropriate technical and organisational measures to protect your information, including secure, encrypted checkout. No system is completely secure, so please contact us immediately if you think your information has been put at risk.

11. Your rights

Under UK data protection law, you have the right to:

Access the personal information we hold about you.

Correct information that is inaccurate or incomplete.

Delete your information, in some circumstances.

Restrict how we use your information, in some circumstances.

Object to us using your information based on legitimate interests, and to direct marketing at any time.

Data portability: receive your information in a commonly used format, or ask us to send it to someone else, in some circumstances.

Withdraw consent at any time, where we rely on consent. This doesn't affect anything we did before you withdrew it.

To use any of these rights, email support@zesto.coffee. We may need to confirm your identity first. We will normally respond within one month and won't charge a fee in most cases.

Some rights are limited. For example, we must keep order records for tax purposes even if you ask us to delete them.

12. Children

Our Website and products are not intended for children, and we do not knowingly collect information from anyone under 18. If you think a child has given us their information, please contact us and we will delete it.

13. Complaints

If you are unhappy with how we have handled your information, please contact us first at support@zesto.coffee and we will try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113. If you live in the European Economic Area, you can also complain to your local data protection authority.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with the date it was last updated. If we make significant changes, we will tell customers with active subscriptions by email.

15. Contact us

Zesto Limited (trading as Zesto Coffee), 66 Paul Street, London, EC2A 4NA, United Kingdom. Company number 16475896. Email: support@zesto.coffee