Privacy Policy

Privacy and Cookie Policy

Last updated: 16 September 2026

​

Farwa Enterprises Ltd t/a Coffee28 respects your privacy and is committed to protecting your personal information. This Privacy and Cookie Policy explains how we collect, use, store and protect your information when you visit our website, contact us or use our services.

​

1. Who we are

Coffee28 Ltd is the data controller responsible for the personal information covered by this policy.

Company name: Farwa Enterprises Ltd t/a Coffee28
Company number: 17287147

Trading address: 1 Sovereign Place, Leeds, LS1 4SP
Email: coffee28leeds@gmail.com

​

In this policy, “Coffee28”, “we”, “us” and “our” refer to Farwa Enterprises Ltd t/a Coffee28.

​

2. Information we may collect

Depending on how you interact with us, we may collect:

• Your name

• Email address

• Telephone number

• Details provided through an enquiry or contact form

• Private event and catering requirements

• Booking or order information

• Dietary requirements or allergy information you choose to provide

• Marketing preferences

• Correspondence between you and Coffee28

• Technical information such as your IP address, browser, device and operating system

• Information about how you use our website

• Cookie and consent preferences

• Information you provide through social media or a third-party platform

• ​

Please do not provide unnecessary sensitive personal information through our website.

​

3. How we collect your information

We may collect information when you:

• Submit a website contact form

• Enquire about private events or catering

• Contact us by email, telephone or social media

• Make a booking or place an order

• Subscribe to marketing communications

• Enter a promotion or competition

• Leave a review or provide feedback

• Visit and interact with our website

• Accept or manage cookies

 

We may also receive limited information through service providers and third-party platforms used to support our website, bookings, orders, marketing or social media.

​

4. How we use your information

We may use your personal information to:

• Respond to questions and enquiries

• Manage event, catering and venue-hire enquiries

• Process bookings, orders and payments

• Provide the products or services you request

• Communicate with you about an existing enquiry, booking or order

• Manage customer service requests, feedback and complaints

• Send marketing communications where you have agreed to receive them

• Improve our website, menu, services and customer experience

• Measure website performance and understand visitor behaviour

• Maintain the security and proper operation of our website

• Prevent fraud, misuse and unlawful activity

• Comply with our legal, tax and regulatory obligations

• Establish, exercise or defend legal claims

 

We will not sell your personal information.

​

5. Our lawful bases

Under UK data-protection law, we must have a lawful reason for using your information. Depending on the circumstances, we may rely on:

• Contract: When processing is necessary to provide a product or service, manage a booking or take steps at your request before entering into an agreement.

• Legitimate interests: When necessary for the reasonable operation and improvement of our business, including responding to enquiries, providing customer service, securing our website and understanding how our services are used. We consider your rights and interests before relying on this basis.

• Consent: When you agree to receive marketing communications or allow optional analytics or advertising cookies. You may withdraw your consent at any time.

 

Legal obligation: When we must process or retain information to comply with applicable laws, tax requirements, regulatory duties or lawful requests.

​

6. Marketing communications

We will only send electronic marketing communications where we have a lawful basis to do so.

You may unsubscribe at any time by:

• Using the unsubscribe link included in an email

• Contacting us at [INSERT CONTACT EMAIL]

• Updating your preferences where that option is available

Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

 

7. Sharing your information

We may share personal information with trusted organisations that help us operate our business, including:

• Website hosting and technology providers, including Wix

• Email and communications providers

• Booking, ordering and payment providers

• Website analytics and marketing providers

• Professional advisers, including accountants, insurers and legal advisers

• Delivery, catering or event partners where necessary

• Government authorities, regulators or law-enforcement bodies where legally required

• A purchaser or successor if our business or assets are sold or reorganised

 

These organisations may only use your information for the agreed purpose and must protect it appropriately.

 

If you follow a link to Instagram, Google Maps, Uber Eats or another third-party service, that provider will process information under its own privacy policy.

 

8. International transfers

Some of our service providers may process information outside the United Kingdom.

 

Where personal information is transferred internationally, we will take appropriate steps to protect it. These may include using countries recognised as providing adequate protection or applying approved contractual safeguards.

​

You may contact us for further information about safeguards relating to your personal information.

 

9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

 

Retention periods may depend on:

• The nature of the information

• Whether an enquiry, booking or order remains active

• Our legal, accounting and tax obligations

• The need to resolve complaints or disputes

• The establishment or defence of legal claims

• Whether you continue to consent to marketing

 

General enquiries may normally be retained for up to 24 months after the last meaningful contact. Transactional and financial records may be retained for longer where required by law.

 

When information is no longer required, it will be securely deleted or anonymised.

 

10. How we protect your information

We use reasonable organisational and technical safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

 

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Please take care when deciding what information to send electronically.

 

11. Your data-protection rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your information

• Ask us to restrict how your information is used

• Object to certain processing

• Receive certain information in a portable format

• Withdraw consent at any time

• Object to direct marketing

• Complain to the Information Commissioner’s Office

Some rights are subject to legal conditions and exemptions.

 

To exercise your rights, contact us at coffee28leeds@gmail.com. We may need to verify your identity before responding.

 

12. Complaints

Please contact us first if you have concerns about how we handle your personal information, and we will try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

​

13. Cookies

Cookies are small text files placed on your device when you visit a website. They help websites operate, remember preferences, understand how visitors use the site and, where permitted, support advertising.

​

Our Wix website may use cookies and similar technologies provided by Wix and approved third-party services.

​

Strictly necessary cookies

​

These cookies are required for the website to operate properly. They may support:

• Website security

• Network management

• Fraud prevention

• Session management

• Cookie-consent settings

• Forms and essential website functions

 

These cookies do not normally require consent because the website cannot provide the requested service properly without them.

 

Functional cookies

Functional cookies remember choices or settings that improve your experience. Depending on their purpose, we may ask for your consent before activating them.

​

Analytics cookies

Analytics cookies help us understand:

• How visitors find our website

• Which pages are viewed

• How visitors move through the site

• Whether website features are working properly

• General website traffic and performance

 

These cookies will only be used where permitted by law and, where required, after you have provided consent.

 

Advertising and marketing cookies

Advertising cookies may be used to understand campaign performance, measure advertising or show more relevant content on other websites and platforms.

 

We will not activate non-essential advertising or marketing cookies before obtaining consent where consent is required.

 

Third-party cookies

Some website features may be supplied by third parties, including:

• Wix

• Google Maps

• Google Analytics, if enabled

• Instagram or other social-media platforms

• Embedded videos

• Booking, ordering or payment services

 

These providers may place cookies or collect information when you interact with their services. Their use of information is governed by their own privacy and cookie policies.

 

The exact cookies used may change when website features or integrations are updated. Current details should be displayed through the website’s cookie settings panel.

 

14. Managing cookies

When you first visit our website, you may be shown a cookie banner allowing you to:

• Accept optional cookies

• Reject optional cookies

• Choose specific cookie categories

• Review or change your preferences

You can also control or delete cookies through your browser settings.

 

Blocking certain cookies may affect how parts of the website operate. Rejecting optional cookies should not prevent you from accessing the main website content.

 

You can change or withdraw your cookie choices at any time through the Cookie Settings link on the website.

 

15. External websites

Our website may contain links to websites operated by other organisations. We are not responsible for their privacy practices, security or content.

​

Please review the privacy policy of any external website before providing personal information.

​

16. Children’s information

Our website is not intended to collect personal information directly from children. If you are under 16, please ask a parent or guardian to contact us on your behalf.

​

If we learn that we have collected a child’s personal information without appropriate authority, we will take reasonable steps to delete it.

 

17. Changes to this policy

We may update this Privacy and Cookie Policy to reflect changes to our website, services, suppliers or legal obligations.

The latest version will be published on this page with the revised “last updated” date.

 

18. Contact us

For questions about this policy or how we use your personal information, contact:

Coffee28
1 Sovereign Place
Leeds
LS1 4SP

Email: coffee28leeds@gmail.com

​