Your Data Rights
Last updated: 20 March 2026
At Coffee Palazzo, we believe you should have full control over your personal data. This page explains your rights and how to exercise them.
What Data Do We Hold?
- Account details — email address, display name, authentication method
- Taste profile — your flavour preferences, brew methods, and country
- Coffee journal — entries including ratings, notes and brew methods
- Subscription details — plan type, billing status (payment details are held by Stripe)
- Usage data — anonymised analytics about how you use the Service
Your Rights
Right to Access (Subject Access Request)
Request a complete copy of all personal data we hold in a machine-readable format within 30 days. Email hello@coffeepalazzo.com with the subject “Subject Access Request” from your account email.
Right to Data Portability
Request your data in a portable format. Premium subscribers can use the journal CSV export feature for immediate access.
Right to Rectification
Update your profile and journal directly in the app, or email hello@coffeepalazzo.com for anything else.
Right to Erasure (Right to Be Forgotten)
Request deletion of all your personal data. This will delete your account, remove your taste profile and journal, cancel any subscription, and remove analytics data. Use “Delete Account” in profile settings or email hello@coffeepalazzo.com. Data is deleted within 30 days. Financial records may be retained for up to 7 years as required by UK tax regulations.
Right to Restrict Processing
Ask us to limit how we use your data while resolving a concern. Email hello@coffeepalazzo.com.
Right to Object
Object to processing based on legitimate interest. We will stop unless we can demonstrate compelling legitimate grounds. Email hello@coffeepalazzo.com.
Right to Withdraw Consent
- Marketing emails: Click “Unsubscribe” in any email, or toggle off the weekly digest in profile settings
- Analytics cookies: Update cookie preferences via the footer link
- Account deletion: Delete your account via profile settings
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
For California Residents
Under the CCPA, you have the right to know what we’ve collected in the past 12 months, delete your data, opt out of sale (we do not sell data), and non-discrimination. Email hello@coffeepalazzo.com or use the self-service options above.
Verification
We verify your identity before processing requests, typically by confirming from your account email address.
Response Times
- Standard requests: Within 30 days
- Complex requests: Up to 60 days with notice
- Account deletion via app: Within 7 days
Complaints
- UK: Information Commissioner’s Office (ICO) — ico.org.uk — Tel: 0303 123 1113
- EU: Your local data protection supervisory authority
- California: The California Attorney General — oag.ca.gov
Contact
Do Your Bit Limited
Email: hello@coffeepalazzo.com
Website: coffeepalazzo.com