Legal
Privacy Policy
Last updated 15 September 2026
Who we are
This policy explains how Kava Local Coffee Ltd ("Kava", "we", "us") handles personal data when you use kavalocalcoffee.co.uk, visit our cafés, or place an order ahead online.
Controllers: Kava Local Coffee Ltd
Email: info@kavalocalcoffee.co.uk
- Waterloo: Unit G15, The Sidings, Waterloo Station, London, SE1 7BH
- Great Portland Street: 161 Great Portland Street, London, W1W 5PB
What we collect
Depending on how you use our services, we may process:
- Order details - your name, phone number or email, café location, pickup time, items ordered and payment status.
- Payment data - card payments are handled by Square. We do not store full card numbers on our servers.
- Technical data - IP address, browser type, device and pages viewed, when you allow analytics cookies.
- Messages you send us - if you email or message us on Instagram.
Why we use your data
- To prepare and hand over your order (contract / steps at your request).
- To take payment and prevent fraud (legitimate interests and legal obligations).
- To reply when you contact us (legitimate interests).
- To understand how the website is used, if you consent to analytics (consent).
Payments (Square)
Online payments are processed by Square. Square acts as an independent payment provider and processes card details under its own terms and privacy notice. We receive confirmation of payment, an order reference and the guest details you provide for collection.
Cookies and analytics
We use essential cookies for the site to work (including remembering your cookie choice and supporting checkout). Optional analytics cookies load only if you accept them.
If you consent, we use Google Analytics 4 (measurement ID G-XDXKG0DK9Q) to understand aggregated site usage - for example which pages are visited and roughly how busy the site is. We configure it with IP anonymisation and without Google advertising signals. Analytics does not load until you accept analytics cookies. You can change or withdraw that choice anytime via the cookie banner controls (see our Cookie Policy).
Google acts as a processor for this analytics data. Google's privacy notice is at policies.google.com/privacy.
Sharing
We do not sell your personal data. We share it only when needed with:
- Square - payments and order processing.
- Google - analytics, only with your consent.
- Hosting and infrastructure providers that keep the website online.
- Professional advisers or authorities when the law requires it.
How long we keep data
Order and payment records are kept as long as needed for accounting, disputes and legal requirements (typically up to six years for transaction records in the UK). Analytics data is retained according to our Google Analytics settings. Cookie preferences stay in your browser until you clear them or change them.
Your rights
Under UK GDPR you can ask us to:
- access your personal data
- correct inaccurate data
- erase data in certain cases
- restrict or object to certain processing
- receive data you provided in a portable format
- withdraw consent where we rely on it (for example analytics)
Email info@kavalocalcoffee.co.uk. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children
Our online ordering is aimed at adults. We do not knowingly collect data from children for marketing.
Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do.