1. Introduction
Dripscoop is a coffee brewing accessories brand operated by ARTISTI COFFEE ROASTERS PTY LIMITED, an Australian registered company. This Privacy Policy explains how we collect, use, disclose, retain and manage personal information when you visit our website, place an order, contact our customer service team or otherwise interact with our business.
We handle personal information in accordance with applicable Australian privacy legislation, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable, together with relevant data protection legislation governing our activities in the United Kingdom and European markets, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR), where applicable.
By using our website, you acknowledge that you have had the opportunity to read this Privacy Policy. Where consent is required by law, we will request it separately and will not treat your general use of the website as consent to processing that requires a separate affirmative choice.
2. Data Controller
The entity responsible for determining the purposes and means of processing personal information through the Dripscoop website is:
Brand Name: Dripscoop
Data Controller and Company: ARTISTI COFFEE ROASTERS PTY LIMITED
Australian Company Number (ACN): 628 696 971
Australian Business Number (ABN): 45 628 696 971
Business Address: Unit 3/11 Craft Cl, Toormina NSW 2452, Australia
Email: coffee@dripscoop.com
Telephone: +61 2 6653 1182
For privacy enquiries, requests concerning personal information or questions about this Policy, please contact us using the details above.
3. Personal Information We Collect
Depending on how you interact with our website, we may collect the following categories of information.
3.1 Contact Information
When you place an order or contact us, we may collect your name, email address, telephone number, billing address, delivery address and other contact details you provide.
3.2 Order and Purchase Information
We may collect order references, purchased items, quantities, prices, order dates, delivery preferences, order status, refund records and related correspondence. We use this information to administer purchases, respond to enquiries and maintain business records.
3.3 Payment-Related Information
Payments made through our website are processed by Stripe. Depending on the payment method and transaction, payment-related information may include transaction references, payment status, billing details and other information required to process or review a transaction.
Card details and other payment information submitted through Stripe are handled in accordance with Stripe’s applicable privacy documentation and processing arrangements. We do not intentionally request that customers send complete payment card details through ordinary email correspondence.
3.4 Website and Device Information
When you visit our website, we may collect information such as your IP address, browser type, device information, pages visited, access times, referral information and relevant website activity records, subject to applicable law and your cookie preferences.
3.5 Customer Communications
If you contact us by email, telephone or another available contact method, we may retain the information contained in your enquiry and our response to manage your request, maintain service records and address subsequent questions.
4. How We Use Personal Information
We process personal information for the following purposes:
- To receive, review and administer customer orders.
- To arrange payment processing and maintain transaction records.
- To communicate order confirmations, dispatch updates and relevant service information.
- To respond to product enquiries and customer service requests.
- To manage returns, refunds and other order-related matters.
- To maintain accounting, tax and business records.
- To identify unusual transaction activity and address suspected misuse of our website or ordering process.
- To maintain website functionality and understand website usage where permitted.
- To send marketing communications where permitted by law and, where required, with your consent.
- To comply with applicable legal obligations and respond to lawful requests from competent authorities.
We do not use personal information for purposes incompatible with the purposes for which it was collected unless an applicable legal basis permits the further processing.
5. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases, depending on the circumstances:
Performance of a contract: Processing necessary to accept and administer your order, arrange payment, communicate about delivery and handle related requests.
Legal obligations: Processing necessary to comply with applicable accounting, tax, record-keeping and other legal requirements.
Legitimate interests: Processing necessary for our legitimate business interests, such as maintaining business records, responding to enquiries, managing website operations and addressing suspected misuse, provided that those interests do not override your applicable rights and freedoms.
Consent: Processing based on your consent where required, including relevant non-essential cookies and certain marketing communications. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Where Australian privacy legislation applies, we also handle personal information in accordance with the applicable Australian Privacy Principles and other relevant requirements.
6. Payment Processing by Stripe
Dripscoop uses Stripe as its payment processing provider to facilitate transactions made through our website.
When you make a purchase, relevant information may be provided to Stripe, including your name, billing details, transaction amount, order reference, payment method information and other details necessary to process the transaction.
Stripe processes payment-related information in accordance with its applicable contractual arrangements, privacy documentation and legal obligations. Depending on the activity concerned, Stripe may act as a data processor on our behalf or as an independent data controller for certain processing activities that it determines. Stripe may also process information to meet its own legal, regulatory, transaction review and service administration requirements.
Stripe’s handling of personal information is governed by its applicable privacy terms.
We use the information made available to us in connection with a transaction to administer purchases, reconcile payments, manage refunds and maintain relevant business records. We do not request a separate Stripe customer account as a general condition of purchasing products through our website.
7. Disclosure of Personal Information
We may disclose relevant personal information to the following categories of recipients where necessary and permitted by law:
- Stripe: To process payments and administer relevant transaction-related activities.
- Website and hosting providers: To maintain the website and support its operation.
- Delivery and fulfilment providers: To arrange the delivery of purchased products and provide relevant delivery updates.
- Professional advisers and accounting providers: To assist with business administration, accounting and legal obligations.
- Government bodies, regulators and law enforcement authorities: Where disclosure is required or permitted by applicable law.
- Other relevant service providers: Where their involvement is necessary for an authorised business purpose and the disclosure is permitted by law.
We do not disclose personal information indiscriminately. The information shared will be limited to what is reasonably necessary for the relevant purpose, subject to applicable legal requirements.
8. International Data Transfers
As ARTISTI COFFEE ROASTERS PTY LIMITED is based in Australia and our website serves customers in European markets, personal information may be processed or accessed in Australia and other countries where our service providers operate.
Where the GDPR or UK GDPR applies, international transfers of personal information will be carried out using an applicable transfer mechanism where required, such as an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
Further information about a relevant transfer mechanism may be requested by contacting us at coffee@dripscoop.com, subject to applicable legal restrictions and confidentiality requirements.
9. Data Retention Periods
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, taking account of applicable legal obligations, accounting requirements, the handling of enquiries and the establishment or defence of legal claims.
Our standard retention periods are as follows:
Order and accounting records: Up to seven years after the relevant transaction or completion of the order, where required or justified by applicable accounting, tax, record-keeping or legal requirements.
Customer service correspondence: Generally up to 24 months after the enquiry has been resolved, unless a longer period is necessary to manage an ongoing matter or comply with a legal obligation.
Payment and transaction records: For the period necessary to administer the transaction and meet applicable accounting, tax, regulatory and legal requirements. Records maintained by Stripe are also subject to Stripe’s own retention practices and legal obligations.
Website access and operational logs: Generally up to 12 months, unless a longer period is reasonably necessary to investigate an incident, address misuse or comply with a legal requirement.
Marketing preferences and consent records: Until consent is withdrawn or the relevant processing is otherwise discontinued, with records retained for a reasonable period where necessary to document consent, honour opt-out requests or comply with applicable law.
Cookie information: For the lifetime of the relevant cookie or similar technology, as described in our cookie settings. Cookie consent preferences are generally retained for up to six months before being reviewed or requested again.
These periods are applied according to the type of information and the reason for retaining it. Where information is no longer required and no legal retention obligation applies, we will take reasonable steps to delete it or render it non-identifiable.
Stripe may retain transaction-related information in accordance with its own applicable retention policies. Our retention periods do not override independent legal obligations that apply to Stripe or other service providers.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support essential website functions, remember relevant preferences, maintain shopping basket functionality and understand website usage where permitted.
Essential cookies may be used where necessary to provide the service requested by the visitor. Non-essential cookies, including relevant analytics or marketing cookies, will be activated only after the visitor has given the required consent through the cookie banner or preference settings.
Stripe may use cookies or similar technologies in connection with payment processing and related services. Where such technologies require consent under applicable law, they will be subject to the relevant consent requirements.
Visitors may change or withdraw their cookie preferences through the website’s available cookie settings. Disabling certain essential cookies may affect some website functions.
Cookie names, purposes and expiry periods should be reviewed in the website’s cookie settings or a separate Cookie Policy so that the published information accurately reflects the technologies in use.
11. Data Protection and Access Controls
We take reasonable organisational and technical measures appropriate to the nature of the personal information we handle to protect it against unauthorised access, disclosure, alteration, loss or misuse.
Access to personal information is limited to persons and service providers who require it for legitimate business purposes. We also expect relevant service providers to handle information in accordance with applicable contractual obligations and data protection requirements.
No method of transmitting or storing information can be regarded as entirely free from risk. Where a personal data breach occurs, we will assess the incident and take the steps required by applicable law, including notification to relevant authorities or affected individuals where required.
12. Your Privacy Rights
Depending on your location and the applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request erasure of personal information where the relevant legal conditions are met.
- Request restriction of certain processing activities.
- Object to processing based on legitimate interests in circumstances provided by law.
- Request a copy of certain information in a portable format where applicable.
- Withdraw consent where processing is based on consent.
- Opt out of direct marketing communications.
- Lodge a complaint with the relevant data protection or privacy regulator.
These rights are subject to applicable legal conditions and exceptions. We may need to verify your identity before responding to a request and may retain certain records where required by law or where another lawful basis permits retention.
To exercise your rights, contact us at coffee@dripscoop.com and describe your request. We will review and respond within the period required by the applicable law.
13. Marketing Communications
We may send product updates or promotional communications where permitted by applicable law and, where required, after obtaining your consent.
You may opt out of marketing emails by using the unsubscribe option included in the relevant message or by contacting coffee@dripscoop.com.
Opting out of marketing communications does not prevent us from sending necessary messages concerning an existing order, payment, delivery, customer service request or legal obligation.
14. Children’s Privacy
Our website is intended for general retail customers and is not directed at children. We do not knowingly seek to collect personal information from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take any steps required by law.
15. Third-Party Websites and Services
Our website may contain links to external websites or services. Those websites may have their own privacy policies and information-handling practices.
We encourage visitors to review the relevant privacy information before providing personal details to an external service. This Policy applies to personal information handled by Dripscoop and does not replace the privacy terms of independent service providers.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business practices, website functions or applicable legal requirements.
The latest version will be published on our website with its updated date. Where applicable law requires specific notice or consent for a material change in processing, we will take the steps required by law.