Last updated: 26 October 2026
This policy explains what personal information CUPP collects through this website, why, how long we keep it and what your rights are. We keep it short and in plain English. If anything isn’t clear, email [email protected].
Who we are
This website is run by CUPP Limited, a company registered in England and Wales (company number 07874775). Our registered office is Unit 9 Oakwood Drive, Emersons Green, Bristol BS16 7LB. CUPP Limited is the “controller” of the personal information described here, which means we decide how it is used and are responsible for looking after it.
Most CUPP stores are run by independent franchise partners under the CUPP brand. When you visit a store, the franchise partner running it is responsible for any information it collects there (for example CCTV or in-store payments).
What we collect and why
- Online shop orders: your name, delivery and billing address, email, phone number (optional), what you ordered and your order history. We use this to take payment, send your order, keep you updated and handle returns. Legal basis: to perform our contract with you, and to meet tax and accounting law.
- Your account: if you create an account, your login details and saved addresses, so you can order again and see past orders. Passwords are stored in encrypted form; we can’t see them. Legal basis: contract.
- Messages you send us: the name, email, store and message you enter in our contact form or email to us, so we can reply. Legal basis: our legitimate interest in answering you.
- Franchise enquiries: your name, email, phone, the location you’re interested in, when you’d like to open and your business experience, so our franchise team can contact you and assess the opportunity. Legal basis: steps you ask us to take before entering a contract, and our legitimate interests.
- Franchise partners’ warehouse accounts: the store, contact and order details needed to supply stock to franchise stores. Legal basis: contract.
- How the website is used: only if you accept analytics cookies, we collect information such as the pages you visit, how you arrived at the site and the type of device you use, through Google Analytics and our shop’s order-source tracking. This helps us improve the site. Legal basis: your consent, which you can withdraw at any time using “Cookie settings” at the bottom of every page.
- Security: our hosting provider keeps short-term technical logs (such as IP addresses) to protect the site from attacks and fraud. Legal basis: our legitimate interest in keeping the site secure.
We don’t ask for sensitive information (such as health or criminal records) on this website. Please don’t include it in messages. Card details are entered directly with our payment provider, Stripe, and never reach or are stored by us.
The CUPP app and loyalty scheme are run separately and have their own privacy information, which you can find in the app.
Marketing
We only send marketing emails if you’ve agreed to receive them. Every marketing email has an unsubscribe link, or you can email us to stop them at any time. We never sell your information.
Who we share it with
We only share what each organisation needs, and they may only use it to provide their service to us:
- Kinsta, which hosts this website (on servers in London).
- Stripe, which processes card payments and checks for fraud.
- Google, which provides our email and, if you accept analytics cookies, Google Analytics.
- Royal Mail, which delivers online shop orders.
- Our gift card partner, if you buy a CUPP gift card on their site.
- The franchise partner running a store, if your message is about that store, so they can help.
- Our professional advisers (such as accountants and lawyers), and the authorities where the law requires it.
- A buyer of our business, if CUPP or its assets are ever sold.
Some of these providers (such as Stripe and Google) may process information outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations (including the UK–US data bridge) or the UK’s approved contract clauses.
The store maps on our site are loaded from OpenStreetMap, and our Instagram photos from Instagram. Like any website, they receive your IP address so they can send the images to your browser.
How long we keep it
- Orders and invoices: 6 years after the end of the financial year, as UK tax law requires.
- Accounts: until you ask us to close your account (order records are then kept as above).
- Messages and franchise enquiries: up to 2 years after our last contact, unless they become part of a franchise agreement.
- Google Analytics data: 14 months.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to have it moved to another organisation, and to withdraw any consent you’ve given. Some rights have limits; for example, we must keep order records for tax purposes. To make a request, email [email protected]. There’s no charge, and we’ll reply within one month. We may need to confirm who you are first.
If you’re unhappy with how we’ve handled your information, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Our online shop and accounts are for adults. We don’t knowingly collect information from children under 13 through this website.
Cookies
See our cookie policy for the cookies we use. You can change your choice at any time with “Cookie settings” at the bottom of every page.
Changes
If we change this policy, we’ll update it here and change the date at the top. For significant changes, we’ll let account holders know by email.