Who We Are

This website (eros-cafe.com) is operated by Eros Cafe Group, with our head office at 3 Hardman Street, Manchester M3 3HF, United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

Information We Collect

We only collect information that is necessary to provide our products and services. The data we may collect includes:

• Identity Data: first name, last name, title.
• Contact Data: billing address, delivery address, email address, telephone numbers.
• Transaction Data: details about payments, products and services you have purchased.
• Technical Data: IP address, browser type and version, device information, time-zone setting and location.
• Usage Data: information about how you use our website and services.
• Marketing Data: your preferences in receiving marketing from us and your communication preferences.

We do not collect any sensitive personal data such as health, religion, ethnic origin, or political opinions.

How We Use Your Information

We use your personal data only where we have a lawful basis to do so. The most common purposes are:

• To fulfil orders — processing purchases, deliveries and customer service.
• To manage our relationship — replying to enquiries, sending updates about your order or account.
• To improve our services — understanding how the website is used to enhance our offering.
• To send marketing communications — only with your explicit consent, and you can unsubscribe at any time.
• To comply with legal obligations — such as accounting, tax and regulatory requirements.

Cookies

Our website uses cookies and similar technologies to ensure proper functioning, analyse traffic and personalise your experience. You can control cookie preferences through our cookie banner or your browser settings at any time.

• Essential cookies — required for the website to function (e.g. cart, checkout).
• Analytics cookies — help us understand how visitors interact with our site.
• Marketing cookies — used to deliver relevant content and offers.

Sharing Your Information

We never sell your personal data. We only share it with carefully selected third parties who help us operate our business, and only to the extent necessary:

• Payment processors (e.g. Stripe, PayPal) to handle secure transactions.
• Delivery partners to fulfil your orders.
• Hosting and IT service providers to maintain the website.
• Email service providers for transactional and marketing communications.
• Government and regulatory bodies where required by law.

All third parties are required to respect the security of your personal data and process it only for specified purposes.

International Transfers

As a brand operating across the United Kingdom, Libya, Egypt and other regions, your data may be transferred outside the UK to our partner locations. Whenever this occurs, we ensure appropriate safeguards are in place in compliance with UK GDPR, including standard contractual clauses or equivalent protections.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

For most customer records, this means up to 6 years after your last interaction with us, in accordance with UK statutory periods.

Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data, where applicable.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — including to direct marketing at any time.
• Right to withdraw consent — at any time, where processing is based on consent.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. This includes encrypted connections (HTTPS), secure payment gateways and access controls.

While we strive to protect your data, no transmission over the internet can be guaranteed as completely secure.

Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will take steps to delete it promptly.

Complaints

If you have any concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page with the “Last updated” date.