Privacy Policy

Last Updated: 15 January 2026
Effective Date: 15 January 2026

This Privacy Policy explains how SYMVA COFFEE LIMITED ("we", "us", "our"), a company registered in England and Wales under Company Registration Number 14238765, with its registered office at 164 Church Road, Hove, BN3 2DL, England, collects, uses, stores and protects your personal data when you visit our website or submit information through our forms. We are committed to handling your data responsibly and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable European data protection legislation.

For questions regarding this policy or to exercise your data rights, contact us at: [email protected]

1 What Data We Collect

We collect and process the following categories of personal data when you interact with our website and services:

  • Full name - provided when you complete our investment inquiry form or contact us directly.
  • Email address - provided through forms for the purpose of responding to your inquiry.
  • Phone number - provided through forms so our team can contact you regarding your investment interest.
  • IP address - collected automatically when you access our website, used for security and analytics.
  • Browser type and version - collected automatically to optimise website performance and compatibility.
  • Device type and operating system - collected to ensure our site displays correctly across all devices.
  • Cookies and tracking identifiers - used for site functionality, analytics and advertising purposes (detailed in the cookie sections below).
  • Usage data - pages visited, time on site, click paths, scroll depth and navigation patterns collected through analytics tools.
  • Form submission content - the text of messages you provide through our investment inquiry form.
  • Conversion events - records of specific actions you take on our site (such as form submissions) used to measure the effectiveness of our advertising campaigns.

2 Legal Basis for Processing (GDPR Article 6)

We process your personal data only where we have a lawful basis to do so. The specific legal bases we rely on are:

Contact form data (name, email, phone, message)

Legal basis: Consent (Article 6.1.a) - you actively submit the form and tick the consent checkbox. Additionally, where a service relationship exists or is being established, Performance of a contract (Article 6.1.b) may apply.

Analytics data (usage patterns, page views, device information)

Legal basis: Consent (Article 6.1.a) - analytics cookies are activated only after you accept them through our cookie consent mechanism.

Marketing and remarketing data (advertising cookies, conversion events)

Legal basis: Consent (Article 6.1.a) - marketing cookies are activated only after you explicitly accept them. No marketing tracking occurs without your prior consent.

Security and fraud prevention (IP logging, server access logs)

Legal basis: Legitimate interest (Article 6.1.f) - we have a legitimate interest in maintaining the security and integrity of our website and protecting against malicious activity.

3 Cookie Categories

Our website uses cookies divided into three distinct categories. Each category serves a different purpose and has different consent requirements:

Essential Cookies

Always Active

Purpose: Core site functionality, security, session management and storing your cookie consent preferences. These cookies are strictly necessary for the website to operate and cannot be disabled.

Examples: session_id, csrf_token, cookie_consent_status

Consent required: No. These cookies are activated automatically as they are essential for basic site operation.

Retention: Session duration or up to 12 months for preference storage.

Analytics Cookies

Consent Required

Purpose: Measuring traffic, user behaviour and site performance. This data helps us understand how visitors interact with our website so we can improve the user experience.

Tools: Google Analytics 4

Examples: _ga, _ga_XXXXXXX, _gid, _gat

Consent required: Yes. These cookies are activated only after you accept analytics cookies through our consent banner or preferences panel.

Retention: Up to 14 months.

Marketing / Advertising Cookies

Consent Required

Purpose: Remarketing, personalised ad delivery and conversion tracking. These cookies allow us to measure the effectiveness of our advertising campaigns and to show relevant advertisements to users who have previously visited our website.

Consent required: Yes. Marketing cookies are activated only after you explicitly accept them through our consent mechanism.

Retention: Up to 540 days (Google Ads default).

4 Marketing Cookies: Detailed Disclosures

Third-party ad serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

Advertising partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

Remarketing

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

Tracking technologies

We use the following tracking technologies on this website:

  • - Cookies (first-party and third-party)
  • - Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • - Device identifiers (browser fingerprint, IP address)
  • - Conversion event tags

Advertising measurement

We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

Technologies in use

Advertising and analytics technologies active on this site:

  • - Google Ads (gtag.js / Google Tag Manager)
  • - Google Analytics 4
  • - Google Remarketing Tag
  • - Meta Pixel (Facebook / Instagram)

Opt-out from personalised advertising

You may opt out of personalised advertising at any time:

Opting out does not remove ads entirely. You will continue to see non-personalised advertisements.

Cookie preference management

You can manage your cookie preferences at any time by clicking the "Manage cookie preferences" link available in the footer of every page on this website. This opens a panel where you can accept or reject each cookie category independently.

5 Consent Requirements

Our cookie consent banner offers three clear options: "Accept All", "Reject Non-Essential", and "Manage Preferences". No analytics or marketing cookies are activated until you click "Accept All" or selectively enable them through the preferences panel. Your choice is stored in your browser's localStorage for 12 months. The banner can be dismissed without accepting, in which case only essential cookies remain active.

By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

EEA / UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

6 Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

Google LLC

Cookie identifiers, conversion events, anonymised behavioural data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

Pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

7 Lead Forms and Contact Requests

When you submit a contact form, request information, or register interest in our coffee equipment investment services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: Consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at [email protected].

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

8 Google Services and Advertising

This website uses the following Google services:

Google Analytics 4

Collects anonymised usage data, device info, and behavioural signals. IP anonymisation is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

Records when a user completes a defined action (form submission, call) after clicking one of our ads. This data is used solely for measuring ad campaign performance.

Google Remarketing

Allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

Google Tag Manager

Deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

9 Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

  • - Page views and time on site
  • - Specific conversion events (form submissions)
  • - Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

10 Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

11 Landing Page Integrity Statement

The content of this website accurately represents the services described. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

12 Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.

13 International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

14 Your Rights (GDPR Articles 15-22)

If you are located in the EEA or UK, you have the following rights regarding your personal data:

Access (Art. 15)

Request a copy of data we hold about you.

Rectification (Art. 16)

Correct inaccurate or incomplete data.

Erasure (Art. 17)

Request deletion ("right to be forgotten").

Restriction (Art. 18)

Limit how we process your data.

Portability (Art. 20)

Receive your data in a structured, machine-readable format.

Objection (Art. 21)

Object to processing based on legitimate interest.

Withdraw Consent (Art. 7.3)

Revoke consent at any time without penalty.

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

15 Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. Specific retention periods per data category are:

Data Category Retention Period
Contact form submissions 2 years
Analytics data (GA4) 14 months
Marketing cookies (Google Ads) Up to 540 days
Email communications Duration of relationship + 1 year
Server logs 90 days
Cookie consent records 3 years (audit requirement)

16 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When material changes are made, we will notify users via a homepage banner a minimum of 14 days before the changes take effect.

We recommend reviewing this page periodically to stay informed about how we protect your data. The "Last Updated" date at the top of this page indicates when the most recent revision was published.

17 Contact Information

Data Controller: SYMVA COFFEE LIMITED

Registered Address: 164 Church Road, Hove, BN3 2DL, England

Company Registration Number: 14238765

VAT Number: GB 412 7849 21

Email: [email protected]

Phone: +44 1273 964 217