Legal

Privacy policy

Last updated 6 October 2026

1. Who we are

Orocafe is a coffee brand from Uganda, and this website is operated by Discovery Cofftea UK Limited (company number 17351786, registered in England and Wales) (“Orocafe”, “we”, “us”), of Unit 14 Mill Stream Lodge, Uxbridge Road, Rickmansworth, WD3 8JQ, United Kingdom. We are the data controller for the personal information described below for orders and accounts on this website.

Private label enquiries made through the private label page are handled by our sister company in Uganda, Discovery Coftea Ltd, Kampala, Uganda, which acts as the data controller for those enquiries (see section 2).

You can reach us any time at info@orocafe.net.

2. What we collect

We only hold what you give us, or what your order needs:

Account details – name, email address, password (stored only as a hash) and, if you add them, phone number, bio and profile picture.
Delivery details – the address, city and postcode you enter at checkout, plus any notes you add for the courier.
Order history – what you ordered, when, what it cost and its status.
Preferences – your favourite blend and category, and your contact switches (order emails, texts, newsletter).
Reviews – anything you publish about a product, shown with the display name on your account.
Private label enquiries – if you ask about your own coffee brand on the private label page: your name, email, company, the country you will sell in and the project details you choose to share. We use them only to reply with a proposal, keep them as a record of the conversation, and delete them on request. These enquiries are received and handled by Discovery Coftea Ltd in Uganda.
Offers on your orders – which offer an order received and what it saved you. See Offers and announcements.
Usage counts – if you accept analytics cookies, we count how often each product is seen and clicked. These counts are per product, not per person, and are not tied to your account.

We do not collect payment card details on this site. Payments are taken by our payment provider, Stripe, which handles your card details under its own privacy policy. See the terms of use for how payment works today.

3. Why we use it

To fulfil your order – necessary to perform our contract with you.
To run your account – signing you in, keeping your cart, showing your order history.
To improve the menu – aggregate product counts, on the basis of your consent to analytics cookies.
To contact you – order updates as part of our contract, and marketing only where you have opted in.
To meet our obligations – keeping sales and tax records for the period the law requires.

We do not sell your data and we do not share it for anyone else's marketing. We share it only with:

Our fulfilment partner, Danum Global (Doncaster, UK), which stores our stock, packs your order and hands it to the carrier. It receives your name, delivery address and order contents.
Delivery carriers, such as Royal Mail, which receive your name, delivery address and (where needed for delivery) phone number or email.
Providers who host this site, take payments and send our email, on our instructions.
Discovery Coftea Ltd (Uganda), our sister company that supplies and exports our coffee, for private label enquiries and, where needed, to support your order or a support ticket.

If we are ever legally required to disclose information, we will do so only to the extent required.

If you buy Orocafe products through a marketplace such as Amazon or TikTok Shop, that marketplace is responsible for your account and payment. We receive only the order details needed to deliver it, and use them under this policy.

5. Transfers outside the UK

We are based in the UK, but our group also operates in Uganda, so some personal information (mainly private label enquiries, and support tickets or orders that our Uganda team helps with) may be accessed in or sent to Uganda, which does not have a UK adequacy decision. When this happens we protect it with appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum between our companies, and limit access to the staff who need it. You can ask us for details using the contact address below.

6. How long we keep it

Order records – kept for as long as UK tax and accounting rules require (currently six years), even if you close your account.
Account details – kept while your account is open. Closing it deactivates the account; your past orders remain on our sales records. If you ask us to delete your account, we will erase or anonymise your personal details within 30 days, other than what we must keep as sales records.
Support tickets – kept for 24 months after the ticket was last updated, unless they relate to an order we must keep records of.
Private label enquiries – kept for 24 months after our last contact with you, or until you ask us to delete them.
Analytics counts – daily totals per product, holding nothing that identifies a visitor.

7. Your rights

Under UK data protection law (the UK GDPR and Data Protection Act 2018) you can ask us to:

give you a copy of the data we hold about you;
correct anything that is wrong – most of it you can edit yourself under My account;
erase your data, or close your account, which you can start from My account → Personal data;
stop sending you marketing, which you can also switch off under Preferences;
restrict or object to how we use your data;
give you your data in a portable format where it applies.

Email info@orocafe.net from the address on your account and we will respond within one month. If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you are outside the UK, you may also complain to your local data protection authority, and Ugandan residents can contact the Personal Data Protection Office under Uganda's Data Protection and Privacy Act, 2019.

8. Security

Passwords are stored as salted hashes and never in readable form. Traffic to this site is encrypted in transit. Access to order data is limited to the staff who need it, and two-factor authentication is available on every account under My account → Two-factor authentication.

9. Support tickets

When you raise a support ticket from My account → Support, we store the subject you choose, the messages you and our team write, the order you attach if you attach one, and the times each message was sent.

Who can read it – a ticket is visible only to you and to our administrators. It is not published anywhere, it is not shared with other customers, and it cannot be opened from a link by anyone who is not signed in to your account.
Why we keep it – to answer you, and to keep a record of what was agreed about an order. That is our legitimate interest in running the shop.
How long – see How long we keep it. Ask us under Your rights if you want your tickets erased sooner.
Attachments – files cannot be uploaded to a ticket. If you email us photos or documents quoting your ticket reference, that email is held in our mailbox under the same terms as any other message you send us.
Please do not send – card numbers, passwords or any other credential. We will never ask for them on a ticket, and you should never need to give them to us.
One ticket a day – each account may open one new ticket in any 24 hours. Replies on a ticket you already have are unlimited, so nothing stops you adding to a conversation that is already open. The limit exists to keep the queue answerable, not to hold anyone up: if something is urgent and your allowance is used, reply on your open ticket or email us.

You can ask for a copy of your tickets or ask us to delete them under Your rights. Your terms of use cover what we can and cannot agree to over support.

10. Offers and announcements

When an order gets a discount, or we tell you about one, this is what we keep and why.

What an order records – each order keeps which offer it received, the offer's rules as they stood at checkout, and how much it saved on the items and on delivery. It is stored with the order, so a later change to the offer can never rewrite what you were charged. We keep it as part of the sales record, for the same period as the rest of the order.
Welcome offer – to know whether you still have welcome orders left, we count your paid orders that were not cancelled. It needs a confirmed email address, and a cancelled order gives its welcome slot back.
In-app announcements – when we announce an offer, every customer account gets a notification in the bell. It is about the shop, not about you, and is marked as news.
Offer emails – sent only if “Send me the Orocafe newsletter” is switched on under My account → Preferences. Switch it off there at any time and no further offer emails are sent. Order and account emails (confirmations, password resets) are separate and still arrive.
Who was told – we record which accounts were notified or emailed about each offer, and when, only so that nobody is sent the same announcement twice. If an offer that has ended runs again, you may hear about it once more.
Bestseller counts – the shop counts how many orders each product was in. Those are totals per product and do not identify anyone.
No profiling – offers are the same for every customer who meets the offer's conditions. We do not build a profile of you to price things differently, and we do not share offer data with anyone for their own marketing. Emails are sent through our email provider, on our instructions only.

11. Cookies

We use essential cookies to keep you signed in and keep your cart. We only set analytics cookies if you accept them, and you can change your choice at any time on our cookie policy page.

12. Disclaimer

This policy describes how we handle personal information; it is not legal advice and it does not form part of any contract beyond what the terms of use already set out.

Answers given over a support ticket are our best understanding at the time of writing and are specific to the order or question being discussed. They do not vary the terms of use, our published prices or your statutory rights, and nothing said on a ticket should be read as a commitment we have not made in writing elsewhere. Where a support answer and our published terms disagree, the terms apply.

Delivery estimates, stock figures and product information shown on this site are given in good faith and can change; we cannot be held to an estimate that circumstances outside our control have overtaken. Refunds are processed through our payment provider, so the time a refund takes to reach you is set by your bank rather than by us. Nothing in this policy limits your statutory consumer rights.

This site links to pages we do not control. We are not responsible for their content or their handling of your data – read their own policies before using them.

13. Contact us

Discovery Cofftea UK Limited, trading as Orocafe
Registered office: Unit 14 Mill Stream Lodge, Uxbridge Road, Rickmansworth, WD3 8JQ, United Kingdom
Email: info@orocafe.net

Private label enquiries: Discovery Coftea Ltd, Kampala, Uganda