← Return to Home

Privacy Policy

Last updated: 20 March 2026

1. Who We Are

This website (https://carafe.uk) is operated by Tabaconda LLC. We are the data controller for the purposes of UK GDPR.

Contact: [email protected] · Contact Us

2. What Data We Collect

We collect minimal data to operate this site effectively:

• Advertising data — If you consent to advertising cookies, Google AdSense may collect data to serve personalised advertisements. Without consent, only non-personalised (contextual) ads are shown.
• Affiliate tracking — When you click affiliate links (Amazon UK), those third parties may set cookies on their own domains per their own privacy policies.

We do not use any analytics services. No page-view tracking, user behaviour analysis, or device fingerprinting is performed by this site.

3. Cookies

See our Cookie Policy for detailed information about what cookies we use and how to manage them.

In summary:

• Essential cookies: Cookie consent preference (first-party, 1 year).
• Advertising cookies (optional): Google AdSense cookies for personalised advertising. Only set with your explicit consent.

4. Legal Basis for Processing

• Consent — For advertising cookies (PECR/UK GDPR Art. 6(1)(a)).
• Legitimate interest — For non-personalised advertising that does not use cookies or personal data (UK GDPR Art. 6(1)(f)).

5. Third-Party Services

Service	Purpose	Privacy Policy
Google AdSense	Display advertising	policies.google.com/privacy
Amazon UK Associates	Affiliate product links	Amazon Privacy Notice
Cloudflare	CDN and security	cloudflare.com/privacypolicy

6. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access — Request a copy of data we hold about you.
• Rectification — Request correction of inaccurate data.
• Erasure — Request deletion of your data.
• Restriction — Request we limit processing of your data.
• Object — Object to processing based on legitimate interest.
• Withdraw consent — Withdraw cookie consent at any time by clearing your browser cookies or using our cookie settings.

To exercise any of these rights, contact us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Data Retention

We do not store personal data on our servers. Cookie consent preferences are stored locally in your browser for 365 days. Third-party services retain data according to their own policies (linked above).

8. International Transfers

Tabaconda LLC is based in the United States. Where data is processed by third parties outside the UK, appropriate safeguards are in place (e.g., Standard Contractual Clauses).

9. Additional US Privacy Disclosures

If you are a resident of the United States, these additional disclosures apply to you under applicable state privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), and similar state laws.

Categories of Personal Information

We may collect the following categories of personal information through cookies and third-party advertising services (only with your consent):

• Identifiers — Online identifiers such as cookie IDs and device identifiers, collected by Google AdSense when you consent to advertising cookies.
• Internet activity — Browsing history and interactions with advertisements, collected by advertising cookies when consent is granted.

We do not collect names, email addresses, physical addresses, phone numbers, or financial information.

Sale or Sharing of Personal Information

When you consent to advertising cookies, Google AdSense may use your data for personalised advertising, which may constitute "sharing" under the CCPA/CPRA. You can opt out by clicking "Essential Only" on our consent banner or by visiting our Cookie Policy to manage your preferences.

Global Privacy Control (GPC)

We honour the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat this as a request to opt out of the sale or sharing of your personal information. Advertising cookies will not be enabled, and only non-personalised (contextual) ads will be shown.

Do Not Track (DNT)

We do not use analytics tracking. However, our third-party advertising partners may respond to DNT signals according to their own policies. We honour GPC as the legally recognised opt-out mechanism.

Your US Privacy Rights

Depending on your state of residence, you may have the right to:

• Know — Request what personal information we have collected about you.
• Delete — Request deletion of your personal information.
• Opt-out — Opt out of the sale or sharing of your personal information.
• Non-discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us or use the cookie consent controls on this site. You may also manage your preferences from our Cookie Policy page.

10. Children's Privacy

This site is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision.