HomePodcast EventsAbout Join Community →
Legal

Privacy Policy

Last updated: 28 April 2026. This policy explains how Shopbrew collects, uses, and protects your personal data.

Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use It
  4. Cookies
  5. Email Communications
  6. Third-Party Tools
  7. Data Sharing
  8. Your Rights
  9. Data Retention
  10. Security
  11. Children's Privacy
  12. Policy Changes
  13. Contact Us

1. Who We Are

Shopbrew ("we", "us", "our") operates the website shopbrew.co and the Shopbrew community platform. We are the data controller for personal data collected through this website.

If you have questions about this policy or our data practices, please contact us at privacy@shopbrew.co.

2. Data We Collect

Information you provide directly

  • Account data: name, email address, and password when you register for the community
  • Profile data: job title, company name, website URL, and bio if you choose to provide them
  • Communications: messages you send via our contact form, support emails, or community posts
  • Event registrations: name and email when you RSVP to events
  • Newsletter subscriptions: email address when you subscribe to our podcast digest or community updates

Information collected automatically

  • Usage data: pages visited, time on site, links clicked, referring URLs
  • Device data: browser type, operating system, screen resolution, IP address
  • Cookies and tracking pixels (see Section 4)

3. How We Use Your Data

We use your data to:

  • Operate and improve the Shopbrew website and community platform
  • Send you emails you have subscribed to (podcast digests, event invites, community updates)
  • Process event registrations and communicate event logistics
  • Respond to enquiries submitted via the contact form
  • Analyse aggregate usage patterns to improve our content and products
  • Comply with legal obligations

We do not sell your personal data. We do not use your data for automated decision-making or profiling in ways that have legal effects on you.

Legal bases for processing (GDPR): contract performance (community account), legitimate interests (analytics, security), consent (marketing emails), and legal obligation.

4. Cookies

We use the following types of cookies:

  • Essential cookies: Required for the website to function (session management, security). These cannot be disabled.
  • Analytics cookies: We use Google Analytics 4 (GA4) to understand traffic patterns. Data is anonymised. You can opt out via your browser settings or the Google Analytics opt-out browser add-on.
  • Marketing cookies: If you consent, we may use pixels from Meta (Facebook) and LinkedIn to measure the effectiveness of our advertising. You can opt out at any time via the cookie preference centre.

You can manage cookie preferences by clicking "Cookie Settings" in the footer, or via your browser's built-in privacy settings.

5. Email Communications

We send the following types of emails:

  • Transactional: Account confirmation, event registration confirmation, password resets. These are required for service delivery and cannot be unsubscribed from.
  • Community updates: Weekly roundups, new resources, community highlights. Unsubscribe at any time via the link in any email.
  • Podcast digest: New episode notifications with show notes. Opt out at any time.
  • Event announcements: Upcoming event invites and early-access notifications. Opt out at any time.

We use Klaviyo as our email service provider. Your email data is stored on Klaviyo's servers in accordance with their privacy policy.

6. Third-Party Tools

We use the following third-party tools which may process your data:

Where these providers are based outside the UK/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

7. Data Sharing

We do not sell, rent, or trade your personal data. We only share data with:

  • Service providers listed in Section 6, under data processing agreements
  • Law enforcement or regulatory bodies when legally required to do so
  • A successor entity in the event of a business sale or merger (you will be notified in advance)

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restriction: Ask us to restrict processing in certain circumstances
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests or for marketing
  • Rights related to automated decision-making: Not to be subject to solely automated decisions that significantly affect you

To exercise any of these rights, email privacy@shopbrew.co. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records, which we retain for 7 years under UK tax law).

10. Security

We implement appropriate technical and organisational measures to protect your data, including TLS/SSL encryption in transit, encrypted storage, access controls, and regular security reviews. However, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the ICO as required by law.

11. Children's Privacy

Shopbrew is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact privacy@shopbrew.co and we will delete it promptly.

12. Policy Changes

We may update this policy from time to time. When we make material changes, we will notify you via email (if you are a registered member) and by posting a notice on this page with the updated date. Continued use of Shopbrew after notification constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights:

We aim to respond to all privacy enquiries within 30 days.