This policy explains how Indian Beans Ltd handles personal data about visitors to our website and users of our Service, and your rights under UK data protection law.
What we collect
- Account details: name, work email, phone number, company, job title and password (stored in hashed form).
- Billing details: billing contact and address, VAT number and payment history. Card details are handled by our payment provider; we never see or store full card numbers.
- Usage information: log data, IP address, browser and device type, and which features you use.
- Communications: emails, support requests and messages you send us.
- Website enquiries: information you send through our contact form or by email.
How we use it
- To provide the Service, manage your account and give support — to perform our contract with you.
- To bill you and keep accounting records — legal obligation.
- To keep the Service secure, prevent fraud and fix problems — legitimate interests.
- To understand how the Service is used and improve it — legitimate interests.
- To send product updates and offers to business contacts — legitimate interests, and you can opt out at any time.
Who we share it with
We share personal data only with suppliers who help us run the Service — for example hosting, payment processing, email delivery and customer support tools — under contracts that require them to protect it and use it only on our instructions. We may also share data if the law requires it, or with a buyer if our business is sold. We never sell personal data.
Payments & payment methods
Payments on Indian Beans are processed by Paddle.com Market Ltd (and its affiliates), which acts as the Merchant of Record for all transactions. Paddle collects your payment details, handles sales tax and VAT where applicable, and settles funds to Indian Beans. Paddle’s own privacy notice is at paddle.com/legal/privacy and governs its processing of your payment information.
When you choose a specific payment method inside Paddle’s checkout, additional data is shared with that payment provider so the charge can be completed:
- KakaoPay — if you pay with KakaoPay, your transaction identifier, the amount, the currency and your KakaoPay account identifier are shared with Kakao Pay Corp. and Kakao Corp. (both located in the Republic of Korea). Kakao Pay processes the authorisation and settlement under Korean financial-services law. Their privacy policy is available at kakaopay.com/privacy.
- Card networks (Visa, Mastercard, American Express, Discover) — receive your card number, expiry, CVV and billing postcode via Paddle to authorise the charge.
- PayPal, Alipay, iDEAL, Apple Pay, Google Pay, and other wallets — each receives the data needed to complete the transaction in that wallet, as set out in that provider’s own privacy notice.
We never see or store your full card number, KakaoPay account number, or wallet credentials. We only receive a tokenised reference, the amount, the method used, and the outcome (succeeded / declined / refunded) so we can keep an accurate billing record and reconcile refunds.
International transfers
Our main hosting is in the UK and EU. Where personal data is transferred outside the UK, we use safeguards approved under UK law, such as adequacy regulations or the UK International Data Transfer Agreement.
Specifically, payment data may be transferred to: Paddle’s facilities in Ireland and the United States; Kakao Pay Corp. in the Republic of Korea when KakaoPay is used (South Korea has been recognised by the European Commission as providing an adequate level of data protection, which the UK recognises for its own transfers); and other payment providers in their respective jurisdictions. Each transfer is covered by Paddle’s or the provider’s own binding safeguards.
How long we keep it
We keep account data while your account is open and for 30 days after it closes. We keep billing records for six years to meet UK tax law. Website enquiries that don’t lead to an account are deleted after 24 months.
Your rights
You have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Email legal@indianbeans.com and we’ll respond within one month.
You can also complain to the Information Commissioner’s Office at ico.org.uk, though we’d appreciate the chance to resolve things first.
Security
We protect personal data with encryption, access controls and regular backups. Details are on our Security page.
Cookies
See our Cookie Policy.
Changes
We will post any changes here and update the date at the top. If changes are significant we will tell account holders by email.