MMI-ELR Group (Maritime & Mercantile International LLC and Emirates Leisure Retail) ("MMI-ELR Group", "ELR", "We", "Us") is a controller of your personal data. We respect your data and your privacy is important to us. This Privacy Notice explains what personal data we collect and how it is used. This notice also explains what rights you have over your personal data and how you can use those rights. More information about your rights and how to exercise these is set out in the “Your Rights” section of this notice.
An overview of how we use your data is here. ELR’s registered office is Level 5, Emirates Holiday Building, Sheikh Zayed Road, 122199, Dubai, UAE.
Summary of how we use your data and your rights information we collect from you, Information we receive from third parties, How we use information and the legal basis data sharing international transfers, Cookies and similar technologies data retention, Your rights, Contact details, Which Costa entity is the controller?
We use your data to provide and improve our products and services, including for marketing, research, feedback and enquiries, and for safety and security purposes. We also use your data when you enter competitions or awards that we organise. We will use your data to comply with laws and regulations. We use your data to prevent and detect crime, such as fraud.
When you give consent, you are able to withdraw that consent at any time, for instance by emailing support@costacoffee.ae. You can also email support@costacoffee.ae to exercise any other data rights, such as obtaining a copy of your data, correcting, deleting or restricting how we use your data. Please see “Your rights” for more information. You can unsubscribe from marketing communications at any time. To opt out of direct marketing, including profiling for direct marketing purposes, you can either adjust the preference settings in your Costa Club UAE account, or select “unsubscribe” in emails, or email support@costacoffee.ae.
Our websites and app use cookies and similar technologies to improve functionality, recognise you and to customise your experience. You can reject and block cookies in your browser settings. Please see our Cookie Notice for more information. If you enable location services on the app, or you access the location finder on our sites and your browser settings allow this, your device will identify and alert you to the nearest Costa Store in UAE to your location. Please see section 5 and 6 for how ELR can share your data with 3rd parties.
We collect information when you purchase something or use our services or enter our competitions or awards. This includes store visits, using our websites or app, joining the Costa Club UAE, or corresponding with us.
In particular: We keep information you give us directly such as:
Our app collects your step count data via Google Fit / Health Connect or other compatible health tracking services. This data is used for Step Counter Competition and rewarding winners who achieve the weekly goal.
We record and analyse store, web and app visits, details of your purchases and where you take advantage of our promotions. If there is an incident, we log information about it. If you engage with us online via our websites or app our cookies and similar technologies will capture your IP address, your location, and record how you use the site or app to help improve it and improve your user experience, where your browser settings or permission allows for this. If you post information online about us or provide feedback, we keep a record. If you contact us directly and complain or give feedback, receive compensation, or enter a competition, we will record details and all related information (including that you provide to us) such as emails, letters, phone calls, date of birth to our product customer information helplines including those operated by third parties as detailed in Section 5 below. We use CCTV in our premises for the prevention and detection of crime and for safety and security reasons.
We receive your information from other people in certain circumstances. This can happen when: You participate in market research, such as focus groups or surveys.
We are allowed to use your data only if we have a proper reason to do so such as:
A legitimate interest is when we have a business or commercial reason to use your data. This involves us making an assessment of when we can rely on our legitimate interests. We have set out below how and why we use your personal information and the legal basis we rely on. This is also where we tell you what our legitimate interests are.
When you buy something from us, join the Costa Club UAE, or enter a competition we run, we use your information to fulfil our contract with you. We take information to communicate with you, check your identity, take payment, and provide products and services, including awarding loyalty points if you are a Costa Club UAE member.
To run our business and pursue our legitimate interests, we use your information. Our legitimate interests include keeping our records up to date, fulfilling our legal, compliance and contractual duties, working out which of our products and services may interest you, improving our site and apps, and services, developing new products and services, and telling you about them and conducting market research.
When we monitor Costa websites, social media platforms such as Facebook and Twitter and online services including our mobile app and responses to email marketing. If you post comments online or in other media, we capture this information, use it to contact you, and use it to improve our products and services.
If you give us consent, we:
When you give consent, you are able to withdraw that consent at any time by contacting us, for instance by emailing support@costacoffee.ae. If you do so we can only continue to use your data if another legal basis applies, such as when we’re required to do something by law. Nevertheless, you have an absolute right to opt-out of direct marketing, including profiling for direct marketing purposes, at any time. You can opt out of marketing by selecting “unsubscribe” in emails or by adjusting the preference settings on your Costa Club UAE account or by emailing support@costacoffee.ae.
When the law requires us to process your data we will do so. This can include Legal, compliance, regulatory and investigative purposes, including for government agencies and law enforcement. When you exercise your rights under data protection legislation, including when you ask to unsubscribe from our marketing communications.
For some activities ELR uses third party service providers. When these service providers need customer data from you, we may have to share information with them for verification purposes.
We use third party providers for the following services:
If our business is to be integrated with another business or sold, your details would be shared with our advisers and any prospective purchaser’s advisers. Your information could be passed to the new owners. (You will be notified if this happens).
Personal data may be shared with government authorities and/or law enforcement officials for the prevention or detection of crime, if required by law or if required for a legal or contractual claim.
Sometimes we send or store your data outside of the UAE. For example, to follow your instructions, comply with a legal duty or to work with or receive services from our service providers who we use to help run your accounts and our services.
If we do transfer information outside of the UAE, we will make sure that it is protected by using one of these safeguards:
Our website, apps and marketing emails use cookies and similar technology. Full information is in our Cookie Notice. This includes information on how to adjust your browser settings to accept or reject cookies.
We keep your data to enable us to fulfil our contract with you or to provide services, whilst you are an active user of our site, app, or Costa Club UAE, where required by law or to protect legal rights. We always look to keep your data for the minimum time in line with data protection principles and our processes.
For example, we keep Information on Costa Club UAE members as follows.
This enables us to respond to any questions or complaints. Information to maintain records according to rules that apply to us. If you unsubscribe from marketing communications, we keep a record of this request indefinitely to ensure we do not send you direct marketing again. We may keep your data for longer if we cannot delete it for legal, regulatory, or technical reasons.
You have rights over your personal data. You can:
Some rights, however, may be limited. We may be obliged by law or regulation to keep information. We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data. On occasion there may be a compelling legitimate interest to keep processing data. If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please see ‘Contact details’ below. To process a request from you, we may need to confirm your identity to ensure we’re accessing the right data.
If you wish to delete your Costa Club UAE account or any personal data we hold about you, you can:
Once your request is verified and received, your data will be permanently deleted or anonymized within 30 days, unless retention is required to meet legal or regulatory obligations (for example, payment records or tax documentation).
To exercise any of your rights or to withdraw consent you can email to support@costacoffee.ae.
For any queries related to your Costa Club UAE membership, including personal date contact us at support@costacoffee.ae. We may change or update this notice from time to time. We will communicate these as appropriate – for example, by updating our website or, where legally required, by actively telling you about the changes.
The controller for your information is MMI-ELR Group (Maritime & Mercantile International LLC and Emirates Leisure Retail), Level 5, Emirates Holiday Building, Sheikh Zayed Road, 122199, Dubai, UAE. ELR runs the Costa Club UAE within the UAE.
Please remember that when you click a link to go from our website to another website, our Privacy Policy no longer applies. Any browsing and interaction on another website, is subject to that website's or third-party notices and policies which we recommend you read. This policy applies solely to data collected and processed by Costa Coffee. Some stores using the Costa brand are franchisees. Franchisees are all committed to protecting your privacy but, just to be clear, each Costa franchisee is an independent business and is responsible for the operation of its own stores and compliance with data protection law.