Last updated: August 10, 2026
This Privacy Policy tells you how and when we collect, use, disclose and transfer Personal Information (defined below) when you visit or use our website https://www.blankstreet.com ("Site"), the Blank Street Coffee mobile application (“App”), visit one of our stores or other premises (including where we operate CCTV cameras), or otherwise communicate or engage with us. It also outlines how we use your Personal Information and your rights.
When this Privacy Policy mentions "we", "us", "our" it refers to the applicable entity mentioned below.
| If you live in | then the controller of your Personal Information is |
|---|---|
the United Kingdom or the European Economic Area | Blank Street UK Limited (Company number: 13887702) |
the United States or the rest of the world | Blank Street Inc. |
Reference to "Platform" in this Privacy Policy is a reference to the Site, the App and any services we provide to you via the Site or App, as applicable.
We are the data controller for Personal Information that we collect about you, and our parent company, Blank Street Inc. is a joint or independent controller (as applicable) in respect of certain processing activities.
This Notice covers:
When we refer to "Personal Information" (also known as personal data), we mean any information about an individual from which that person can be identified.
We collect Personal Information from you, including when you visit our Site, use our App, visit one of our stores, or otherwise communicate or engage with us.
We may collect and process the following Personal Information from you:
You may give us Personal Information by filling in forms or corresponding with us by social media, post, phone, email or otherwise. This includes Personal Information you provide when you:
This information includes your:
If you reach out to us via a third party, for example, if you send us a direct message on a social media platform, we may also collect your name and information related to your social media profile which is visible in the message.
As you interact with our Site, we and our advertising and analytics partners will automatically collect certain technical data about your equipment, browsing actions and patterns. This may include:
We collect this Personal Information by using cookies, pixels, and other similar technologies. For more information about how we process this information, please see the Cookies and other technologies section of this Notice.
When you use our App, we and our vendors may also collect:
We may also request access to your device's camera and photo album where you have enabled these in your device settings.
We may receive Personal Information about you from certain third parties and public sources including:
We may combine information we collect from various sources and treat such combined information in accordance with this Privacy Policy.
We also operate CCTV cameras at our retail stores, warehouse and distribution facilities, and office premises in the United Kingdom and, where applicable, in the EEA. When you visit our premises, your image may be captured by our CCTV systems. CCTV footage – including video images, still images, and associated data such as the date, time, and camera location is Personal Information that we capture about you indirectly, meaning you do not actively provide it to us.
Our cameras may incidentally capture images that reveal special category information about you (for example, a visible disability, health condition, or religious dress) as an incidental consequence of filming in our premises. The capture of such information is not our intention and is minimised where feasible through appropriate camera positioning.
We may use the Personal Information we collect to:
We may process your information for the purposes described above, including through the use of automated technology vendors.
We also may use the information we obtain about you in other ways for which we provide separate notice and, where required, obtain your consent.
We may also aggregate and/or de-identify information collected through our Platform in such a way that the information cannot reasonably be linked to you or your device. We may use de-identified or aggregated data for any purpose, including for research and marketing purposes, and we may disclose such data to others, including advertisers, promotional partners, and sponsors.
We have set out below, in a table format, a description of all the ways we plan to use the various categories of your Personal Information, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
| Purpose/Use | Type of data | Legal basis |
|---|---|---|
To register you as a new customer or user of the Platform. | Identity and contact data, device data | Performance of a contract with you. |
To process and fulfil your orders for food and drinks, whether placed via the App, Site, in-store, or through a food and delivery platform, including, managing payments, fees and charges and processing refunds. | Identity and contact data, payment card and billing data, transaction and order history. | (a) Performance of a contract with you (b) Necessary for our legitimate interests |
To manage our relationship with you, which will include: (a) notifying you about changes to the Platform, our terms and this Privacy Policy, (b) dealing with your requests, complaints and queries about your orders or our services, (c) responding to feedback. | Identity and contact data, order history, and marketing preferences. | (a) Performance of a contract with you. (b) Necessary to comply with a legal obligation (for example, to notify you that we have received your request to exercise any of your rights relating to your Personal Information). (c) Necessary for our legitimate interests to keep our records updated, manage our relationship with you and improve our services based on feedback. |
To administer and manage our loyalty and rewards programme, and to enable you to take part in a prize draw, competition or complete a survey. | Identity and contact data, order and transaction history, device data, marketing preferences. | (a) Performance of a contract with you. (b) Necessary for our legitimate interests to study how our customers use our services and loyalty programme. |
To administer and protect our business, the Platform, and our stores (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data, fraud prevention, and network security) | Identity and contact data, device, and Platform usage data. | (a) Necessary for our legitimate interests for running our business, provision of administration and IT services, Platform and network security, fraud prevention and detection, and business continuity. (b) Necessary to comply with a legal obligation (for example to alert you of any data breach). |
To maintain the safety and security of our stores, warehouses, offices, and other premises, and of the staff, customers, contractors, and visitors on them; to prevent, deter, and detect crime and protect our property and assets; to support law enforcement agencies in the prevention and detection of criminal offences; and to investigate incidents, complaints, or disputes that occur at our premises. | CCTV footage: video footage and still images of individuals captured by cameras at our premises, together with associated metadata (such as date, time, and camera location). | Necessary for our legitimate interests in maintaining a safe and secure environment for our staff, customers, contractors, and visitors; protecting our property and assets; and supporting law enforcement. We have conducted a Legitimate Interests Assessment in respect of our use of CCTV, a copy of which is available on request. |
To deliver relevant content to you via the Platform, and to measure or understand the effectiveness of the advertising we serve to you. | Identity and contact data, order history, Platform usage, transaction history, marketing preferences. | (a) Necessary for our legitimate interests to study how customers use our products and services, to develop them, to grow our business and to inform our marketing strategy. (b) Where personalised advertising relies on non-essential cookies or tracking SDKs, the lawful basis is Consent. |
To use data analytics to improve the Platform, our stores products and services, customer relationships and experiences, and to measure the effectiveness of our communications and marketing. | Device data, order history, Platform usage, transaction history, marketing preferences. | Necessary for our legitimate interests to define types of customers for our products and services, to keep the Platform updated and relevant, to develop our business and to inform our marketing and product strategy. |
To send you relevant marketing communications (including by email, SMS, and App push notifications) and to make personalised product suggestions and recommendations to you based on your purchase history, Platform usage, and loyalty programme activity. | Identity and contact data, order and transaction history, Platform usage, device data, marketing preferences. | Consent, where you have provided your prior consent to receive electronic marketing (email, SMS, App push notifications). You may withdraw consent at any time. |
To carry out market research through your voluntary participation in surveys. | Identity and contact data, marketing preferences, and usage data. | Necessary for our legitimate interests (to study how customers use our products/services and to help us improve and develop our products and services). |
To enforce our Terms of Service and other agreements, and otherwise exercise and defend our legal rights | Any of the categories of personal data described above. | (a) Necessary for our legitimate interests. (b) Performance of a contract with you. |
To comply with applicable legal requirements and industry standards. | Any of the categories of personal data described above. | (a) Necessary for our legitimate interests (such as where we seek to comply with applicable industry standards). (b) Necessary to comply with a legal obligation. |
We strive to provide you with choices regarding certain Personal Information uses, particularly around marketing and advertising.
We may use your Personal Information to form a view on what services or other offerings we think you may want or need, or what may be of interest to you. You may receive marketing communication from us, including if you have requested information from us, have consented to marketing (where required by applicable law), or have purchased products or used our services and you have not opted out of receiving that marketing or where we are otherwise legally permitted to send you marketing. Where you have given your consent, you may withdraw this at any time by contacting us using the details set out below.
Once you object, we will stop processing your Personal Information for those purposes immediately in accordance with applicable law.
Our Site may, from time to time, contain links to external websites, plug-ins and applications including social media platforms. This Notice does not apply to such third-party services and we are not responsible for the privacy policies or practices or the content of any third party. Please review third-party privacy notices for more information.
We may disclose your Personal Information with:
We will also disclose your Personal Information to other entities in the following circumstances:
We and our advertising and analytics partners use cookies and other similar technologies to collect and store certain information about you which includes Personal Information. These technologies include cookies, pixels, web beacons and JavaScript (together "Cookies"), and they typically involve storing pieces of information or code transferred to or accessed from your device to store and, sometimes, record information about your interaction with online services from your device.
Cookies and similar technologies enable you to be remembered when using that device to interact with online services and can be used to manage a range of features and content as well as storing searches and presenting personalised content. They allow us to distinguish you from other users of our Site which helps us to provide you with a good user experience and also allows us to improve our Site and see how it is performing. Cookies also allow us to secure areas of our Site and deliver your preferences and personalised content.
A number of Cookies and similar technologies we use last only for the duration of your online session and expire when you close your browser. Others are used to remember you when you return to our Site and will last for longer. Some Cookies will also record where you came to our Site from and where you visit once you have left.
We use Cookies and/or other similar technologies, either alone or in combination with each other, to create a unique ID which corresponds to you.
Depending on where you live (such as the EU or UK), when you first interact with our Site, you will be notified that we use Cookies and we will ask for your consent to use non-essential Cookies. This banner will allow you to decide whether to accept all Cookies, which non-essential Cookies you want to accept, or to reject all Cookies. We also give you information about how to disable Cookies below. Where you change your browser settings to generally disable all Cookies, you may not be able to take full advantage of our Site and some aspects may not work without some Cookies being used.
We use these Cookies on the basis that they are necessary for the performance of a contract with you, or because using them is in our legitimate interests (where we have considered that these are not overridden by your rights), or that they are strictly necessary for us to provide this Site to you. All other Cookies are used only with your prior consent, which you may withdraw at any time by adjusting your preferences under the 'Customize' section of our cookies banner.
We use the following types of Cookies:
| Types of Cookies | Purpose of these Cookies | Name of the cookie and duration |
|---|---|---|
Necessary Cookies | These are Cookies that are required for the operation of our Site and under our terms with you. If you disable these Cookies, certain features of the Site may not work. |
|
Functional Cookies | These are used to recognise you when you return to our Site. This enables us, subject to your choices and preferences, to personalise our content, greet you by name and remember your preferences (for example, your choice of language or region). |
|
Analytics Cookies | These allow us to recognise and count the number of visitors and to see how they engage with our Site, including specific content and features. This helps us for our legitimate interests of improving the way our Site works (for example, by ensuring that users are finding what they are looking for easily). |
|
Advertisement Cookies | We may work with advertising networks that gather information about the content you have accessed on our Site and on other websites and services you visit. We may also disclose this Personal Information with third party entities for this purpose. This may result in you seeing our advertisements when you visit other websites and others' services. |
|
In addition to cookies on our Site, the App may deploy similar tracking technologies, including software development kits (SDKs) and device identifiers used for analytics and (where you have consented) for personalised content, performance, and marketing purposes. You may be able to set your internet browser or device to stop accepting new cookies, notify you when you receive a new cookie, or disable existing cookies. Please consult the “Help” section of your browser or your device settings for more information. The setting will apply only to the browser or device you are using, so you will need to reset the setting on a different browser or device. If you disable some or all cookies, the Platform may not function as intended and some features may be unavailable.
We and our vendors may use third-party analytics services on the Site and App to help us understand how users engage with the Site and App, including Google Analytics. These parties may use Cookies to help collect, analyse, and provide us with reports and/or data. For more information about Google Analytics and how it collects and processes data, please visit: https://policies.google.com/technologies/partner-sites. To opt out of the Google Analytics using your information for analytics purposes, see: https://tools.google.com/dlpage/gaoptout.
We and our vendors may allow third-party advertising technologies to place Cookies on your browser or device to collect information about you to assist in the delivery of relevant advertising across other services. These ads may be based on your current activity or your activity over time and across other websites and online services and may be tailored to your interests. Additionally, we may provide basic information we collect (such as email addresses) to advertising partners, who may “match” this information in de-identified form to cookies, mobile ad identifiers, and other proprietary IDs, in order to provide you with more relevant ads when you visit other online services.
We neither have access to, nor does this Privacy Policy govern, the cookies or other tracking technologies that may be placed on your browser or device by third parties. For more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Digital Advertising Alliance’s Consumer Opt-Out link or see the National Advertising Initiative’s website to opt out of receiving tailored advertising from companies that participate in those programs. You also may opt-out from Google Analytics for Display Advertising or the Google Display Network by using Google’s Ads Settings. We do not control and make no representations about the appropriateness, functioning, completeness, or availability of these or any other third-party opt-out tools.
We have put in place security measures to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
We have put in place procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
To maintain the security of our systems, protect our staff, record transactions, and, in certain circumstances, to prevent and detect crime or unauthorised activities, we reserve the right to monitor all Internet communications including web and email traffic into and out of our domains.
We will only retain your Personal Information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorised use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal, regulatory and tax, accounting or other requirements.
CCTV footage captured at our premises is retained for a maximum of 30 days from the date of recording in normal circumstances, after which it is automatically overwritten or permanently deleted. CCTV footage may be retained for a longer period where it is reasonably required for a specific and documented purpose, including: the investigation of an identified incident, complaint, or dispute; actual or anticipated legal proceedings; an insurance claim; or a regulatory inquiry. Footage retained beyond the standard period is reviewed periodically and deleted as soon as the reason for retention no longer applies.
You must be at least 13 years old to access and use the Platform. The Platform is not intended for users under the age of 13 years, and we do not knowingly collect or maintain data from children under the age of 13. If we learn that we have collected personal information directly from a child under 13, we will promptly take steps to delete it in accordance with applicable law.
If you are between 13 and 17 years old, you may only use the Platform with the prior permission of your parent or legal guardian.
You can change your preferences and object to receiving further marketing at any time by selecting the "unsubscribe" link in marketing emails or adjusting your notification preferences in the App or your device settings for push notifications. Please note that if you opt out of marketing communications, we may still send you service-related communications such as an email informing you about the status of your order, or a notice of changes to our legal terms, including this Privacy Policy.
Your local laws (including, to the extent applicable, the laws in the EU, UK, and certain U.S. states, such as California, New Jersey, and Rhode Island) may permit you to request the following with respect to your Personal Information:
Note, withdrawing your consent does not affect the lawfulness of our processing before your withdrawal.
In addition, some states permit you to request either (i) a list of the categories of third parties to whom we have disclosed Personal Information, or (ii) a list of the specific third parties to whom we have disclosed or sold Personal Information. In each case, these requests are subject to applicable exceptions and limitations, including rules that may allow us to provide a list that is not specific to the requester.
If you would like to exercise any of these rights, you can email privacy@blankstreet.com, submit your request through this webform, or call us at +1 888 949-1895. We will not discriminate against you for exercising any of these rights. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you.
We may ask you for further information in order to confirm your identity before we provide the information requested or otherwise comply with your request. You can also designate an authorised agent to make a request on your behalf. To do so, you must provide us with written authorization or a power of attorney, signed by you, for the agent to act on your behalf. You may still need to verify your identity directly with us.
We will consider all requests and provide our response within the time period required by applicable law. Please note, however, that certain information may be exempt from such requests (e.g., where we are required to keep information for legal purposes, or where deletion of information would prevent us from providing services you have requested).
Under certain U.S. state laws, you may also have the right to opt out of the processing of the “sale” of your Personal Information and the sharing/processing of your personal information for purposes of “targeted advertising,” as defined in applicable law. To opt out of our use of cookies, pixels and similar technologies for purposes that could be considered “sales” or processing for purposes of “targeted advertising” (i.e., “share”), please see the Your Privacy Choices link in the footer of our Site or in the settings of our App. You must make this choice on each Site and App on each browser/device you use to access the Platform. You must also renew this choice if you clear your cookies or your browser is set to do that. To submit a request to opt out of our disclosure of information other than through cookies and similar technologies that are subject to applicable opt out rights, you can email us at privacy@blankstreet.com. Please note that if you have a legally-recognized browser-based opt out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.
Please note, if we deny your information request, you may have the right to appeal our denial; to do so, contact us at privacy@blankstreet.com and describe in detail why you believe the denial was in error. Your description must include your full name and the email address used for your account with us, along with a copy of the denial notice you received from us.
If you have any concerns about this Notice, please contact us using the details below.
If you are an EU or UK resident, this section provides additional information that is relevant for you.
If you are an EU or UK resident, we are required to have a legal basis for collecting and using your Personal Information. We rely on one or more of the following legal bases:
Some of our group companies and service providers are located outside the United Kingdom and the European Economic Area ("EEA"). In particular, our parent company, Blank Street Inc., is based in the United States and processes some of your Personal Information as described in this Privacy Policy.
Where we transfer your Personal Information outside of the UK and the EEA, we ensure a similar degree of protection is afforded to it by ensuring that at least one of the following safeguards is implemented:
Please contact us using the details below if you would like further information about the specific safeguards in place for your Personal Information.
For information related to your rights under UK and EU data protection laws, please see the Your Rights and Choices section of our Privacy Policy.
If you have concerns about how we handle your Personal Information, you have the right to complain to us by emailing privacy@blankstreet.com and marking the subject line as "Privacy Request".
If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us to provide you with the following additional information about: (1) the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and (2) whether each category of personal information is “sold” or “shared” for cross-context behavioral advertising.
Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across websites/services, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We “share” information to provide more relevant and tailored advertising to you on our Services and across other websites/services. Our use of third-party online advertising and related services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA. The following table details our practices in this regard.
Within the last 12 months the Services have collected the following categories of personal information from the sources and for the business or commercial purposes described below:
| Category of Personal Information | Business or Commercial Purposes of Use | Is the Category of Personal Information “Sold” or “Shared?” |
|---|---|---|
Identifiers, such as name, email address, phone number, and IP address. | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | Yes. |
Commercial information, such as records of your purchases and transactions. | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | Yes. |
Internet or other similar network activity, such as pages viewed on the Site or App, date and time of visiting the Site or App, and patterns of using the Site or App, and general location inferred from IP address. | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | Yes. |
Inferences based on Personal Information described above in this table. | To provide and maintain our services (including the Site and App); communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | Yes |
Audio, electronic, visual, or similar information, such as CCTV footage at our stores. | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; security, audits, and legal purposes; and with your consent. | No. |
Location information (precise geolocation) | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; security, audits, and legal purposes; and with your consent. | No. |
Customer service information, such as messages and questions you address to us directly through in-person or online forms, by email, or other similar means. | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | No. |
Information about others, such as if you submit information in relation to an order or a referral program | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; for marketing and advertising, analytics, research and development, security, audits, and legal purposes; and with your consent. | No. |
Financial information (such as payment card information, which is processed by our payment processor) | To provide and maintain our services (including the Site and App), complete transactions, and communicate with you; security, audits, and legal purposes; and with your consent. | No. |
For more information about each category, purpose of use, and the entities to which we disclose information, please see the “Personal Information We Collect About You”, “Purposes for Which We Use Your Personal Information”, and “Who We Disclose Your Personal Information With” sections of our Privacy Policy. We retain the categories of personal information listed here as described in the section “How Long We Keep Your Personal Information For” above.
You have the right to opt out of the “sale” and “sharing” of your personal information. To opt out of our use of cookies, pixels and similar technologies for purposes that could be considered “sales” or “sharing” for purposes of tailored advertising, you can click the Your Privacy Choices link in the footer of our Site or in the settings of our App. You must make this choice on each Site and App on each browser/device you use to access the Platform. You must also renew this choice if you clear your cookies or your browser is set to do that. To submit a request to opt out of our disclosure of information other than through cookies and similar technologies that are subject to applicable opt out rights, you can email us at privacy@blankstreet.com.
If you have a legally recognised browser-based opt out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.
Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally required affirmative authorization.
The CCPA also allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes. The only sensitive personal information we collect is precise geolocation information, and we only use or disclose this information for business purposes for which you cannot opt out under the CCPA.
Please see the “Your Rights and Choices” section of our Privacy Policy above for information about the additional rights you have with respect to your personal information under California law and how to exercise them. We will not discriminate against you for exercising these choices.
We may offer opportunities to receive certain benefits, such as discounts, rewards and similar programs promotional entries, or other similar incentives, which may require the provision of personal information, such as answering surveys, providing additional feedback or information (including in response to our posts on Blank Street social media pages), or participating in a rewards program. Such opportunities could be considered a financial incentive under applicable law (each, an “Incentive Program”). Your participation in Incentive Programs is purely voluntary. When you participate in an Incentive Program, you agree to the terms of that Incentive Program, and may revoke your participation depending on the Incentive Program. The monetary value of the reward, discount, or incentive is a reasonable approximation of the monetary value of participation in the Incentive Program. We have arrived at this estimate based on consideration of multiple factors, including the following: (1) revenue generated by Blank Street in connection with the Incentive Program; (2) expenses incurred by Blank Street in operating the Incentive Program; and (3) improvement of products and services based on information obtained through the Incentive Program.
The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or in the alternative, that we provide a cost-free means for consumers to opt out of any such disclosure. We do not currently disclose your personal information to third parties for their own direct marketing purposes. To opt out of activities that are considered “sales” or “sharing” under California law, please see the “Right to Opt Out of Sales and Sharing; Right to Limit; Other CCPA Rights” section above.
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We do not currently recognize or respond to browser initiated DNT signals. You can learn more about Do Not Track here. Please note that DNT is a different mechanism than the legally recognised browser-based privacy preference signal referenced above.
Any changes we make to our Privacy Policy in future will be posted on this page. This Notice was last updated on the date mentioned at the top of this Privacy Policy.
If you have any questions, comments and requests regarding this Privacy Policy, please send them to privacy@blankstreet.com, marking the subject line as "Privacy Request".
Our office addresses are as follows: