Privacy Policy

1. Who we are

BuyMyCafe is a private brokerage service operated by Tony Vaughan, trading as BuyMyCafe.co.uk (the "data controller"). We act as a confidential off-market broker for UK cafés, bakeries, delis, tea rooms, sandwich bars, bistros and dessert parlours. We can be contacted at contact@buymycafe.co.uk for any data-protection matter.

2. What personal data we collect

• Identity and contact data: name, email address, telephone number, company name.
• Business financial data submitted through the valuation tool: weekly takings, seller's discretionary earnings (SDE), turnover, asset value, lease terms, region.
• Acquirer brief data submitted through the buyer registry: sector focus, region, capital band, buyer classification.
• Free-text enquiry content submitted via the contact form.
• Technical data automatically collected by our hosting provider for security and abuse prevention (IP address, browser user-agent, request timestamps).

3. How we use your data

Personal and business data submitted to BuyMyCafe is used exclusively to:

• Prepare an indicative valuation or broker-grade appraisal of your business.
• Match acquirers and sellers under NDA-gated, broker-mediated introductions in line with your stated criteria.
• Respond to your enquiry and conduct ordinary broker correspondence.
• Meet our legal and accounting obligations.

We do not sell your data. We do not publish business listings, financial information or acquirer details on any public marketplace, directory or third-party advertising platform.

4. Lawful basis

We rely on your consent for marketing communications, on legitimate interests (running a confidential brokerage and matching qualified parties) for broker-led correspondence, and on legal obligation for tax and record-keeping requirements.

5. Data sharing

Your data may be shared only with: (a) vetted counterparties under signed NDA where you have asked us to facilitate an introduction; (b) our infrastructure providers (hosting, email delivery, database) acting strictly as processors on our instructions; (c) regulators or law-enforcement bodies where legally compelled.

6. Retention

Valuation submissions are retained for up to 24 months to support follow-up advisory work. Acquirer registry briefs are retained for up to 36 months or until you request deletion. Completed transaction records are retained for 7 years to comply with UK accounting and anti-money-laundering rules. Marketing contacts are removed within 30 days of an unsubscribe request.

7. Your rights under UK GDPR

You have the right to:

• request access to a copy of the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• request restriction or object to processing;
• request data portability in a structured, machine-readable format;
• withdraw consent to marketing at any time.

To exercise any of these rights, email contact@buymycafe.co.uk. We respond within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

Submissions are transmitted over TLS, stored in an access-controlled database, and visible only to BuyMyCafe brokerage staff. We never request payment-card information through this website.

9. Changes

We may update this policy from time to time. Material changes will be reflected in the "Effective" date above.