Last updated: 14 July 2026
CECE CHA ("we", "us", "our") is a matcha, ube and tropical drinks bar located at Unit 21, Stevenage Indoor Market, Stevenage, UK.
For the purposes of UK data protection law, the data controller is:
Cece Cha Ltd
Unit 21, Stevenage Indoor Market, Stevenage, UK
Email: [email protected]
We have registered with the Information Commissioner's Office (ICO). Our registration number is currently pending and will be published here as soon as it is issued.
When you sign up for our Rewards programme, we collect:
We do not collect any other personal information for the Rewards programme (for example, we do not collect your address, phone number, or payment card details).
We use this information solely to operate the loyalty (Rewards) programme, specifically to:
Our lawful basis for processing this data under Article 6 of the UK GDPR is your consent, which you give when you voluntarily sign up for the Rewards programme. You can withdraw your consent at any time by asking us to delete your data (see section 8). Withdrawing consent will end your participation in the Rewards programme but will not affect anything done before you withdrew it.
We do not sell your personal data, and we do not share it with third parties for marketing purposes.
We use the following trusted service providers ("processors") purely to operate the programme on our behalf:
These providers only process your data on our instructions and are not permitted to use it for their own purposes.
Some of our providers (such as Resend) may store or process data on servers outside the UK. Where this happens, we ensure appropriate safeguards are in place as required by UK data protection law (such as the UK International Data Transfer Agreement or an approved data-transfer mechanism) so that your data receives an equivalent level of protection.
Your loyalty data is stored on our own servers. We apply appropriate technical and organisational measures — including access controls and regular backups — to keep it secure and protect it against unauthorised access, loss, or misuse.
We retain your loyalty data for as long as your Rewards account is active. If you ask us to delete your data, or if your account becomes inactive and you ask us to close it, we will delete your personal data without undue delay.
Under UK data protection law you have the right to:
To exercise any of these rights, contact us at [email protected]. We will respond within one month. There is normally no charge.
If you have a concern about how we handle your data, please contact us first at [email protected] so we can try to resolve it.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk
This website uses only essential cookies required for the site to function and to remember your cookie preference. We do not use tracking cookies, analytics cookies, or advertising cookies.
We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.