Who we are
This site is operated by Love Toast Franchising Limited (“TOAST”, “we”, “us”), a company registered in England and Wales under company number 17252678, with its registered office at Unit 6, Cherrytree Farm, Blackmore End Road, Sible Hedingham, Halstead, Essex, CO9 3LZ.
Love Toast Franchising Limited is the TOAST franchising company. The TOAST coffee shops and the consumer websites are operated by Love Toast Limited (company number 12320925), at the same registered office.
We are the data controller for the personal information described in this policy. That means we decide how and why it is used.
If you have any questions about this policy or about how we handle your information, please contact us at hello@lovetoast.co.uk. That is the single address for data protection questions and requests across every TOAST website.
The person accountable for data protection at TOAST is Harley Pearson.
What this policy covers
This policy explains what we do with personal information collected through this website, which exists to share information about TOAST franchise opportunities and to let you register your interest in one.
What information we collect
Information you give us. When you complete our enquiry form, we ask for:
- your first and last name
- your email address
- your mobile phone number
- the location or locations you are interested in
- the value of funds you have available to invest
We ask about available funds because franchise opportunities have minimum investment requirements, and it helps us give you a straight answer about whether a particular opportunity is realistic for you. You do not have to provide it, but we may not be able to progress your enquiry without it.
If you contact us directly by email or phone, we will also hold whatever information you choose to share in that correspondence.
Information we collect automatically. We use our own analytics to understand how the site is used - which pages are visited, how people move through the site, and whether anything is broken. This is deliberately built to be cookieless and does not identify you: we do not set tracking cookies, we do not build a profile of you, and we do not share this data with advertising networks.
We also record technical information such as your browser type and approximate region, which is a normal part of how websites operate.
None of that runs unless you allow it. The first time you visit, we ask before any analytics or diagnostics starts — and if you decline, the code that would collect it is never loaded. See cookies and device storage.
When something goes wrong. If the site hits an error and you have allowed diagnostics, we record it so we can fix it, using our own system rather than a third-party service. We record the error and its technical detail, the full address of the page you were on including anything after the ?, your browser’s full user-agent string, the session identifier described in the cookies notice, and a trail of your last 20 actions — the buttons and links you clicked, the pages you moved between, and the network requests the page made. We do not record what you type into forms.
Why we use your information, and our lawful basis
| What we use it for | Our lawful basis |
|---|---|
| Responding to your franchise enquiry and discussing opportunities with you | Legitimate interests - you have asked us about a franchise, and replying is what you would expect |
| Assessing whether an opportunity is a realistic fit, including location and investment level | Legitimate interests - it avoids wasting your time and ours |
| Keeping a record of enquiries and our discussions | Legitimate interests - running our franchise recruitment properly and keeping accurate records |
| Improving the website | Legitimate interests - the data used here does not identify you |
| Complying with legal or regulatory obligations | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we think a proportionate reply to an enquiry you made is what you would reasonably expect. You can object to this at any time - see Your rights below.
We will not send you marketing unrelated to your enquiry unless you have asked us to.
Who we share it with
HubSpot. Our enquiry form and customer relationship management system are provided by HubSpot, Inc. Information you submit is stored in HubSpot on our behalf, under a data processing agreement.
Partnerwise. We work with Partnerwise, our franchise consultants, who support us in assessing and progressing franchise enquiries. They act on our instructions.
Service providers. We use other suppliers to host and operate this website. They process information only on our instructions:
| Recipient | What they receive | When |
|---|---|---|
| Vercel | Hosts the site. Sees every request, and supplies the country and city our analytics uses | Every page |
| Supabase | Hosts the database holding our analytics, error events and site content | Every page |
| Google (reCAPTCHA Enterprise) | Your IP address, browser characteristics and interaction signals | On /register, inside the HubSpot form frame — so Google is contacted at the moment you enter your details |
| Google (Maps and Fonts) | Your IP address and browser, when the territory map and its fonts load | On /opportunities |
| postcodes.io | The postcode or town you type into the territory search — sent from your browser to this free UK postcode lookup service | On /opportunities, as you search |
| Google (Geocoding API) | The same search text, where postcodes.io cannot resolve a place name | Fallback only |
The one worth reading twice is the territory search: what you type is often a postcode, which is close to a home or a target site, and it goes from your browser directly to a third-party service.
Legal and regulatory. We may disclose information where we are legally required to.
We do not sell your personal information, and we do not share it for advertising purposes.
Information leaving the UK
HubSpot, Inc. is based in the United States, so information you submit through the enquiry form may be transferred outside the UK. Where this happens, we rely on appropriate safeguards recognised under UK data protection law - currently the UK Extension to the EU-US Data Privacy Framework, under which HubSpot, Inc. is certified. You can ask us for more detail about these safeguards at any time.
How long we keep it
We keep enquiry information for 24 months from your last contact with us, after which it is deleted or anonymised.
If your enquiry progresses to a franchise agreement, we will keep records for as long as the relationship continues and for six years afterwards, to meet our legal and accounting obligations.
Two other things this site records have their own periods, and they are enforced by a job that runs every night rather than only stated:
| What | How long |
|---|---|
| Website analytics — the visit identifier, the pages you viewed, the territory searches you ran, and the country and city derived from your connection | 26 months |
| Error records — the page address, browser details and the trail of recent actions recorded when a page breaks | 26 months |
We may keep something for longer where the law requires it, or where it is needed for a legal claim that is already under way.
How we protect it
We use appropriate technical and organisational measures to protect your information, including encrypted connections, access controls limiting who within TOAST can see enquiry data, and contractual protections with our suppliers.
Cookies
We do not use tracking or advertising cookies on this site, and our own analytics is cookieless by design.
The only cookies set when you use this site come from the HubSpot enquiry form, which uses Cloudflare bot-management cookies (__cf_bm) to distinguish genuine visitors from automated traffic. These are strictly necessary for the form to work securely and are not used to track you across websites or for advertising.
Cookies are not the whole story, though, and this section used to read as though they were. Our analytics does not use cookies, but it does store one item in your browser’s session storage — a random identifier that lets the pages you view in one visit be counted as one visit. It holds nothing about you, your browser discards it when you close the tab, and it is only created if you allow analytics. We also keep one item in local storage: the record of the cookie choice you made, so we do not ask again on every page.
The full inventory, what our analytics records, and how to change or withdraw your choice are set out in cookies and device storage.
If this changes - for example if we add advertising or analytics cookies in future - we will update this policy and ask for your consent first.
Your rights
Under UK data protection law you have the right to:
- be told what we hold about you and why - this policy is part of that
- access a copy of your information
- have it corrected if it is wrong or incomplete
- have it deleted, in certain circumstances
- restrict how we use it, in certain circumstances
- object to us using it where we rely on legitimate interests
- portability - receive your information in a usable format, in certain circumstances
To exercise any of these, email hello@lovetoast.co.uk. We will respond within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your information, please tell us first - we would rather put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. If we make a significant change, we will make that clear on this page.