We collect information in several ways:
Information You Provide Directly
Information Collected Automatically
Information from Third Parties
If you’re in the EU/EEA, we process your personal information based on one or more of these legal grounds:
Consent
We process your data with your explicit consent for analytics tracking and any marketing communications. You can withdraw consent at any time by contacting us.
Legitimate Interest
We process your data for our legitimate business interests when it doesn’t infringe on your privacy rights. This includes website security, fraud prevention, and improving our services.
Contractual Necessity
Processing your data is necessary to fulfill our contract with you—responding to contact form inquiries, managing loyalty program memberships, and providing the services you’ve requested.
Legal Obligation
We process your data when required by law, regulation, or government request.
We use your information for these specific purposes:
We do NOT: Use your information for automated decision-making, profiling, or marketing purposes without your explicit consent.
We do NOT sell your personal information. Period.
We may share your information with trusted service providers who help us operate our website and services:
Service Providers
Legal Requirements
We may disclose your information if required by law, court order, government request, or to protect our legal rights.
Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
All service providers are contractually required to protect your information and use it only for the purposes we’ve outlined.
We retain your data only for as long as necessary:
If you’re located in the European Union or European Economic Area, you have the following rights:
Right of Access
You can request a copy of the personal information we hold about you.
Right to Rectification
You can request that we correct inaccurate or incomplete data.
Right to Erasure (“Right to Be Forgotten”)
Under certain circumstances, you can request that we delete your personal data.
Right to Restrict Processing
You can request that we limit how we use your data while you dispute its accuracy or our lawful basis for processing.
Right to Data Portability
You can request your data in a structured, machine-readable format and have it transferred to another provider.
Right to Object
You can object to processing based on legitimate interest or for direct marketing purposes.
Right to Withdraw Consent
If we’re processing your data based on consent, you can withdraw that consent at any time. This doesn’t affect data we’ve already processed.
Right to Lodge a Complaint
You have the right to file a complaint with your local supervisory authority (data protection authority).
To exercise any of these rights, contact us at hello@kaffein.coffee with your request. We’ll respond within 30 days.
If you’re a California resident, you have specific rights under the California Consumer Privacy Act:
Right to Know
You can request what personal information we collect, use, and share about you.
Right to Delete
You can request deletion of personal information we’ve collected from you, subject to certain exceptions.
Right to Opt-Out
You can opt-out of the sale or sharing of your personal information. We do not sell your data, but you have the right to request this restriction anyway.
Right to Correct
You can request that we correct inaccurate personal information.
Right to Limit
You can request that we limit our use of sensitive personal information.
Right to Non-Discrimination
We will not discriminate against you for exercising your rights under CCPA.
To exercise these rights, contact us at hello@kaffein.coffee. We will verify your identity and respond to your request within 45 days.
Our website is hosted in the United States. If you’re accessing our site from the EU/EEA, your personal information will be transferred to and processed in the United States.
We rely on Standard Contractual Clauses and your explicit consent to transfer data internationally. Our service providers (Google, Square, Meta, GoDaddy) maintain appropriate safeguards for international data transfers.
By using our website, you consent to this transfer. If you don’t agree, please don’t use our site.
We take data security seriously:
However, no transmission over the internet is 100% secure. We cannot guarantee absolute security, and any transmission is at your own risk. If you’re concerned about the security of your information, contact us.
Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16.
If we discover that we have collected personal information from a child under 16 without parental consent, we will delete that information promptly.
If you believe a child has provided us with personal information, please contact us immediately at hello@kaffein.coffee.
Our website contains links to and embedded content from third-party services, including:
We are not responsible for the privacy practices of these third-party sites. Each has its own privacy policy, and we encourage you to review them:
