Privacy Policy

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Fill out our contact form (name, email address, company name, message content)
• Communicate with us via email or phone
• Request information about our sourcing programs

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• IP address and general location information
• Browser type and version
• Pages visited and time spent on pages
• Referring website or source
• Device information and operating system

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Legitimate Interests: For website analytics and service improvement
• Contract Performance: To respond to your inquiries and provide requested services
• Legal Obligations: To comply with applicable laws and regulations

Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Form Submissions: Retained for up to 24 months after last contact
• Analytics Data: Aggregated and anonymized after 14 months
• Email Correspondence: Retained while the business relationship is active, plus 12 months
• Cookie Data: Varies by cookie type, see our Cookie Policy for details

Primary Uses

We use the personal information we collect for the following purposes:

• To respond to your inquiries and provide customer support
• To provide information about our coffee sourcing services
• To improve our website and services based on user feedback
• To send relevant business communications about our services
• To maintain security and prevent fraudulent activity

Third-Party Data Sharing

We do not sell your personal information to third parties. We may share your data with:

• Service Providers: Companies that help us operate our website and deliver services (hosting, analytics, email services)
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third parties are required to maintain the confidentiality and security of your personal information and may only use it for the specific purposes we authorize.

Marketing Communications

We may send you information about our services, industry updates, and sourcing opportunities if you have expressed interest in our programs. You can opt out of marketing communications at any time by contacting us directly. We will never share your information with third parties for their marketing purposes.

Analytics and Website Improvement

We use analytics tools to understand how visitors use our website. This helps us improve user experience, identify popular content, and optimize our services. Analytics data is typically aggregated and anonymized, meaning it cannot be used to identify individual users.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure servers with regular security updates
• Limited access to personal data on a need-to-know basis
• Regular backups and disaster recovery procedures

Data Encryption and Storage

Personal data collected through our website is encrypted during transmission using industry-standard SSL/TLS protocols. Data at rest is stored on secure servers with appropriate access controls and monitoring systems in place.

Access Controls and Monitoring

We maintain strict access controls to ensure that only authorized personnel can access personal data. Our systems are monitored for suspicious activity, and we regularly review our security practices to address emerging threats.

Breach Notification Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable data protection laws. We will take immediate steps to contain the breach and minimize any potential harm.

Right to Access Personal Data

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification and Erasure

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You also have the right to request deletion of your personal data, subject to certain legal exceptions.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

Right to Object to Processing

You have the right to object to certain types of processing, including processing for direct marketing purposes. We will stop processing your data for these purposes upon receiving your objection.

How to Exercise These Rights

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days. You may need to verify your identity before we can process your request.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.