Privacy Policy for BrewTopia Coffee Company
At BrewTopia, we believe great coffee should be brewed with transparency and trust, just as it's grown. This Privacy Policy outlines how we collect, use, and protect your personal information—ensuring your journey through the world of specialty coffee is both exceptional and secure.
Privacy Policy
At BrewTopia, we believe that trust is the foundation of every great relationship—just like the relationship between a coffee farmer and their craft. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
We're committed to being transparent about our data practices and giving you control over your personal information. Please take a moment to familiarize yourself with our privacy practices.
1. Introduction & Scope
Welcome to BrewTopia Coffee Company ("BrewTopia," "we," "us," or "our"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your personal information. This Privacy Policy explains our practices regarding the information we collect when you visit our website (brewtopia.com), use our mobile application, purchase our products, subscribe to our services, or interact with us in any other way.
This policy applies to all information collected through our Website, any related sales, marketing, or events, and when you interact with us on social media or through other third-party platforms (collectively, the "Services").
Please read this Privacy Policy carefully. By using our Services, you consent to the collection, use, and sharing of your information as described herein. If you do not agree with our policies and practices, please do not use our Services.
2. Information We Collect
A. Information You Provide to Us
- Account Information: Name, email address, password, phone number, shipping/billing address
- Payment Information: Credit card details, billing address (processed securely through our payment processors)
- Profile Information: Coffee preferences, brewing methods, taste profiles from our quiz, subscription preferences
- Communications: Emails, chat messages, customer service inquiries, feedback
- Event Participation: Information provided when attending our virtual cupping sessions or workshops
B. Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, clicks, search queries, referring URLs
- Cookies & Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience and analyze usage
- Location Data: General location information based on IP address or precise location (if you grant permission)
C. Information from Third Parties
- Social Media: Information from social media platforms when you connect your account or interact with our content
- Partners: Information from our coffee farm partners or roasters for order fulfillment
- Service Providers: Analytics providers, marketing partners, payment processors
3. How We Use Your Information
Service Fulfillment
- • Process and ship your orders
- • Manage your subscription
- • Provide customer support
- • Send order confirmations
Personalization
- • Recommend coffees based on your taste profile
- • Customize your browsing experience
- • Create personalized content
- • Remember your preferences
Communication
- • Send transactional emails
- • Share coffee education content
- • Provide brewing tips and recipes
- • Notify about subscription updates
Business Operations
- • Analyze usage patterns
- • Improve our products and services
- • Ensure security and prevent fraud
- • Comply with legal obligations
We only process your personal information when we have a valid legal basis to do so, including: (a) your consent; (b) to fulfill our contractual obligations to you; (c) to comply with legal obligations; or (d) for our legitimate business interests, such as improving our Services.
6. Data Security & Retention
Our Security Measures
- SSL/TLS encryption for all data transmissions
- PCI-DSS compliant payment processing
- Regular security assessments and monitoring
- Access controls and authentication protocols
- Secure data storage with industry-standard safeguards
We implement appropriate technical and organizational measures designed to protect the security of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Data Retention: We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically, we retain:
- Account information: While your account is active and for 3 years after closure for legal compliance
- Transaction records: 7 years for tax and accounting purposes
- Marketing preferences: Until you opt-out or request deletion
- Analytics data: Aggregated and anonymized after 2 years
7. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information. These may include:
| Right | Description |
|---|---|
| Access | Request a copy of your personal information |
| Correction | Update or correct inaccurate information |
| Deletion | Request deletion of your personal information |
| Opt-Out | Opt out of marketing communications |
| Portability | Request transfer of your data to another service |
| Objection | Object to certain processing activities |
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: privacy@brewtopia.com
Mail: BrewTopia Privacy Officer, 123 Coffee Lane, Portland, OR 97205
Online: Through your account settings page
We will respond to your request within 30 days and may need to verify your identity before processing.
8. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact us immediately.
9. International Data Transfers
BrewTopia is based in the United States. If you are accessing our Services from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the U.S. where our servers are located and our central database is operated. The data protection laws in the U.S. may differ from those in your country. By using our Services, you consent to the transfer of your information to the U.S. We use appropriate safeguards, such as standard contractual clauses, for transfers of personal information outside their country of origin.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on this page with a new "Last Updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our website before changes take effect
Your continued use of our Services after any modification to this Privacy Policy will constitute your acceptance of such modification.
11. Contact Us
Questions or Concerns?
If you have any questions about this Privacy Policy or our privacy practices, please contact our Data Protection Officer:
By Mail
BrewTopia Coffee Company
Attn: Privacy Officer
123 Coffee Lane
Portland, OR 97205
United States
For California residents: Please see our California Privacy Notice for additional disclosures required under the CCPA/CPRA.
For EU/UK residents: BrewTopia's representative in the EU can be contacted at eu-representative@brewtopia.com.
This Privacy Policy is effective as of October 26, 2024. For previous versions, please contact us.
BrewTopia Coffee Company is a registered trademark. All rights reserved.