What we collect, why we hold it, and how to get it back or erased.

We collect only what an order, a subscription or a sample claim needs.

• Order and delivery details: first and last name, email, phone, shipping address, order notes, the items and roast levels you chose.
• Account details, if you create one: email address, password managed by our authentication provider, and the profile and address you save for faster checkout.
• Business details, if you buy as a business: business name, business type, business phone, website, purchase order, tax identification or resale certificate number. We collect these only for tax and wholesale records.
• Free sample claims: the same contact and address details, plus normalized versions of your name, email, phone and address that let us enforce one free sample per household.
• Support messages you send us by email.
• Basic technical data your browser sends to our hosting provider, such as the request time and general request information, used to keep the site available and secure.

We do not collect government identification, health information, precise location, or biometric data. We do not knowingly collect information from anyone under 18.

Card numbers are never stored on this site and never reach our database. When online card payment is enabled, it is handled by a payment processor that collects the card details directly and returns only a payment status to us. Until then, orders placed here are recorded as unpaid and settled with our team.

• To roast, pack, ship and track the coffee you ordered.
• To run subscriptions: to schedule the next shipment, and to apply pauses, skips and cancellations.
• To keep the free sample program fair by checking whether a household has already claimed one.
• To answer support requests and resolve delivery problems.
• To keep tax, accounting and wholesale records we are required to keep.
• To send marketing email only if you opted in, and only until you opt out.

We do not sell personal information, we do not share it for cross context behavioral advertising, and we do not use it to build advertising profiles.

This site uses browser storage for things the site cannot work without: your cart contents, your recent order numbers so you can track them, and a signed in session if you have an account. These are strictly necessary and are not used for advertising.

There are no advertising cookies, no third party ad pixels, and no cross site trackers on this site. If we add analytics later, this section will be updated before it goes live and a consent choice will be offered where the law requires one.

We share the minimum needed, with these categories of providers:

• Hosting, database, authentication and file storage providers that run this website and store the records described above.
• Shipping carriers, which receive the name and address on the label so the parcel can be delivered.
• The United States Census Bureau public geocoding service, which receives only the partial address text you type into the address field so it can suggest matching addresses. It does not receive your name, email or order.
• A payment processor, once online card payment is enabled.
• Our accountants and, where we are legally required, tax and law enforcement authorities.

We never sell or rent your details, and providers may use your information only to perform the service they were hired for.

• Orders and invoices: 7 years after the order date, for tax and accounting records.
• Accounts and saved profiles: For as long as the account is open, then 30 days after deletion.
• Free sample claims: Kept as a one time claim record so the free sample limit stays fair. Name, address and contact details are removed on request, and only the anonymous claim marker is kept.
• Support email: 24 months after the conversation ends.
• Marketing subscriptions: Until the subscriber opts out, then a suppression record only.

Wherever you live, you can ask us to do the following, and we will not treat you differently for asking:

• Get a copy of the personal information we hold about you.
• Correct anything that is wrong.
• Delete your information, except records we must keep for tax and accounting.
• Close your account. Deleting your account removes your saved profile and address.
• Opt out of marketing email at any time using the unsubscribe link or by writing to us.
• Cancel a subscription at any time, on your own, from the subscription management link. We do not require a phone call.

Residents of Washington DC, California, Colorado, Connecticut, Virginia and other states with consumer privacy laws have these rights under those laws, including the right to appeal if we refuse a request. Write to privacy@yourscoffee.example with the email address or order number you used. We answer within 45 days and will verify your identity before we release or erase anything.

Data is sent over encrypted connections and stored with access rules that limit each record to the customer it belongs to and to authorized staff accounts. Staff access is role based, individual, and can be revoked. We do not claim any certification or audit; this section describes controls that are in place today, not a guarantee against every possible incident. If a breach affects your information, we will notify you and the authorities as required by law.

If this policy changes in a way that affects you, we will update the effective date and, for material changes, tell account holders by email. Questions and requests go to privacy@yourscoffee.example or Yours Cafe, 2619 Connecticut Ave NW, Washington, DC 20008. See also our Terms of sale.