Privacy Policy

Cairé Roasters (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you visit our website (currently at https://caire-coffee.pages.dev, transitioning to caireroasters.com) or make a purchase.

1. Information We Collect

1.1 Information You Provide Directly

When you place an order or interact with our website, we may collect:

• Contact information: your name and email address
• Shipping information: your mailing address and phone number (if provided for delivery purposes)
• Payment information: your credit or debit card details, which are collected and processed directly by our payment processor, Stripe, Inc. We do not store your full card number on our servers.
• Order details: the products you purchase, order history, and subscription preferences
• Communication: any messages, inquiries, or feedback you send to us via email

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information: browser type, operating system, and device type
• Usage data: pages visited, time spent on pages, referring URLs, and click patterns
• IP address: used for approximate geographic location and security purposes

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment: to process and ship your orders, send order confirmations, and provide tracking information
• Customer communication: to respond to your inquiries, send order updates, and notify you of changes to your subscription
• Website improvement: to analyze how visitors use our website and improve the user experience
• Marketing (with consent): to send promotional emails about new products, seasonal blends, or special offers. You may opt out at any time by using the unsubscribe link in any marketing email.
• Legal compliance: to comply with applicable laws, regulations, and legal processes
• Fraud prevention: to detect and prevent fraudulent transactions and protect the security of our website

3. Cookies and Tracking Technologies

We use cookies and similar technologies solely for analytics purposes to understand how visitors interact with our website. We do not use advertising cookies or tracking pixels from third-party ad networks.

Analytics cookies help us understand visitor behavior (such as which pages are most popular) so we can improve our website. These cookies collect aggregated, anonymous data.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling cookies may affect your experience on our website. For more information, consult your browser's help documentation.

4. Third-Party Service Providers

We share your personal information only with trusted third parties who assist us in operating our business. These third parties are contractually obligated to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.

4.1 Payment Processing

We use Stripe, Inc. to process all payments. When you make a purchase, your payment information is transmitted directly to Stripe over an encrypted connection. Stripe's use of your personal information is governed by their Privacy Policy. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payments industry.

4.2 Shipping

We share your name and shipping address with our shipping carriers (such as USPS, UPS, or FedEx) for the sole purpose of delivering your orders.

4.3 Analytics

We may use analytics services to help us understand website traffic and usage patterns. These services collect information anonymously and report website trends without identifying individual visitors.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose your information in the following limited circumstances:

• Legal requirements: when required by law, subpoena, court order, or government regulation
• Safety and protection: to protect the rights, property, or safety of Cairé Roasters, our customers, or the public
• Business transfer: in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you will be notified via email or a notice on our website

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal, accounting, or reporting requirements.

Specifically, we retain order records and transaction data for a minimum of seven (7) years for tax and accounting purposes. Communication records (emails, support inquiries) are retained for up to three (3) years. If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Opt-out: You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly.

To exercise any of these rights, please email us at hello@caireroasters.com. We will respond to your request within 30 days.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using TLS (Transport Layer Security). However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us at hello@caireroasters.com.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business purpose for collecting it, and the categories of third parties with whom we shared it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.
• Right to Opt-Out of Sale: We do not sell your personal information. If this practice changes in the future, we will provide you with the ability to opt out.

To exercise your CCPA rights, please contact us at hello@caireroasters.com. We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (name, email, address), commercial information (purchase history), and internet activity (browsing behavior on our website).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the “Last Updated” date at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice on our website. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Cairé Roasters

Email: hello@caireroasters.com

Colorado, United States