Privacy policy

Effective Date: [November 6, 2023]

Thank you for shopping through our website at www.toasttocoffee.com. This Privacy Policy (“Policy”) explains the information we collect when you use the website and/or shop with us, including how we collect the information, how we use it, how we safeguard it, your rights, and other important disclosure about our data protection practices. 

Please, review this Policy to understand our practices. By accessing the website and shopping from us, you agree to this Policy. 

 

1. Information About Us

The collection and handling of your information when you use the website and order coffee beans are handled by us, Toast To Coffee, LLC (“Toast To Coffee”). We handle and process your information on our servers in the United States and in accordance with all applicable privacy laws. We also determine how the third parties we hire handle and process your information on our behalf. 

If you have any question regarding how we handle your information or your privacy, do not hesitate to contact us at using the information on the "Contact" section of the website. 

 

2. Information Collection

We collect personal and non-personal information in various ways, and we majorly collect this information to identify you, communicate with you, fulfill your orders, monitor the website, comply with the law, and improve our services. The information collected and the various ways it is collected includes:

2.1 The information you give us: We collect the information you willingly give us when you fill forms on the website. This information is mostly personal, and it may include, without limitation, your name, email address, phone number, home address, billing and payment method, and picture. You may give us this information when you fill out form, such as the checkout form, shipping address form, payment method form, account creation form, contact us form, survey and feedback form, etc., or when you leave review, feedback, or comment. 

Some of this information may include sensitive personal information, as determined by applicable law (for example, your financial information). We take special attention to financial information. This is why your payment method information is handled solely by our trusted third-party payment processors who comply with all industry-required practices. 

2.2 The information we collect automatically: Aside from the information you willingly give us, we also collect certain information automatically when you take actions, such as accessing the website and clicking certain pages and content. The information we collect automatically contain mostly non-personal information (i.e., information that is hashed or not directly pointing to you). We collect this information automatically with the help of third-party tools like Google Analytics and tracking technologies such as cookies, beacons, and pixels. You can learn more about what cookies and other tracking technologies are, how we use them, and how you can control them by reviewing our Cookies Policy. 

The information we may collect automatically include information about your device, including the geolocation, IP address, browser type, and other device properties; details of any transaction you perform, including the quantity of item purchased, amount paid, and date and time; and your use of the website, including the pages and products you view, your search terms, referring website, duration of use, and your preferences. 

 

3. Legal Bases for Collection

We rely on the following legal bases when we collect personal information about you:

3.1 Consent: We may collect personal information about you in some cases where you have given verifiable consent. This may include, for example, where you subscribe to receive marketing emails (newsletters) from us about offers, bonuses, and promotions. 

3.2 Contract performance: We rely on certain information, such as your payment method, shipping address, and contact information, about you to provide you with our services. This means that we need this information to provide and deliver your orders. For example, without your shipping address, we have no way of delivering your coffee. 

3.3 Legal obligation: We collect certain information (for example, the details of your transaction) to comply with our legal obligation, including to keep records as required by law and meet tax compliance. 

3.4 Legitimate interest: We collect certain information, such as analytics, usage, and device information to fulfill our legitimate interest in way that it does not affect your rights. This may include where we collect information to identify you, monitor the website for violations, prevent fraud, make certain features work, improve our services, and secure the website. 

 

4. Information Uses

We use the information we collect for the following purposes:

• When you order from us, we collect the information you submit to enable us to take your order, receive your payment, communicate with you, and deliver your order to you safely. 

• If you create an account, the information collected is used to identify you, personalize the service, store your information, and improve your experience.

• We collect your email address and phone number to establish a two-way communication between you and us. This includes responding to your inquiries, notifying you about updates to your orders, sending you newsletters, verifying your account, and sending you administrative messages. 

• We collect analytics and usage information to enable us to gather how people interact with our website, learn about sales, and navigation around the website. This information helps us to improve the website and services, and it helps our marketing campaigns. 

• We collect device properties to identify your geolocation and personalize the website to you (for example, learning about your geolocation helps us to tailor the website to your location). 

• We also collect device properties to detect fraud and block access to users whose use do not comply with our Terms and Conditions. 

• We collect information about your comments and feedback to gather research about your use of our services. 

• We collect information to comply with our legal obligations (such as to keep record as set by applicable laws).

5. Information Sharing

We may share the information we collect in the following circumstances:

5.1 Service providers: We engage third-party service providers to perform certain business-related tasks, including website hosting, payment processing, order delivery and fulfillment, data analysis, email sending, marketing, fraud prevention, and data storage. These third parties may access your information to provide their services, but they are under obligation to maintain confidentiality. 

5.2 Other website users: If you post a comment, review, or feedback on the website, other website users may see the name associated with your account. 

5.3 Regulatory authorities and law enforcement: We may share information with law enforcement and government agencies as required by law – including without limitation – in response to legal requests by public authorities to meet national security, or in response to legal summonses. 

We may also disclose information to law enforcement officials, government agencies, and public and private offices if we, in our discretion, believe it is necessary to attend to claims or legal proceedings, or if it is necessary to investigate where it requires the protection of our rights and properties or those of others. 

5.4 Other entities in a business transaction: We may enter a business transfer transaction with other entities, including mergers, acquisitions, consolidations, and sale of assets, or an event of bankruptcy. In that case, we may be obligated to share proprietary and secret information with the other entities. 

5.5 Other entities during a sweepstake: We may offer sweepstakes, contests, and promotions that are sponsored by other entities. These programs may require you to register with the sponsors before participation. 

 

6. Email Marketing 

We may send you emails regarding deals, discounts, bonuses, and promotions about our coffee products that we think may match your interest to your email address. By submitting your email address in the newsletter submission form or ticking the consent box on the checkout page, you are opting in to receive these emails from us. And we will continue to send you these emails until you exercise your right to opt out. You can opt out by using the opt out instructions – more likely an unsubscribe button – at the bottom of any email we send to you. 

Please, be aware that marketing emails are different from administrative messages (necessary messages such as about your orders). Therefore, even if you opt out of marketing emails, it will not stop administrative messages. 

 

7. Information Security

We take the security of your information very seriously and implement reasonable security measures to safeguard it from unauthorized disclosure, access, alteration, and use. We do not disclose information to any third party except as described in this Policy. 

We utilize Shopify as a platform for many tasks, including data storage, payment processing, and website hosting. Shopify is a trusted platform with track record of confidentiality and safety. When you submit payment method information on the website, you are submitting directly to the applicable payment processor. This ensures additional protection to your information.

However, you understand that no method of information transmission over the internet is entirely secure. Therefore, we cannot guarantee that the information you provide when you use the website is completely secure from unauthorized access. 

 

8. Information Retention

We will retain your information on our database for as long as necessary to fulfill the purposes for which we collect it – unless a longer retention period is required under applicable laws. If you create an account, we will keep the information until your account is terminated. We will also retain your order information for as long as necessary to process and deliver your orders, handle returns, and provide customer support. We may retain your information for a reasonable period of time to meet our record-keeping obligations and any potential issues in the future. 

 

9. International Transfer

We process and store personal information from our location in the US. However, we may transfer personal information to our third-party service providers in locations outside of the US. This means that if you share information with us from another location, we may transfer it to countries with variations in privacy laws. However, we always ensure these third parties practice adequate data protection. 

If you are sharing your information with us from countries under the General Data Protection Regulation (GDPR), including the European Union (EU), European Economic Area (EEA), and United Kingdom (UK), we rely on the approved data transfer mechanism provided by the European Commission, including, where relevant, using Standard Contractual Clauses. 

 

10. Children Privacy 

We do not knowingly collect personal information from users under 13 years of age (or the age of consent in your location). If you are under the applicable age and are purchasing from us and submitting personal information, you acknowledge that it is based on the approval of at least a parent or legal guardian. 

 

11. User Privacy Rights

In addition to other rights described in this Policy, you have the following rights regarding how we handle and process your information:

• Refusal: You do not have any statutory obligation to provide us with any personal information. However, if you do not provide us with the information, we may not be able to provide our services (for example, we will be unable to ship your order without your shipping address). 

• Access and Correction: You can request to access the information we hold about you, as well as adjust it where relevant at any time. If you have an account, you can use the editing function to correct any inaccurate information. If you do not have an account, you can reach out to us at using the information on the “Contact” page to change any order information. 

• Deletion: You can request to delete any information you have provided to us at any time. Account owners can use the deletion button under the account settings. In other instances, you can reach out to us by using the “Contact” page to request the deletion of your information. Please, note that the deletion of any information may not be possible if we are required by law to retain the information, or we need it for an active investigation. 

 

• Withdrawal of Consent: If the processing of any information is based on your consent, you have the right to withdraw your consent at any time. 

• Restriction: The right to have the processing of your personal information restricted. This may include where you believe the data is inaccurate; the data is no longer needed, but you need it retained for specific purposes; you believe the processing is unlawful. 

• Objection: The right to object to the processing of your personal information, including for marketing. 

• Data portability: The right to a data portability request, wherein we will transfer your data to another service provider in a portable, usable format without it affecting the data’s use. 

• Reporting: The right to report us to any Supervisory Authority in your region if you think we are unlawfully processing your data. 

You can contact us using the “Contact” section on the website to exercise any of the rights above. 

 

12. California Consumers

If you use our services from and reside in the State of California, you have this additional disclosure with respect to your personal information. 

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you (or your authorized agent) with additional rights to the rights above. These rights include: 

• The right to know the categories of information we have collected, the sources, reasons for collection, and the third parties we have shared them with in the past 12 calendar months. 

• The right to opt out of the “sale” to or sharing of your personal information with third parties for their direct marketing purposes. Please, note that Toast To Coffee does not engage in practices described as a sale of personal information. 

• The right to exercise your rights as a California consumer without discrimination against you. 

• The right to limit our use of sensitive information. Please, note that your payment method and financial information is merely used to process your payments and issue a receipt of purchase.  

You can exercise your rights under the CCPA/CPRA by reaching out to us using the “Contact” section of the website. 

DNT Signals: Your web browser may have a DNT feature, which when enabled, transmits a notice to website owners that you do not want your online activities tracked.  Toast To Coffee does not currently respond to the DNT signals because it is not universally accepted among industry participants.

 

13. Rights applicable to users in Nevada 

If you submit personal information to us from Nevada, you can request to opt out of your personal information being sold or licensed to third parties and for that third party to sublicense or resell to additional third parties for monetary consideration. Fortunately, Toast To Coffee does not sell or license personal information for monetary consideration. However, Nevada law allows you to request an opt out of any future sale of your personal information. You can make this request by reaching out to us using the information on the “Contact” section of the website.  

 

14. Third-Party Service Providers

As highlighted, we work with third-party service providers who help with certain tasks. Some of these third-party service providers and their tasks include:

• Shopify: They help us with multiple services, including website hosting and payment processing. They may also collect information, such as analytics and payment method, directly when you use our services. You can learn about Shopify’s privacy practices here. 

• Klaviyo: They provide us with a software that allows us to engage with customers via marketing messages. They also help us to personalize our offers to customers based on analytics. You can learn about Klaviyo’s privacy policy here. 

• Google: We use certain services provided by Google, especially Google Analytics. This tool focuses on gathering analytics, including your device properties, your search terms, interests, and behavior on the website. Please, note that you can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Ad-On on your browser. You can also learn more about Google’s privacy policy here. 

 

15. Third-Party Links

The website may contain links and content that lead to third-party websites and services. Toast To Coffee is not responsible for the privacy practices of any third-party links or content available through the website. You should review the privacy policies of third parties before submitting personal information to them. 

 

16. Modifications

We reserve the right to review and modify this Policy for any reason, including changes in applicable laws or any of our services. Any modifications to this Policy become effective immediately after we post and it on this page. The Effective Date above will be changed the day the modification becomes effective. We may notify you of such modifications via your email address or a notice on the website. 

By using the website and/or purchasing from us after any modifications to this Policy, you consent to the modifications made. 

 

17. Contact us

If you have any questions or issues with the disclosures in the Policy, or you believe we are unlawfully processing and handling your information, please use the “Contact” section of the website to reach out to us. We are always ready to assist you further.