Privacy Policy

1. Scope

This Privacy Policy applies to personal information we collect:

• On our website (the “Website”), including our online store and subscription service;
• When you place an order, start or manage a coffee subscription, or create an account;
• When you sign up for our email list or other marketing communications;
• When you contact us by email, phone, social media, or otherwise;

Together these are our “Services.” This policy does not apply to information collected by third parties, including websites, apps, or social media platforms that link to or from our Website. Their own privacy policies govern how they handle your information.

This policy does not cover information about businesses we buy from or sell to wholesale, except to the extent it concerns an individual acting in a personal capacity.

2. Information We Collect

“Personal Information” means information that identifies, relates to, or could reasonably be linked to you, your household, or your device.

Information You Give Us

• Contact and identity information: name, email address, phone number, and billing and shipping addresses.
• Account information: username, password (stored in hashed form), and account preferences.
• Order and subscription information: products purchased, grind and roast preferences, subscription frequency, delivery schedule, order history, and gift messages.
• Payment information: Payments are processed by our third-party payment processor(s), such as Stripe. We do not store your full card number. We may receive limited payment details, such as card type, the last four digits, expiration date, and billing ZIP code, and a token that lets your processor charge recurring subscription payments.
• Communications: messages, reviews, feedback, survey responses, and anything else you choose to send us.

Information Collected Automatically

• Device and usage information: IP address, browser and device type, operating system, pages viewed, links clicked, referring website, and the date and time of your visit.
• Approximate location: general location (such as city or region) inferred from your IP address. We do not collect precise GPS location.
• Cookies and similar technologies: see Section 4.

Information From Third Parties

• Payment processors (for example, confirmation that a payment succeeded or failed).
• Shipping carriers (for example, delivery status or address corrections).
• Analytics and advertising partners, and social media platforms when you interact with our pages.

We do not knowingly collect sensitive information such as Social Security numbers, government ID numbers, health information, or precise geolocation, and we ask that you not send it to us.

3. How We Use Personal Information

We use Personal Information to:

• Process, roast, ship, and deliver your orders, and send order and shipping confirmations;
• Set up, bill, renew, pause, change, and cancel subscriptions, and remind you about upcoming renewals;
• Create and maintain your account;
• Respond to your questions and provide customer service;
• Send marketing emails, new-release announcements, and offers, if you have signed up (you can unsubscribe at any time);
• Understand how visitors use our Website and improve our products and Services;
• Show you relevant advertising;
• Keep our Website and transactions secure and detect, prevent, and investigate fraud or misuse;
• Comply with legal, tax, and accounting obligations, and enforce our Terms of Service; and
• For any other purpose we describe to you when we collect the information, with your consent.

We will not use Personal Information for materially different or unrelated purposes without notifying you and, where required by law, obtaining your consent.

4. Cookies, Analytics, and Advertising

We and our service providers use cookies, pixels, and similar technologies to:

• Operate the Website (for example, keep items in your cart, keep you logged in, and process checkout). These are necessary for the store to work.
• Measure and improve the Website using analytics tools such as Google Analytics.
• Advertise: advertising partners such as Meta Pixel / Google Ads may use cookies or pixels to measure ad performance and show you our ads on other sites and apps.

You can block or delete cookies through your browser settings. Blocking necessary cookies may prevent the cart or checkout from working. We honor Global Privacy Control (GPC) browser signals as a request to opt out of targeted advertising for that browser. We do not otherwise respond to “Do Not Track” signals.

5. How We Share Personal Information

We do not sell your Personal Information for money. We share Personal Information only as described below.

Service providers. We share information with companies that help us run our business, under contracts that limit their use of it to providing services to us. These include:

• Website hosting: Bluehost;
• E-commerce and subscription software: WordPress and WooCommerce, including the Subscriptions for WooCommerce plugin by WP Swings;
• Payment processing;
• Shipping and fulfillment;
• Email marketing;
• Analytics and advertising.

Advertising partners. When advertising cookies or pixels are active on our Website, information about your browsing may be disclosed to advertising partners. Under some U.S. state laws, this may be considered “sharing” or “targeted advertising.” You can opt out as described in Section 10.

Legal and safety. We may disclose information if required by law, subpoena, or court order, or when we believe in good faith that disclosure is needed to protect our rights, your safety, or the safety of others, or to investigate fraud.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of all or part of our business, Personal Information may be transferred as part of that transaction, subject to this policy or one at least as protective.

With your consent. We share information in other ways when you ask us to or agree to it.

6. Subscriptions and Recurring Payments

If you sign up for a subscription, we store your delivery schedule and preferences and a payment token from our processor so that we can charge you automatically at each renewal. Billing, renewal, and cancellation terms are set out in Section 4 of our Terms of Service. You can view, pause, change, or cancel your subscription at any time from “My Account” on our Website, or by emailing info@dukescoffeesroasters.com. Cancelling stops future charges; we keep your order history as described in Section 7.

7. Data Retention

We keep Personal Information only as long as needed for the purposes described in this policy, including to fulfill orders, maintain your account and subscription, and meet legal, tax, and accounting requirements. For example:

• Order and transaction records are kept for 7 years for tax and accounting purposes;
• Account information is kept until you close your account or ask us to delete it;
• Email marketing information is kept until you unsubscribe or ask us to delete it;
• Analytics data is kept for 14 months, the period set in our analytics tool.

When information is no longer needed, we delete it or de-identify it.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect Personal Information, including encrypted (HTTPS) connections on our Website and relying on our payment processor to handle card data. No website or data transmission is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us right away.

9. Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect Personal Information from them. If we learn that we have collected information from a child under 13, we will delete it. If you believe a child has given us information, please contact us.

10. Your Choices and Rights

Choices Available to Everyone

• Marketing emails: click “unsubscribe” in any marketing email or contact us. We will still send transactional messages such as order and shipping confirmations and subscription renewal notices.
• Account information: you can review and update your information in “My Account” or by contacting us.
• Cookies: see Section 4.
• Deletion: you can ask us to delete your account and Personal Information, subject to records we must keep by law.

Additional Rights for Residents of Certain U.S. States

Depending on where you live (for example, California and other states with consumer privacy laws), and to the extent those laws apply to us, you may have the right to:

• Know what Personal Information we have collected about you and how we use and disclose it;
• Access and receive a copy of your Personal Information;
• Correct inaccurate Personal Information;
• Delete your Personal Information, subject to legal exceptions;
• Opt out of the sale or sharing of Personal Information, or its use for targeted advertising; and
• Not be discriminated against for exercising these rights.

To make a request, contact us using the details in Section 13. We will need to verify your identity before responding, usually by matching information you give us with information we already have. You may use an authorized agent; we may ask for proof that the agent is authorized and may ask you to confirm your identity directly. If we deny your request, you may appeal by replying to our decision, and we will respond within the time the law requires.

11. Where We Process Information

We are based in the state of California and our service providers may process and store information in the United States and other countries. Those countries may have data protection laws different from those where you live. We take steps to protect your information as described in this policy wherever it is processed.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last Updated” date above. If we make material changes, we will notify you by email (if we have your email address) or by a notice on our Website before the change takes effect. Where the law requires your consent for a new use of your information, we will ask for it.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Duke’s Coffee Roasters

Attn: Privacy

Email: privacy@dukescoffeesroasters.com