Privacy Policy

Introduction

Gourmet Choice LLC, doing business as Gourmet Choice Coffee ("Gourmet Choice Coffee," "we," "our," or "us"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you create an account, place an order, subscribe to our newsletter, or otherwise interact with our website and services.

By using our website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described here, please do not use our website.

Information We Collect

We collect different types of information in connection with your use of our website and services, including:

• Account Information: When you create an account, we collect information such as your name, email address, password (stored in hashed form), and any other details you choose to provide.
• Order and Shipping Information: When you place an order, we collect your contact details, billing and shipping address, order history, and related information necessary to process and fulfill your purchase.
• Payment Information: Payments are processed by our third-party payment processor, Stripe. We do not store your full credit card number or CVV on our servers. Stripe may collect and process your payment information in accordance with its own privacy policy.
• Newsletter and Marketing Information: If you subscribe to our newsletter or opt in to marketing communications, we collect your email address and any preferences you provide.
• Technical and Usage Information: When you visit our website, we may automatically collect information such as your IP address, browser type, device information, pages viewed, referring/exit pages, and timestamps. This may be collected via cookies and similar tracking technologies.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services: Including processing and fulfilling orders, managing payments and transactions, and delivering your coffee products.
• To manage your account: Enabling you to register, log in, view your order history, and update your information.
• To communicate with you: Sending transactional emails about your orders, account updates, security alerts, and responses to your inquiries.
• To send marketing communications: If you have opted in, we may send newsletters, special offers, and other marketing messages about Gourmet Choice Coffee. You can opt out at any time by using the unsubscribe link in our emails.
• To improve our website and offerings: Analyzing how our website is used to enhance the user experience, improve our products, and develop new features.
• To protect our business and users: Detecting, preventing, and responding to fraud, abuse, security risks, and other harmful activity.
• To comply with legal obligations: Meeting our obligations under applicable laws, regulations, and legal processes.

Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal data include:

• Performance of a contract: Processing necessary to fulfill our contract with you, such as when you place an order.
• Consent: Processing based on your consent, for example when you subscribe to our newsletter. You may withdraw your consent at any time.
• Legitimate interests: Processing for our legitimate interests, such as improving our website and services, provided these interests are not overridden by your rights and interests.
• Legal obligations: Processing necessary to comply with our legal obligations.

Cookies and Similar Technologies

We may use cookies and similar tracking technologies to recognize your browser or device, remember your preferences, understand how you use our website, and measure the effectiveness of our content. You can typically instruct your browser to refuse cookies or to indicate when a cookie is being sent. However, some parts of the website may not function properly without cookies. If we implement additional analytics or advertising cookies, we will update this Privacy Policy and, where required, obtain your consent.

How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

• Service Providers: We share information with trusted third-party service providers who help us operate our business and website, such as payment processing, hosting, email delivery, analytics, and logistics. These providers are authorized to use your information only as necessary to provide services to us.
• Stripe: We use Stripe to process payments securely. Stripe collects and processes your payment information in accordance with its own privacy policy. We recommend reviewing Stripe's privacy policy for more details on its practices.
• Supabase: We use Supabase to power certain aspects of our authentication and data storage. Supabase processes data on our behalf and is contractually obligated to protect your information.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal Requirements: When we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Gourmet Choice Coffee, our customers, or others.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements. The exact retention period may vary depending on the type of data and applicable legal requirements. When we no longer need your information, we will take reasonable steps to delete, anonymize, or securely store it.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data, including:

• Right of access: Request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to certain exceptions (for example, where we are required to retain data by law).
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances.
• Right to object: Object to our processing of your personal data based on legitimate interests, and to receiving direct marketing communications.
• Right to data portability: Request a copy of certain personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time, for example by unsubscribing from our emails.

You can exercise many of these rights by logging into your account to review and update your information. You may also contact us using the details in the "Contact Us" section below. We may need to verify your identity before fulfilling your request.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. Accordingly, we cannot guarantee its absolute security.

International Transfers

Our website is operated from the United States. If you access our website from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located. These locations may have data protection laws that are different from those in your jurisdiction. Where required by law, we will take steps to ensure that appropriate safeguards are in place to protect your personal data in connection with such transfers.

Children's Privacy

Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can delete the information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date at the top. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or if you wish to exercise your data protection rights, please contact us at: