Privacy Policy

This Privacy Policy explains what personal information Cairé Roasters (“we,” “us,” or “our”) collects when you visit this website or buy from us, how we use it, and the choices you have.

1. Information We Collect

1.1 Information You Provide Directly

When you place an order or interact with our website, we may collect:

• Contact information: your name and email address
• Shipping information: your mailing address and phone number (if provided for delivery purposes)
• Payment information: your credit or debit card details, which are collected and processed directly by our payment processor, Stripe, Inc. We do not store your full card number on our servers.
• Order details: the products you purchase, order history, and A Ordem preferences
• Communication: any messages, inquiries, or feedback you send to us via email

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information: browser type, operating system, and device type
• Usage data: pages visited, time spent on pages, referring URLs, and click patterns
• IP address: used for approximate geographic location and security purposes

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment: to process and ship your orders, send order confirmations, and provide tracking information
• Customer communication: to respond to your inquiries, send order updates, and tell you about changes to your A Ordem membership
• Website improvement: to understand how visitors use our website and make it better
• Marketing (with consent): to send promotional emails about new products, seasonal blends, or special offers. You may opt out at any time by using the unsubscribe link in any marketing email.
• Legal compliance: to comply with applicable laws, regulations, and legal processes
• Fraud prevention: to detect and prevent fraudulent transactions and protect the security of our website

3. Cookies and Tracking Technologies

We use cookies and similar technologies only to keep your cart and site settings on your device and to understand how visitors use our website. We do not use advertising cookies or tracking pixels from third-party ad networks.

Analytics cookies show us things like which pages are most popular, so we can improve the website. They collect aggregated, anonymous data.

You can block or delete cookies in your browser settings. If you do, parts of the website, such as your cart, may not work as expected.

4. Third-Party Service Providers

We share your personal information only with trusted third parties who help us run our business. They are contractually obligated to use it only for the purposes we specify and to protect it in line with this Privacy Policy.

4.1 Payment Processing

We use Stripe, Inc. to process all payments. When you make a purchase, your payment information is transmitted directly to Stripe over an encrypted connection. Stripe's use of your personal information is governed by their Privacy Policy. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payments industry.

4.2 Fulfillment and Shipping

We share your name, shipping address, and order details with the roaster and the print studio that make your order, and with shipping carriers (such as USPS, UPS, or FedEx), for the sole purpose of making and delivering it.

4.3 Analytics

We may use analytics services to understand website traffic. They collect information anonymously and report trends without identifying individual visitors.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may disclose your information in the following limited circumstances:

• Legal requirements: when required by law, subpoena, court order, or government regulation
• Safety and protection: to protect the rights, property, or safety of Cairé Roasters, our customers, or the public
• Business transfer: in connection with a merger, acquisition, or sale of all or a portion of our assets, in which case you will be notified via email or a notice on our website

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to satisfy legal, accounting, or reporting requirements.

Specifically, we keep order records and transaction data for at least seven (7) years for tax and accounting purposes, and communication records (emails, support inquiries) for up to three (3) years. If you ask us to delete your personal information, we will delete or anonymize it within 30 days, except where the law requires us to keep it.

7. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Opt-out: You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly.

To exercise any of these rights, email us at [email protected]. We will respond to your request within 30 days.

8. Data Security

We use commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data sent between your browser and our website is encrypted. However, no method of transmission over the Internet or of electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website and services are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will take steps to delete it as quickly as possible. If you believe a child under 13 has given us personal information, contact us at [email protected].

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business purpose for collecting it, and the categories of third parties with whom we shared it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised your rights.
• Right to Opt-Out of Sale: We do not sell your personal information. If this practice changes in the future, we will provide you with the ability to opt out.

To exercise your CCPA rights, contact us at [email protected]. We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

In the preceding twelve (12) months, we have collected the following categories of personal information: identifiers (name, email, address, phone), commercial information (purchase history), and internet activity (browsing behavior on our website).

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will update the “Last Updated” date at the top of this page. If we make material changes, we will notify you by email or by posting a prominent notice on our website.

12. Contact Us

Questions, concerns, or requests about this Privacy Policy or our data practices:

Cairé Roasters

Email: [email protected]

Oregon, United States