Privacy Policy

Our Commitment to Your Privacy

At Northlight Coffee, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your data when you visit our website or use our services. We believe in transparency and want you to understand your rights and how you can control your information.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.

Information We Collect

Personal Information You Provide

When you interact with our website or services, you may voluntarily provide us with personal information, including:

• Contact Information: Name, email address, phone number when you fill out contact forms or subscribe to our services
• Account Information: Username, password, and preferences if you create an account
• Payment Information: Credit card details or other payment information processed securely through third-party payment processors
• Communication Data: Messages, feedback, and any other information you provide when contacting us

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior:

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on pages, links clicked, navigation patterns
• Cookies and Similar Technologies: Information collected through cookies and tracking pixels (see our Cookie Policy for details)

Legal Basis for Processing

We process your personal data based on: your consent when you provide information voluntarily, contractual necessity to fulfill our services, legitimate business interests such as improving our services and preventing fraud, and legal obligations including tax and accounting requirements.

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery and Communication

• Process and fulfill your coffee subscription or consultation requests
• Respond to your inquiries and provide customer support
• Send service-related notifications and updates about your subscriptions

Website Improvement and Analytics

• Analyze how visitors use our website to improve functionality and user experience
• Identify technical issues and optimize website performance
• Understand user preferences to better tailor our services

Marketing and Communications (With Your Consent)

• Send newsletters, promotional offers, and updates about our services
• Personalize content and recommendations based on your preferences
• Display relevant advertisements on third-party platforms

Security and Legal Compliance

• Protect against fraud, unauthorized access, and security threats
• Comply with legal obligations and respond to lawful requests
• Enforce our terms of service and protect our legal rights

How We Share Your Information

We do not sell your personal information. We may share your data with the following parties under specific circumstances:

• Service Providers: Third-party vendors who assist with payment processing, email delivery, website hosting, and analytics. These providers are contractually obligated to protect your data.
• Business Partners: Coffee roasters and suppliers necessary to fulfill your orders, who receive only the information required for delivery.
• Legal Requirements: Law enforcement, government authorities, or other parties when required by law or to protect our rights and safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

How We Protect Your Information

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Access Controls: Limited employee access to personal data on a need-to-know basis
• Secure Storage: Data is stored on secure servers with regular security audits
• Monitoring: Continuous monitoring for security breaches and suspicious activity

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account information is retained while your account is active and for a reasonable period afterward
• Transaction records are kept for accounting and tax purposes as required by law
• Marketing data is retained until you withdraw consent or we determine it's no longer necessary
• Analytics data is typically anonymized and retained for statistical purposes

Your Privacy Rights

You have several rights regarding your personal information. These rights may vary depending on your location, but generally include:

Right to Access

Request a copy of the personal information we hold about you and information about how we process it.

Right to Rectification

Request correction of inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your personal information when it's no longer necessary or if you withdraw consent.

Right to Data Portability

Receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

Object to processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Restrict Processing

Request limitation of processing under certain circumstances.

Right to Withdraw Consent

Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 days.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for more details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us through our contact form. We will process your request promptly and confirm when your data has been removed from our systems.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by regulatory authorities.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.