Draft for review. This policy hasn't been reviewed yet. Highlighted items are still to be filled in.
Privacy policy
The short version
- If you join the waitlist, we keep your email address and the priorities you ticked.
- We use them to email you when the CoffeeCentric beta opens, and to decide which brands to add first.
- We don't sell your data, share it for advertising, or use cookies or tracking on this website.
- You can ask us to remove you from the list at any time.
Who we are
CoffeeCentric is run by [legal name of the person or business], [address] (“we”, “us”). We are responsible for your personal data as described here (the “controller” under the EU and UK General Data Protection Regulation). Contact us about privacy at [contact email, e.g. privacy@coffeecentric.app].
What we collect
| Data | When | Why |
|---|---|---|
| Your email address | When you join the waitlist | To email you when the beta opens |
| The priorities you tick (for example Organic or Fair Trade), if any | When you join the waitlist | To see which labels matter to people, so we add the most useful brands first |
| Which sign-up form you used, and when you signed up | When you join the waitlist | To keep the list in order and understand how people find us |
| Technical data such as your IP address and browser type | Whenever you visit the site | Our hosting provider processes this to deliver the page and protect it from abuse. We don't use it to identify or track you |
We don't collect your name, location or payment details on this website. The site uses no cookies, analytics or advertising trackers, and serves its fonts and images itself, so visiting it doesn't send your data to font or advertising services.
Our legal basis
We rely on your consent: you choose to join the waitlist. You can withdraw it at any time by asking us to remove you (see “Your rights”). Withdrawing doesn't affect anything we did before you asked. For the technical data our host processes to keep the site running and secure, we rely on our legitimate interest in providing a working, safe website.
Who handles your data for us
We use two service providers (“processors”) that handle data only on our instructions:
- Supabase stores the waitlist in a database hosted by Amazon Web Services in the United States (Northern California).
- Cloudflare hosts this website and delivers it to you from its global network.
Because these providers may process data in the United States, your data may be transferred outside the European Economic Area, the UK and Canada. These transfers are protected by [the safeguards that apply, e.g. each provider’s data processing agreement with the European Commission’s Standard Contractual Clauses, and/or certification under the EU–US Data Privacy Framework — to be confirmed].
We never sell your personal data, and we don't share it with anyone for advertising or marketing.
How long we keep it
We keep your waitlist sign-up until the beta opens and we've emailed you, and for no longer than [period, e.g. 12 months after the beta opens] afterwards, unless you create a CoffeeCentric account. If you ask to be removed, we delete your sign-up within [period, e.g. 30 days].
Your rights
Depending on where you live, you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct it;
- delete it, or remove you from the waitlist;
- restrict or object to how we use it.
To use any of these rights, email [contact email] from the address you signed up with. We'll reply within one month. If you're in the EU, EEA or UK and aren't happy with our answer, you can complain to your local data protection authority.
[Reviewer: add sections for other places you accept sign-ups from, e.g. California (CCPA) or Canada (PIPEDA, and Quebec’s Law 25), as advised.]
Children
The waitlist isn't meant for anyone under [16]. If you think a child has signed up, contact us and we'll delete the sign-up.
Changes to this policy
If we change how we use your data, we'll update this page and the date at the top. If the change is significant, we'll email people on the waitlist before it takes effect.