Data Protection & Transparency

Privacy Policy & Data Governance

Our clear commitment to protecting your personal data, order records, and shopping security across our specialty coffee platform.

Effective Date: September 25, 2026 Compliance: PIPEDA & GDPR Aligned Version: 3.2

01. Overview & Scope

Welcome to Cargos Coffee. We are committed to safeguarding the privacy and confidential personal data of our customers, roastery visitors, and online patrons. This Privacy Policy outlines the standards, protocols, and protective procedures we implement when you interact with our digital marketplace, purchase artisanal whole-bean coffee, or utilize our specialized brewing equipment services.

By accessing our platform or purchasing our roasted selections, you acknowledge and agree to the practices described in this document. If you have any inquiries regarding this policy, you may refer to our Terms of Use or contact our designated data compliance officers.

02. Information We Collect

To facilitate accurate roasting fulfillment, secure checkout operations, and seamless delivery logistics, we collect specific categories of personal and transactional information:

Personal Identifiers

Full name, billing address, shipping destination, active email address, and direct telephone contact for order verification.

Payment Credentials

Tokenized transaction payloads handled directly via PCI-DSS compliant payment gateways. We never store raw card numbers.

Order & Preference Data

Roast profile choices, grind size settings, subscription frequencies, basket logs, and past invoice records.

Device & Network Logs

IP address, browser architecture, device identifiers, regional timezone, and navigation activity across our catalog.

03. How We Process Your Data

We process collected information based on legitimate commercial interests, contractual necessity, and explicit statutory consent. Primary operations include:

  • Order Logistics & Delivery: Processing your selected coffee beans, accessories, and subscriptions via verified regional parcel carriers as detailed in our Delivery Information.
  • Customer Care & Communication: Providing roast batch notifications, delivery updates, and responding to support tickets through our Contact Desk.
  • Security & Fraud Prevention: Validating transactions, defending our website perimeter against malicious automated attempts, and maintaining catalog stability.
  • Service Enhancement: Analyzing aggregate viewing habits to optimize bean availability, origin curation, and regional inventory management.

04. Third-Party Disclosure

Cargos Coffee does not sell, rent, or trade your personal records to third-party marketing brokers. Disclosure is restricted strictly to vetted technology and logistical partners who facilitate our operations:

Fulfillment Partners & Couriers

Trusted courier networks receive your shipping recipient details and address solely for package dispatch, routing, and doorstep delivery.

Payment Processors & Banking Gateways

Encrypted endpoints receive payment validation tokens to settle balances under strict security standards, adhering to our Refund Policy and billing terms.

05. Cookies & Local Storage

Our web infrastructure utilizes session identifiers, secure HTTP cookies, and modern browser local storage technologies. These files enable shopping basket persistence across browser sessions, remember grinding preferences, and record anonymous telemetry regarding site performance.

You have the option to configure your browser parameters to reject cookies or notify you prior to placement. Please note that disabling essential cookies may impact store checkout mechanics and shopping basket preservation. For legal specifics, please see our Disclaimer.

06. Your Privacy Rights

Under applicable consumer data protection legislation (including Canadian privacy frameworks and global data privacy standards), you maintain the following rights regarding your records:

Right to Access

Request a comprehensive copy of all personal records and transaction logs stored in our roastery database.

Right to Rectification

Update or correct outdated recipient information, billing locations, or coffee preference profiles.

Right to Erasure

Request permanent deletion of non-essential profile data, subject to statutory tax and invoice retention laws.

Right to Object

Withdraw consent for non-essential processing, statistical telemetry, or automated updates at any moment.

07. Data Security & Retention

We enforce industry-standard 256-bit SSL encryption across all digital communication layers. Our database repositories are sheltered behind hardened web application firewalls and undergo regular vulnerability evaluations. Order and invoice history are retained solely for the duration mandated by financial accounting statutes and consumer protection periods, after which data is safely anonymized or permanently purged.

08. Inquiries & Data Requests

If you wish to submit an access request, exercise your statutory privacy rights, or inquire about data governance practices at Cargos Coffee, please consult our support team:

Privacy & Compliance Office

Inquiries are processed within 1 to 3 standard business days.

Get in Touch