Privacy Policy

>>Go here for California Transparency Act Policy

Effective as of July 1, 2024
Last Revised as of May 27, 2025

Community Coffee Company, L.L.C., (“Community Coffee”, “our”, “us” or “we) is a Louisiana-based coffee company that sells coffee directly to consumers from the Carolinas to Texas by having its product on re-seller shelves, internationally and nationally through its website and through Amazon, Wal-Mart, and other third-party website distribution.

We at Community Coffee know that our users care how their personal information, which we also mean to refer to as “personal data” as that term is defined under certain applicable consumer privacy protection laws, is used and shared, and we take your privacy seriously.

1. INTRODUCTION TO OUR PRIVACY POLICY

This Privacy Policy describes our privacy practice and how we handle your data that we handle through our website https://www.communitycoffee.com (“Website”), products, services, social medial, marketing activities, and other ways described in this Privacy Policy (collectively, the “Services”). This Privacy Policy supplements our Terms of Use and vice versa.

You must be 18 or older to use our Services. Minors under 18 and at least 13 years of age are only permitted to use our Services through an account owned by a parent or legal guardian with their appropriate permission and under their direct supervision. No one under the age of 13 may use our Services. We do not knowingly collect or solicit information from anyone under the age of 13 or knowingly allow such persons to register for the Service.

We do not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register for the Services. If you are under 13, please do not attempt to register for the Services or send any information about yourself to us, including your name, address, telephone number, or email address. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at [email protected].

By visiting or using Website or the Services, you will be providing us or allowing us to collect information, which may include personally identifiable information, and also personally consent to the collection, use and transfer of your information under the terms of this Privacy Policy.

WHAT INFORMATION WE COLLECT

Information You Provide to Us

You don’t have to create an account to use some of our Services. However, you may create an account or subscribe to receipt email notifications of promotions and other offerings by providing us certain information, such as your contact information including your name, telephone number, email and physical address and by providing us financial information sufficient to allow us to contact you or otherwise charge you for products. You may also create an account with us by providing us your contact information and by creating a username and password.

If you are paying for any of our Services, standard payment and billing information is required. We do not require users to provide their race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, physical or mental health, sexual orientation or criminal record in their account. Please do not post or add personal data to any information sheet, inquiry, survey, online form, or other content that you provide to us that you would not want to be publicly available, otherwise, you consent to our use of that information as set forth in this Privacy Policy.

Depending on which Services you choose to use, additional information may be collected and stored, if necessary in order for us to provide a particular Services. Such information includes:

contact information, such as name, email, address, country/province/state, and phone number;
financial information for billing purposes;
transactional information based on your activities on the Website;
shipping, ordering, billing and other similar information you provide to purchase or ship an item;
computer sign-on data, time and date data, statistics on page views, your IP address, your GPS location, the type of computing environment you use, and traffic to and from the Website (including data about you whenever you interact with the Website, such as when you search, click on links, send messages, make comments, replies or queries, and select best replies)
other technical information or data collected from Website traffic, including IP address and standard web log information and information gathered from cookies, beacons and other mechanisms;
supplemental or additional information we may request from you in the event previous information you’ve provided cannot be verified;
information that you opened or otherwise interacted with an email and what email you opened or otherwise interacted with; and
other information that you voluntarily provide to us.

Information Collected Automatically By Us / Our Policy Regarding Cookies

The Website uses cookies to help keep track of items you put into your shopping cart including when you have abandoned your cart and this information is used to determine when to send cart reminder messages via SMS.

Click HERE for our Cookie Policy.

Information from Third Parties and Advertisers

We work with third party advertisers, networks, and service providers who assist us in managing or providing the Services (e.g., payment processors) and who collect some of the information described above. These third parties also help us understand how users interact with our content or offerings. We may also collect contextual or demographic data about our users from third parties, in order to more effectively deliver the Services or content in which we think you would be interested. Unless you have been notified otherwise, all information collected through our authorized third party service providers remains governed by security and confidentiality obligations consistent with this Policy and applicable law.

Using Other Sites to Login to our Websites or Services

Some users may choose to connect to our Website or Services using third-party account credentials (for example, your Facebook login or YouTube account). If you choose to connect your account using a third-party account, you understand some of your Information may be shared with us or the respective third-party platform. Your information may also be subject to separate policies of such third-party platform. You should review those policies before providing consent. Connecting your account to third-party applications or services is optional. You can revoke this permission anytime in your account settings.

Advertisements

Some of our Services allow advertisers and their networks to collect and use certain anonymous Information about you (e.g. click stream information, browser type, time and date, subject of advertisements clicked or scrolled over) in order to provide advertisements of interest to you. These companies typically use a cookie or third party web beacon to collect this information. To learn more about this behavioral advertising practice or to opt-out of this type of advertising, you can visit networkadvertising.org.

Other

Our Services are dynamic, and we often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we use your data, we will notify you and may also modify this Privacy Policy.

WHY WE COLLECT AND HOW WE USE YOUR INFORMATION

We collect information you choose to share with us and our partners for a number of reasons, the primary ones of which are so we can provide you with a more customized experience and so we can determine products and services that you might be interested in and bring those to your attention.

How we use your information will depend on which Services you use, how you use those Services and the choices you make in your settings. The primary reason we collect information is to provide and improve our Services, to allow us to work with our partners who contract with us to provide marketing services for their products and services, and to provide you with a more customized experience on our Services.

The following is a summary of more specific ways we may use your personal information:

To deliver the Services to you;
To correspond and communicate to you with respect to delivering the Services;
To notify you about any changes to our Services to you;
To allow you to participate in the Services;
We use credit/debit card information solely to collect payment from you and we use a third-party service provide to manage that processing and it is not permitted to store, retain, or use that information except for the sole purpose of processing credit/debit information on our behalf;
To provide payment processing and account management, operate, measure and improve our Services, keep our Services safe, secure and operational, and customize Website content;
As part of our efforts to keep you safe and secure;
To contact you regarding your account, to respond to your requests or questions, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed or as otherwise necessary to provide you customer service;
To send you transactional communications. For example, we might send you emails about your purchase or to confirm your registration for an event. We might also contact you about this policy or our website terms and/or to send an email on behalf of our marketing partners;
To provide other services requested by you as described when we collect the information
To share with our marketing partners for marketing purposes or to use for our own marketing purposes. For example, to send you information about events or special promotions, to tell you about new features or products, etc. To learn about your choices for these communications;
To determine your level of engagement with email or promotional marketing materials that are send to you, including whether you opened an email or promotional marketing materials and/or otherwise engaged with it;
To improve our Services, for example by reviewing information associated with stalled or crashed pages experienced by users allowing us to identify and fix problems and give you a better experience;
For security purposes, including to prevent, detect, mitigate, and investigate fraud, security breaches or other potentially prohibited or illegal activities and/or attempts to harm our users;
To monitor and improve the information security of our Website;
To comply with governmental regulations or to respond to a subpoena or other governmental, court, administrative order/requirement;
To hire, train, and manage our staff;
To support the functions of our human resource management, including the coordination of third-party vendors that provide insurance and personal financial services such as retirement planning and savings and investment accounts;
To carry on our business and serve our customers as described above;
For other purposes with your consent;
We may combine information received from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above;
To enforce our Terms of Use, this Privacy Policy, or other policies, and to monitor for violations of our policies or applicable laws; and
We also use Information as otherwise described in this Policy, permitted by law, or as we may notify you.

The collection of personal information shall be limited to that which is necessary for the purposes identified above.

HOW YOUR INFORMATION IS SHARED

We may share non-personally identifiable information, such as aggregated user statistics, with third parties. We do not share your personal information with third parties for third-party marketing purposes, or for any other purpose other than as described in this Privacy Policy.

We may share the information we have collected about you, including personal information, as disclosed at the time you provide your information and in the following circumstances:

Sharing by you

Certain Services offered are social by their very nature, so your participation in such a Services will allow others to see your name and/or username, profile picture, social profile, and any other content you upload or disclose through that profile. Certain Services offered are social by their very nature, so your participation in such a Services will allow others to see your name and/or username, profile picture, social profile, and any other content you upload or disclose through that profile.

Sharing by us

We share your Information with third parties as listed below and as otherwise described elsewhere in this Policy.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

Internally With our Employees/Agents

We will share your Information with are employees/agents who are responsible for providing you the Services in line with the scope of their employment/agency with us.

Externally with Business Partners

We will share your information with analytic companies, such as Google, Facebook, Hotjar, and Rakuten that will help us gain a better understanding of who uses our Services, the buying patterns, understanding their preferences, their demographics so we can better market and find service offerings for those people and perform similar analytic functions. These third parties are contractually prohibited from sharing your information with any other enterprises and are contractually barred to only use the information we provide them for the reasons we are disclosing to you in this Privacy Policy. For more information about our business partners’ data sharing and use practices, please review their privacy policies and disclosures which are all available via their websites.

We also work with Klaviyo to assist us with marketing, including sending text/SMS messages as set out more fully in our Mobile Terms and Conditions.

The below companies may collect personal information when you interact with our digital property, including IP addresses, digital identifiers, information about your web browsing and app usage and how you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes. For more information about the collection, use and sale of your personal data and your rights, please use the below links.

Google Analytics
https://policies.google.com/privacy#infocollect

Facebook
https://www.facebook.com/privacy/explanation

Rakuten
https://rakutenmarketing.com/legal-notices/services-privacy-policy/
https://rakutenmarketing.com/legal-notices/subject-requests/

Klaviyo
http://klaviyo.com/legal

Business Transfers

We may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that would be transferred. Also, if we (or our assets) are acquired or merged, or if we go out of business, enter bankruptcy, or go through some other change of control, information would be one of the assets transferred to or acquired by a third party.

Protection of Company and Others

We reserve the right to access, read, preserve, and disclose any information that we reasonably believe is necessary to comply with law or court order; enforce or apply our conditions of use and other agreements; or protect the rights, property, interests, or safety of Community Coffee, our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

Legal Obligations

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Community Coffee, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Compliance

Where we are requested to provide information by authorized third parties or regulatory or governmental agencies investigating illegal activities;

Emergency

Where we believe that an emergency, illegal activity or some other reasonable basis exists for notifying the relevant authority.

Aggregated and Anonymized Information

We also may share (within our affiliated entities or with third parties) aggregated or anonymized information that does not explicitly identify you or any individual user of our Services. From time to time, Community Coffee may provide demographic and statistical information to prospective partners for the purposes of securing advertising and/or forgeneral promotion of the Services. This disclosure will not share any personal information of individual users but is intended to give a broad overview of the Services’ membership. All of the above sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

THE SECURITY OF YOUR INFORMATION

The security of your Information is important to us. We take commercially reasonable security measures, including administrative, technical, and physical safeguards, to protect your Information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

Your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and Information by selecting and protecting your password and/or other sign-on mechanism appropriately. To help protect your Information, you should not share your account information or password, reuse your password on other sites, or use a password you have used on other sites.

We endeavor to protect the privacy of your account and other information we hold in our records, but we cannot guarantee complete security. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

WHERE YOUR INFORMATION WILL BE HELD/DATA TRANSERS

The Services are hosted on US servers. The data that we collect from you may be transferred to, and stored at, a destination outside the EEA may also be processed by staff operating outside the EEA who work for us or for one of our processors, and, in particular, the United States. Such staff maybe engaged in, among other things, hosting or maintaining our Website, the processing of your payment details and the provision of support Services. Any personal information you provide to us will be processed and stored on servers in the US, the laws of which may be deemed by other countries to have inadequate data protection. It may also be processed by any service providers appointed by us who operate outside of the EEA and their staff. Accordingly, if you are located outside the US, by submitting your information, by using the Website, or otherwise using our Service, you consent and continue to consent and agree to the processing, transfer, and storage of such data in the US and outside the EEA or your country and acknowledge that not all countries guarantee the same level of protection for your information as the one in which you reside. We have agreements in place with our contractors and processors that include standard contractual clauses to protect your rights with respect to your data. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and, where applicable, the EU General Data Protection Regulation.

LAWFUL BASES FOR PROCESSING

We will only collect and process information about you where we have lawful bases. Lawful bases include consent (where you have given consent); via contract (where/c processing is necessary for the performance of a contract with you (e.g. to deliver the Services you have requested)); to protect vital interest; and when we have “legitimate interests”, which includes direct marketing.

Where we process information based on consent you may withdraw your consent at any time, but that will not affect the lawfulness of the processing of your personal data prior to such withdrawal.

Where we rely on contract, we will ask that you agree to the processing of personal data that is necessary for entering into or performance of your contract with us. We provide a voluntary service; you can choose whether or not you want to use the Services. However, if you want to use the Services, you need to agree to our Terms of Use, which set out the contract between Community Coffee and you. As we operate in countries worldwide (including the US) and use technical infrastructure in the US to deliver the Services to you, in accordance with the contract between us, we may need to transfer your information to the US and to other jurisdictions as necessary to provide the Services.

Where we rely on legitimate interests as a basis for information processing, you have the right to object. We may process your information, including personal data, for the purposes of our legitimate interests or for the legitimateinterests of third parties including our partners, provided that such processing shall not outweigh your rights and freedoms. For example, we may process your personal information to:

Protect you, us, or others from threats (such as security threats or fraud)
Comply with laws that apply to us
Enable or administer our business, such as for quality control, consolidated reporting, and customer service
Manage corporate transactions, such as mergers or acquisitions
Engage in direct marketing
Enable us and our users to connect with each other, view content, express opinions, exchange information, and conduct business

If you have any questions about the lawful bases upon which we collect and use your information, please contact our legal department at [email protected].

WHAT INFORMATION YOU CAN ACCESS

Right to Access and Control Your Information
If you choose not to provide personal information, you may be unable to access or use the Services as we simply may not be able to perform required functions.

User Data Subject Rights (EEA/UK Visitors Only)
We are not established in the EEA or the UK; however, individuals located in certain countries, including the EEA and the UK, have certain rights related to their personal information. Subject to any exemptions provided by law, you may have the right to request the following for personal data that we have about you:

EEA and UK users have the following rights:

• Delete Information: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
• Change or Correct Information: You can edit some of your information through your account. You can also ask us to change, update or fix you information in certain cases, particularly if it’s inaccurate.
• Object to, or Limit or Restrict, Use of Information: You can ask us to stop using all or some of your information (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your Information is inaccurate or unlawfully held).
• Right to Access and/or Take Your Information: You can ask us for a copy of your information and can ask for a copy of information you provided in machine- readable form.
• If we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your information conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal information. Contact details for data protection authorities in the UK, EEA, Switzerland and certain non-European countries are available here.)
• When the processing of your personal data is for directly marketing purposes, you have the right to object to subject processing.

To exercise any of your data subject rights, please contact us at [email protected]. We will respond to your request without undue delay, and, in any event, within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests we receive. If we take an extension, we shall inform you within one month of our receipt of the original request, together with the reasons for delay.

In the event your personal data of which we collected was subject to a Personal Data Breach (defined below), We will notify you and competent Supervisory Authoriy(ies) within 72 hours by e-mail with information about the extent of the breach, affected data, any impact, Our plan for measures to secure the data and limit any possible detrimental effect on you. A “Personal Data Breach” is a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

You may contact us using the contact information in the Contact Us section below, and we will consider your request in accordance with applicable laws.

What Choices You Have

You can always opt not to disclose information or to disable certain tools on your browser or device. However, this may limit your ability to fully utilize the Services.

You may be able to add, update, or delete information as explained above. When you update information, however, we may maintain a copy of the unrevised information in our records. Please note that some information may remain in our records for legitimate business reasons even after your deletion of such information, such as our analyzing aggregated data regarding past usage of the Services (but not in a manner that would identify you personally). Additionally, through Google’s security settings page, you may revoke consent to the use of API Data related to you that was accessed or stored by the Services pursuant to such consent. Company shall delete all such API Data no later than thirty (30) calendar days following such revocation.

If you don’t want to receive e-mail or other communications from us, you can adjust your email preferences from your account, or opt-out by clicking on the link provided in the emails.

To learn more about choices regarding cookies set through the Services, see our Cookie Policy.

HOW LONG WE RETAIN YOUR INFORMATION
We generally retain your information as long as reasonably necessary to provide you the Services or to comply with applicable law. However, even after you deactivate your account, we can retain copies of information about you and any transactions or Services in which you may have participated for a period of time that is consistent with applicable law, applicable statute of limitations or as we believe is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems with our Services, to assist with investigations, to enforce our Terms of Use or other applicable agreements or policies, or to take any other actions consistent with applicable law.

Information you have shared with others (e.g. through comments or other posts) will remain visible after you close your account or delete the information from your own account, and we do not control data that other users copied out of our Services.

CHANGES TO THIS PRIVACY POLICY

We may modify this Policy, our Terms of Use from time to time. If we make material changes to it, we will provide you notice through the Services, the Website, via email or by other means, to provide you the opportunity to review the changes before they become effective. You shall be responsible for reviewing and becoming familiar with any such modifications. We agree that changes cannot be retroactive. If you object to any changes, you may close your account or discontinue use of the Services. Your continued use of our Services after we publish or send a notice about our changes to these terms means that you are consenting to the updated terms.

QUESTIONS OR CONCERNS

If you have any questions or concerns regarding our Policy, please send us a detailed message at the address below, and we will try to resolve your concerns.
Email: [email protected]

U.S. STATE PRIVACY RIGHTS

This section provides additional disclosures to California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia residents as they may be or may become applicable to us under their respective state privacy laws, including further information on their rights under such laws.
In this section, when we use the term “information” we mean it (or similar term, such as “personal data”) as it is defined under those laws.

Verification. We’ll need enough detail to understand and respond to your request. We may need to verify your identity to process your requests and may also need to confirm your state residency. To verify your identity, we may require a combination of government identification, or other information. We may also require you to login from a verified valid device or verify that the device you’re logging in from is valid.

Authorized Agents. You can have an authorized agent make a request on your behalf, but we’ll need to verify your agent’s identity. We would also need a copy of a valid power of attorney, or a written and signed permission to exercise your privacy rights on your behalf. We may still need to verify your identity and may ask you to directly confirm that you provided your authorized agent permission to submit the request on your behalf.

Sensitive Information. We do not process “sensitive personal information” (or similar term, such as “sensitive data”).

Profiling. We do not undertake any “profiling in furtherance of decisions that produce legal or similarly significant effects” on our creators.

Retention. The duration of how long we retain personal information is generally based on how long we need it for the purposes for which it was collected, which includes complying with our legal obligations.

Your Privacy Rights

You have certain rights regarding your personal information under the state consumer privacy laws listed above, subject to certain exceptions under such applicable law. Here, we provide a summary of your rights relating to personal information and how to exercise them. You are entitled to exercise these rights free from discrimination.

Access. You have the right to access a copy of your personal information, which you can do by following the instructions in the Exercise Your Privacy Rights below.
Correction. You have the right to request that we correct inaccurate personal information that we have collected about you. You can do so by submitting following the instructions in the Exercise Your Privacy Rights below.
Deletion. You have the right to request deletion of the personal information that we have collected from you, which you can do by following the instructions in the Exercise Your Privacy Rights below. But if we delete your personal information, we might not be able to provide our Services to you.

Opting out of “sales,” “sharing,” and processing for “targeted advertising” purposes.

Like many companies, we work with advertising partners and intermediaries (e.g., ad networks, retargeters, sell-side or demand-side platforms, ad servers, clean rooms, identity resolution providers, measurement providers, publishers such as social media platforms or digital/print content providers, advertisers, agencies) to help deliver targeted ads to you on our Website or other properties based on your activity across unrelated properties (e.g., your activity on our Website and social media networks or other digital properties) and to measure the effectiveness of such ads.

Through the use of cookies or other tracking technologies, we make personal information (e.g., device data tied to online activity data, identity data such as email addresses or phone numbers) available to such partners or intermediaries for such purposes. We may also upload information (e.g., email address, phone number) about our creators to these partners or intermediaries to facilitate such purposes. In either case, under certain state consumer privacy laws, these disclosures of personal information may be considered a “sale” or “share” (or processing for “targeted advertising” more generally) unless certain exceptions apply (e.g., disclosing personal information to a “service provider” or “processor,” where applicable).

If we know that you’re 13-15 years of age, we won’t “sell” or “share” your information unless we get your consent to do so.

‍Opting out of “Sales,” “Shares,” and “Targeted Advertising” Involving Cookies or Other Tracking Technologies

To opt-out of “sales/shares” or processing for “targeted advertising” that do not rely on third-party advertising partners or intermediaries’ tracking technologies on this website (e.g., upload of users’ email addresses to other social media platforms to target them with ads), you must also opt out by following the instructions in the Exercise Your Privacy Rights section below.

Exercise Your Privacy Rights

To exercise any of your data subject rights, please contact us at [email protected] subject line “Exercise of U.S. Data Privacy Rights” and provide us information about how we might be able to locate you in our records/system to effect your request and also identify the data subject rights you wish to exercise. You may also contact us at 800-884-5282.

We will respond to your request without undue delay, and, in any event, within 45 days of the request, unless less time is required by law. That period may be extended by 45 days (for a total of 90 days) where necessary, taking into account the complexity and number of the requests we receive. If we take an extension, we shall inform you within one month of our receipt of the original request, together with the reasons for delay. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response electronically. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data disclosure requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request and, to the extent necessary, to identify the browser/device that is the subject of the request.

There may be a number of reasons for denying your request, including that we may not be a covered business under the data privacy law that may apply to you.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Appeals. If you are a Colorado, Connecticut, Montana, Oregon, Texas, or Virginia resident, you may appeal our refusal to take action on a request exercising one of your rights mentioned above by contacting us via email at [email protected] subject line “Exercise U.S. Data Privacy Rights Appeal” and provide us sufficient information to allow us to identify your data subject request file and basis for your appeal.
Right to Know. If you’re a California resident, you have the right to know the following as it relates to the last 12 months: the categories of information that we’ve collected about you, the categories of sources from which we’ve collected the information, the business or commercial purpose for collecting, selling,” or “sharing” the information, the categories of recipients to whom we’ve disclosed the personal information for a business purpose, and the categories of third parties to whom the personal information was “sold” or “shared.” You can find this information in the table below.

CCPA category of Personal Information (PI)	Examples of PI we collect in this category	Source of PI	Business and commercial purposes for collection	Categories of recipients to whom we “Disclose” PI for a business purpose	Categories of third parties to whom we sell or share PI for interest-based advertising
Identifiers	Account data, profile data, data about others, our communications with you, identifiers, data about others	You or Third party sources	Delivering our Services, Research and development, Marketing, and Compliance and protection	Affiliates, Service Providers, Professional advisors, Authorities and others, Business transferees, and other creators and the public	N/A
California Customer Records (as defined in California Civil Code section 1798.80)	Account data, profile data, our communications with you, feedback, payment and transactional data, your content, data about others	You	Delivering our Services, Research and development, Marketing, and Compliance and protection	Service Providers, Professional advisors, Authorities and others, Business transferees, and other creators and the public	N/A
Commercial Information	Payment and transactional data, order information, shipping information, billing information, marketing data, feedback, online activity data	You or Automatic collection	Delivering our Services, Research and development, Marketing, and Compliance and protection	Service Providers, Professional advisors, Authorities and others, Business transferees, and other creators and the public	N/A
Online Identifiers	Profile data, device data	You or Automatic collection	Delivering our Services, Research and development, Marketing, and Compliance and protection	Service Providers, Professional advisors, Authorities and others, Business transferees, and other creators and the public	N/A
Internet or Network Information	Marketing data, device data, and online activity	You or Automatic collection	Delivering our Services, Research and development, Marketing, and Compliance and protection	Service Providers, Professional advisors, Authorities and others, and Business transferees	N/A
Inferences	May be delivered for you: Payment & transactions data, marketing data, content of creators, device data, online activity data	N/A	Delivering our Services, Research and development, Marketing, and Compliance and protection	Business partners, Service Providers, Authorities and others, and Business transferees	N/A
Protected Classification Characteristics	We do not intentionally collect this information.	N/A	N/A	N/A	N/A
Sensory Information	Customer services call recordings	You	Delivering our Services, Research and development, Compliance and protection	Authorities and others	N/A
Sensitive Personal Information	We do not intentionally collect this information.	N/A	N/A	N/A	N/A
Note: You might voluntarily provide additional information to us, which may contain other categories of personal information not mentioned in this table.

DO NOT TRACK

Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. At this time, we do not respond to Web browser “do not track” settings or signals. We deploy cookies and other technologies on our Services to collect information about you and your browsing activity, even if you have turned on the Do Not Track signal.

MOBILE TERMS AND CONDITIONS

Our mobile message Service (the “Mobile Service”) is operated by us or by a third party on our behalf. If you provide us with your mobile phone number, it must be your own and may not be anyone else’s as, by doing so, you are proving affirmative consent (i.e., opting in ) to receive recurring advertising and other text messages from and on behalf of Community Coffee via an automatic telephone dialing system to the mobile phone number you provide. Your consent to receiving such messages is not a condition of purchasing any goods or services.

By consenting to Community Coffee’s SMS/text messaging service, i.e., the Mobile Service, you agree to receive recurring SMS/text messages, including automated promotional and personalized marketing texts messages, from and on behalf of Community Coffee through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages, i.e., transactional may include updates, alerts,and information (e.g., order updates, account alerts, policy updates and related information, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to consent or otherwise opt-in to receive this Mobile Service in order to make any purchases, and your consent is not a condition of any purchase with Community Coffee. Your participation in the Mobile Service is completely voluntary.

We do not charge for the Mobile Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Mobile Service at any time. Text the single keyword command STOP to 47904 or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other Community Coffee mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to 47904 or email [email protected].

We may change any short code or telephone number we use to operate the Mobile Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Mobile Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the Mobile Service with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Mobile Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Mobile Service.

COMPLIANCE WITH THE VIDEO PRIVACY PROTECTION ACT

To protect your privacy related to which videos you may choose to view on our Website, we will not disclose your video viewing information to third parties except as required or permitted by the Video Privacy Protection Act, which includes:

With your informed written consent, which is distinct and separate from any other consent you provide.
To law enforcement agencies or other governmental entities, as required by a warrant, subpoena, court order or other legal process.
To our service providers how need access to perform service son our behalf, provided they are subject to obligations to protect your privacy.

We will retain your video viewing information only for as long as necessary to provide our Services or as required by law. Once your information is no longer needed, it will be securely deleted or anonymized.

You have the right to access and review your video viewing information. You may also request corrections or deletions of inaccuracies. To exercise this right, email us at [email protected] subject “Exercise of VPPA Rights”.

CAN-SPAM Act

The CAN-SPAM sets the rules for commercial email, establishes requirements for commercial messages, and gives recipients the right to have emails stopped from being sent to them.

If, at any time, you would like to unsubscribe from receiving future emails, you can email us at [email protected] and we will promptly remove you from email communications.

LEGAL DISCLOSURES

It is possible that we will need to disclose information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations, (4) protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or (5) exercise or protect the rights and safety of Community Coffee, our users, personnel, or others. We attempt to notify users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

CONTACT US

If you have any questions about this Privacy Policy, you may contact us at [email protected].

Effective as of July 1, 2024
Last Revised as of May 27, 2025