Privacy policy.

When you place an order, we collect the information needed to fulfill it: your name, email, shipping address, and payment details. Payment is processed by Stripe — we never see or store your full card number.

If you create an account or subscribe, we store your email and order history so you can manage your purchases.

We use Google Analytics 4 to understand how the shop is used — which roasts get viewed, how people move through checkout, where the funnel leaks. Google Analytics sets cookies and may collect a truncated IP address and device-type information. We never pass your name, email, or address to it.

If you'd rather not be measured, most browsers have a built-in tracking-protection mode that blocks Google Analytics by default — turning it on is the simplest way to opt out. Browser extensions like uBlock Origin or Privacy Badger work too.

• To fulfill and ship your orders
• To send order confirmations and shipping updates
• To process returns or resolve issues
• To send subscription-related emails (if you subscribe)

We don't sell your data. We don't send marketing emails unless you opt in.

We share only what's necessary with the following services:

• Stripe — payment processing
• Shippo — shipping label generation and tracking
• Postmark — order, shipping, and account emails
• Intuit QuickBooks — invoicing and bookkeeping for wholesale accounts
• Broadwave — newsletter list, if you sign up for it
• Google Analytics 4 — anonymized site usage analytics
• Google Geocoding — turning local-delivery addresses into map coordinates so we can plan the route
• Google Fonts — the typefaces this site is set in
• Cloudflare — image and asset delivery, and the bot check on our wholesale application form
• jsDelivr — a script the pages need to work
• Sentry — error reports when something on the site breaks

Google appears three times there and gets something different each time. Analytics gets how the site is used, never your address. Fonts gets nothing but the fact that your browser asked for a typeface — that request carries your IP address, the way loading any file from another site does. Geocoding is the one that matters: if you order local delivery, we send your delivery address to Google to look up its coordinates, because that's how the van's route gets planned. We don't send your name or email with it, and it only happens for local delivery — a shipped order's address never goes to Google.

Anything your browser loads from another company — the fonts, the scripts, the error reporter — can see your IP address and which page you were on. That's how the web works rather than something we send them, but it's honest to say so.

If you hold a wholesale account, we bill you on terms rather than charging a card at checkout, and we keep those books in Intuit QuickBooks. Setting your account up there sends Intuit your business name, the name and email of the person we deal with, and your phone number if we have one. Invoicing an order then sends your payment terms and the order's own lines and totals. QuickBooks emails you the invoice from there, and when you pay we record the payment against it — including the check number, if you paid by check.

No card numbers reach Intuit, and nothing about retail shoppers does. If your account is set to manual billing we invoice you by hand, so nothing is sent automatically — but we still look your account up in QuickBooks by name and email to keep the two sides straight, and if a member of our crew bills one of your orders on purpose, it goes across the same way.

We use a small set of cookies — a session cookie to keep you logged in, a cart cookie to remember what's in your bag, and the cookies set by Google Analytics described above. We don't use third-party advertising cookies.

We keep order records as long as needed for tax and legal compliance. If you want your account deleted, contact us and we'll take care of it.