Privacy Policy

Information you give us

• Orders and checkout: your name, shipping and billing address, email, and order details. Your payment card is collected and processed by Stripe; we do not receive or store your full card number.
• Account: your name and email, and a password you set (managed through our authentication provider).
• Wholesale inquiries:the contact details of the person reaching out (name, title, email, and phone) and information about your business (business name, location, number of locations, years in business, website or social media, target start date, the coffees and weekly volume you’re interested in, your equipment, and anything else you tell us).
• Email sign-ups and support: your email address and the contents of messages you send us.

Information we collect automatically

• Device and usage data — such as IP address, browser and device type, pages viewed, referring page, and time on site — collected through cookies and similar technologies (see Cookies, below).

Sources

• We collect this information directly from you, automatically from your device as you use the Site, and from our service providers — for example, order and payment confirmations from Stripe, and analytics and advertising data from Google and similar platforms. We do not buy consumer contact lists for marketing.

• To process, fulfill, and ship your orders, including international customs documentation, and to provide customer support.
• To create and manage your account and any wholesale relationship.
• To send transactional messages (order and shipping updates) and, if you opt in, marketing email.
• To measure, operate, secure, and improve the Site, and to advertise our products (see Advertising).
• To comply with law, enforce our Terms, and prevent fraud and abuse.

We do not sell your personal information for money. We share it with service providers who process it on our behalf, and only as needed to run our business. These providers fall into the following categories:

• Payment processors — Stripe (which collects your payment and billing details directly to process your order).
• Analytics providers — Google (Google Analytics 4 and Google Tag Manager).
• Advertising platforms — Meta and Google, if and when we run social-media ads (see Advertising).
• Email providers — the services we use to send order, account, and marketing emails.
• Hosting and database providers — the cloud services that run our Site and store our records.
• Shipping and logistics providers — our carriers and any shipping-rate or customs service we use to quote rates and deliver your order.

We may add or change providers within these categories over time. We may also disclose information if required by law or legal process, to protect our rights or safety, or in connection with a merger, acquisition, or sale of the business (in which case we will require the recipient to honor this Policy).

We do not sell your personal information for money. We do use cookies and similar technologies — including pixels from advertising platforms such as Meta and Google — to measure our marketing and to show our ads to people who have visited our Site (this is “retargeting”). Under some U.S. state privacy laws, this kind of cookie-based advertising is considered “sharing” or “targeted advertising,” even though no money changes hands and we do not package up and sell your data.

You can opt out at any time — see “Your choices,” below.

We use cookies and similar technologies in three categories: essential (needed for security and your cart — always on), analytics, and marketing. We use Google Analytics 4 through Google Tag Manager to understand how visitors use the Site; this collects data such as IP address, device and browser information, pages visited, and session activity. This data is also subject to Google’s privacy policy.

We use a consent banner to manage non-essential cookies. Where prior consent is legally required (the EEA, the United Kingdom, and Switzerland), non-essential cookies stay off until you accept; elsewhere they are on by default and you can turn them off at any time using the “Cookie preferences” link in our footer.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of any sale or sharing of your information, for visitors in California and in the EEA, the United Kingdom, and Switzerland. Because there is no agreed standard for the older browser “Do Not Track” signal, we do not respond to it; use the cookie preferences link or GPC instead.

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to opt out of marketing and of targeted advertising. To make a request, email hello@rubiareserve.com. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

We honor Global Privacy Control signals and we do not sell your personal information. To the extent the California Consumer Privacy Act or other U.S. state privacy laws apply to us, we honor the rights they give you, including any right to opt out of the sale or sharing of personal information.

Residents of California and of other states with comprehensive privacy laws may have additional rights, including to know what personal information we collect and how we use it, to access and delete it, to correct it, and to opt out of its sale or sharing for targeted advertising. You can exercise these rights by emailing hello@rubiareserve.com or by using the cookie preferences link and Global Privacy Control described above. We will not discriminate against you for exercising any of these rights.

• Marketing email: unsubscribe at any time using the link in any marketing email, or email us.
• Cookies and advertising: use the “Cookie preferences” link in our footer to turn off analytics and marketing cookies, or enable Global Privacy Control in your browser. If you opt out, you may still see our ads, but they will not be based on your visit to our Site.
• Your account: review or update your account information when you are signed in, or email us to access or delete your data.

If you are in the European Economic Area, the United Kingdom, or Switzerland: we process your personal data to perform our contract with you (order fulfillment), for our legitimate interests (fraud prevention and direct marketing to existing customers), with your consent (analytics and advertising cookies), and to comply with legal obligations. Your data is processed in the United States; where we transfer EEA or UK personal data to our service providers, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

You have the rights to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk). To exercise any of these rights, email hello@rubiareserve.com.

We keep your personal information for as long as your account is active and as long as it is useful for the purposes described in this Policy. In practice:

• Order, payment, and tax records: at least 7 years, or longer where tax or accounting law requires.
• Account information: while your account is active, and for a reasonable period afterward.
• Customer-support records: for the duration of our relationship with you and a reasonable period afterward.
• Marketing data and logs: until you unsubscribe, plus a retention period for our records.
• De-identified or aggregated data (which can no longer be linked to you): we may keep indefinitely.

If you are in a region whose laws limit how long we may keep your personal data, we keep it only as long as those laws allow.

We protect the personal information you provide using commercially reasonable, industry-standard measures. Our Site is served only over encrypted HTTPS connections and is hosted on a managed cloud platform. Payments are processed by Stripe, a PCI-DSS-compliant payment processor, so we never receive or store your full card number. Your account and order data are stored in a database with access controls that limit each user’s access to their own records.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, contact us at hello@rubiareserve.com.

The Site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

We send transactional emails (such as order and shipping confirmations) as part of your purchase. If you opt in to marketing email, every marketing message will clearly identify us, explain why you are receiving it, and include a one-click unsubscribe link, and we will honor opt-outs promptly.

We do not currently operate an SMS program. If we add one, we will obtain the consent the law requires and add the required disclosures, including that mobile opt-in information and consent are never shared with third parties for their own marketing.

We may update this Policy at any time. We will post the updated version here with a new effective date, and changes take effect when posted. Where the law requires it, or for significant changes to how we use your personal information, we will take reasonable steps to let you know.

Questions or requests? Email us at hello@rubiareserve.com.