Collection and use of personal information
“Personal information” is data that can identify or contact a single person. You are not required to provide it. If you choose not to, we may be unable to answer a specific request.
This public catalog does not require an account. We do not run advertising pixels. We do not sell lists.
What we may receive
- Contact notes. If you send a message on the Contact page, we keep the name, reply email, and message you typed so we can answer. A form delivery service posts that note to our staff mailbox. A hidden field is used only as a spam trap and is discarded. We do not print a mailbox on this site.
- Buy notices. If you press Buy, our server may log the coffee name and the destination shop URL so we can see which bags people actually want. Technical addresses are hashed. That log is not placed on a public page.
- We do not collect payment card numbers, government IDs, or precise location on this site. Card data, if any, is handled by the linked roaster or donation processor after you leave.
How we may use it
We process personal information only when there is a valid basis (such as your request, a legal obligation, or a legitimate nonprofit interest in operating the site).
- To reply to a Contact note.
- To understand which catalog items people follow through to a shop (aggregated, hashed technical data).
- To protect the site against abuse, spam, and fraud.
- To send essential notices about these Terms or this Policy when required.
- For internal auditing limited to operating a 501(c)(3) public table.
Non-personal information
Non-personal information cannot, by itself, identify a specific individual. Server logs may include approximate region, referrer, user-agent, and which pages were requested, used to keep the site available and to fix errors. If non-personal information is combined with personal information, the combined data is treated as personal information for as long as it remains combined.
Cookies and similar technologies
This catalog does not require an account and does not set advertising cookies. Your browser may keep a sort preference only in memory for the visit. We do not use analytics pixels, ad beacons, or cross-site trackers on these pages.
Linked third-party shops, donation forms, YouTube, and TikTok have their own cookies once you leave.
Disclosure to third parties
We do not sell personal information and we do not share personal information with third parties for their marketing purposes.
Service providers
Information may be processed by hosting, email, or donation processors who perform services on our behalf. They are obligated to protect information and may operate globally.
Legal
Information may be disclosed when required by law, legal process, or a lawful governmental request, or to protect the organization and its users where there is a lawful basis. In a reorganization, merger, or transfer of nonprofit assets, information may move to a successor bound by this policy or a successor policy.
California (CCPA / CPRA)
We do not sell or share personal information as those terms are used in the California Consumer Privacy Act, as amended by the CPRA. California residents may request to know, correct, or delete personal information we hold about them, and may use an authorized agent. Use the Contact page. We will not discriminate against you for exercising those rights.
Categories that may be collected: identifiers (name you type), customer records (your message), and internet activity (hashed technical addresses on Buy or Contact). Sources: you. Business purpose: responding and operating the catalog. We do not use sensitive personal information for inferring characteristics.
Protection of personal information
We take security seriously and use encryption in transit (HTTPS) for this website. No method of transmission is perfectly secure. If you post or share content on a third-party platform linked from this site, that content may be visible to others.
We do not make automated decisions using algorithms or profiling that significantly affect you.
Children
The Services are not directed to children under 13 (COPPA) and are intended for adults 18 and older. We do not knowingly collect personal information from children. If you believe a child provided information, use Contact and we will delete it.
Retention
Contact messages are kept only as long as needed to reply and to maintain a limited nonprofit record, then deleted or archived with access restricted. Buy notices are kept in hashed, minimized form for operational review and then discarded on a rolling basis. We do not keep payment data on this site.
Third-party sites and services
This site links to independent roasters, Zeffy donation forms, Cognitive Well, YouTube, TikTok, and other partners. Information collected by those parties is governed by their own policies. Review them before you buy, donate, or watch.
We do not collect precise GPS location. Your device or a linked map provider may.
Privacy questions
If you have questions, want a correction or deletion, or wish to report a possible privacy concern, use the Contact page. We do not publish a mailbox on this site.
This policy may be updated from time to time. When changes are material, a notice will be posted with the updated policy.
AppChurch Global Foundation
San Diego, CA, U.S.A.
This page is for informational purposes and is not legal advice.