Privacy Policy
Last updated: December 18, 2025
Our Commitment to Your Privacy
At Caravan Brew, we deeply respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, protect, and handle your data when you interact with our website and services.
We believe in transparency and want you to feel confident about how your information is managed. This policy outlines your rights and our responsibilities regarding your personal data.
Information We Collect
Information You Provide
When you interact with our services, you may choose to provide us with certain information, including:
- Name and contact details when you reach out through our contact form
- Email address for communications and service inquiries
- Coffee preferences and interests you share with us
- Feedback, questions, or comments you submit
- Any additional information you choose to provide in correspondence
Automatically Collected Information
When you visit our website, certain information is automatically collected through cookies and similar technologies:
- Browser type and version
- Operating system and device information
- IP address and general location data
- Pages visited and time spent on our site
- Referring website or source
- Click patterns and navigation behavior
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific data processing activities
- Legitimate Interest: For business operations, analytics, and service improvement
- Contract Performance: When necessary to fulfill our service agreements
- Legal Obligation: To comply with applicable laws and regulations
How We Use Your Information
We use the information we collect for specific, legitimate purposes that benefit both you and our services:
- Service Delivery: To respond to your inquiries, provide information about our offerings, and fulfill service requests
- Communication: To send you relevant information about our services, coffee insights, and updates you've expressed interest in
- Website Improvement: To analyze how visitors use our site and make enhancements to user experience
- Personalization: To tailor our recommendations and content to your preferences and interests
- Analytics: To understand trends, measure effectiveness, and improve our services
- Security: To protect against fraud, unauthorized access, and other security concerns
- Legal Compliance: To meet our legal obligations and enforce our terms
How We Share Your Information
We respect your privacy and do not sell your personal information. We may share your data only in the following limited circumstances:
- Service Providers: Trusted third-party partners who assist with website hosting, analytics, email communications, and other business operations under strict confidentiality agreements
- Legal Requirements: When required by law, court order, or governmental authority, or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data would be transferred as part of business operations
- With Your Consent: When you explicitly authorize us to share specific information with third parties
We ensure that any third parties with access to your data maintain appropriate security measures and comply with applicable privacy laws.
Data Protection and Security
Security Measures
We implement appropriate technical and organizational measures to protect your personal information:
- Secure socket layer (SSL) encryption for data transmission
- Regular security assessments and vulnerability testing
- Access controls and authentication protocols
- Regular backups and disaster recovery procedures
- Employee training on data protection and privacy
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
- Contact form inquiries: retained for up to 2 years to maintain service continuity
- Analytics data: aggregated and anonymized data may be retained indefinitely
- Cookie data: retained according to individual cookie expiration periods
- Legal requirements: data may be retained longer when required by law
When data is no longer needed, we securely delete or anonymize it to protect your privacy.
Breach Notification
In the unlikely event of a data breach that affects your personal information, we will notify affected individuals and relevant authorities as required by applicable laws. We maintain incident response procedures to address security incidents promptly and effectively.
Your Rights and Choices
You have important rights regarding your personal information. Depending on your location, these may include:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Ask us to correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal data under certain circumstances
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing of your personal data for certain purposes
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Withdraw Consent: Withdraw previously given consent at any time
- Right to Lodge a Complaint: File a complaint with your local data protection authority
To exercise any of these rights, please contact us through our contact page. We will respond to your request within the timeframe required by applicable law, typically within 30 days.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
- Browse our website without creating an account or providing identifying information
We respect your privacy choices. If you would like us to delete your data, please reach out to us through the contact details provided on our Contact page. We will process your request promptly.
Third-Party Services and Links
Our website may contain links to third-party websites or integrate services from external providers. Please be aware that:
- We are not responsible for the privacy practices of third-party websites
- These sites have their own privacy policies which we encourage you to review
- Third-party analytics tools may collect data according to their own policies
- Social media plugins may track your interaction with our content
When you leave our website through external links, we recommend reviewing the privacy policy of the destination site.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place:
- Standard contractual clauses approved by relevant authorities
- Adequacy decisions recognizing equivalent protection levels
- Other legally recognized transfer mechanisms
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy regularly to stay informed about how we protect your information.
Questions or Concerns?
If you have questions about this Privacy Policy, want to exercise your rights, or have concerns about how your data is handled, we're here to help.
Please visit our contact page to reach out to us. We aim to respond to all privacy-related inquiries within 30 days.