Privacy policy

Privacy Policy

Last Updated: May 1, 2026

This Privacy Policy explains how Kettle & Bean Co ("we," "us," or "our") collects, uses, shares, and protects information about you when you visit kettleandbeanco.com, create an account, place an order, subscribe to our communications, or otherwise interact with us.

By using our website or providing information to us, you agree to the practices described in this policy. If you do not agree, please do not use the website or provide your information to us.

1. Information We Collect

Information You Provide Directly

When you interact with our website, you may provide us with the following types of information:

  1. Account and order information: name, email address, shipping address, billing address, phone number, order history, and account credentials
  2. Payment information: credit card or debit card number, expiration date, security code, and billing zip code (handled and stored by our payment processors, not by us)
  3. Subscription and preference information: delivery frequency, product preferences, grind type, and saved gift recipients
  4. Communication content: messages, photos, or other content you send through email, contact forms, social media, or customer service inquiries
  5. Reviews and user-generated content: product reviews, ratings, comments, and any photos you submit
  6. Marketing preferences: opt-ins for email and SMS marketing, including phone numbers if you elect to receive text messages

Information Collected Automatically

When you visit our website, we and our service providers automatically collect certain information about your device and browsing activity, including:

  1. Device and connection information: IP address, browser type and version, operating system, device identifiers, and screen resolution
  2. Usage information: pages viewed, time spent on pages, clickstream data, referring website, search terms used to find our site, and timestamps
  3. Location information: general geographic location based on IP address (not precise GPS location)
  4. Cookies and similar technologies: see Section 5 below for details

Information from Third Parties

We may receive information about you from third parties, including:

  1. Payment processors and fraud prevention services: transaction verification, fraud signals, and payment confirmation
  2. Shipping carriers: delivery confirmation, tracking updates, and address validation
  3. Marketing and analytics partners: aggregated audience information and campaign performance data
  4. Social media platforms: if you interact with us through social media or use social login features

2. How We Use Your Information

We use the information we collect for the following purposes:

  1. Order fulfillment: to process, fulfill, and deliver your orders, including roasting, packing, shipping, and providing tracking updates
  2. Customer service: to respond to inquiries, resolve issues, process returns, and provide support
  3. Account management: to create and maintain your account, manage subscriptions, and authenticate access
  4. Payment processing: to charge your payment method, prevent fraud, and comply with financial regulations
  5. Marketing and communications: to send promotional emails, SMS messages (with your consent), product announcements, and personalized recommendations
  6. Website improvement: to analyze usage, troubleshoot technical issues, and improve site functionality and design
  7. Personalization: to tailor content, product recommendations, and offers to your preferences
  8. Legal and safety purposes: to comply with legal obligations, enforce our Terms of Service, prevent fraud, and protect our rights and the rights of others

3. How We Share Your Information

We do not sell your personal information for monetary consideration. We share your information only as described below:

Service Providers

We share information with third-party service providers who perform functions on our behalf, including:

  1. E-commerce platform: our website is hosted and operated through Shopify, which processes order, account, and payment data
  2. Payment processors: companies that process credit card transactions, including Shopify Payments, PayPal, Apple Pay, Google Pay, and Shop Pay
  3. Roasting, fulfillment, and shipping providers: third-party partners who assist with roasting, packaging, labeling, and shipping your order, and the shipping carriers (such as USPS, UPS, and FedEx) who deliver it
  4. Email and SMS providers: services that deliver transactional and marketing communications on our behalf
  5. Analytics providers: services such as Shopify Analytics and, where applicable, Google Analytics that help us understand site usage
  6. Customer service tools: software that helps us manage support inquiries and customer communications
  7. Fraud prevention and security services: providers that help us detect and prevent fraudulent transactions

These service providers are contractually obligated to use your information only for the purposes for which we engage them and to maintain appropriate security measures.

Legal and Safety Disclosures

We may disclose your information when we believe in good faith that disclosure is necessary to:

  1. Comply with a subpoena, court order, or other legal process
  2. Comply with applicable laws and regulations
  3. Enforce our Terms of Service or other agreements
  4. Protect the rights, property, or safety of Kettle & Bean Co, our customers, or the public
  5. Investigate or prevent fraud, security threats, or illegal activity

Business Transfers

If Kettle & Bean Co is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

With Your Consent

We may share your information for any other purpose with your consent.

4. Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons, pixels, and local storage) to operate the website, remember your preferences, analyze usage, and deliver relevant marketing.

The types of cookies we use include:

  1. Essential cookies: required for the website to function, including shopping cart and checkout features
  2. Functional cookies: remember your preferences, such as login status and saved addresses
  3. Analytics cookies: help us understand how visitors use the website so we can improve it
  4. Marketing cookies: used to deliver targeted advertising and measure campaign performance, including pixels from platforms such as Meta and Google

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when new cookies are set. Disabling cookies may affect your ability to use certain features of the website, including completing a purchase.

For visitors in jurisdictions that require cookie consent, we display a cookie banner allowing you to accept or reject non-essential cookies on your first visit.

5. Your Rights and Choices

General Rights

You may exercise the following rights at any time:

  1. Access: request a copy of the personal information we hold about you
  2. Correction: request that we correct inaccurate or incomplete information
  3. Deletion: request that we delete your personal information, subject to legal exceptions
  4. Opt-out of marketing: unsubscribe from email or SMS marketing at any time

To exercise these rights, email us at kettleandbeanco@gmail.com with the subject line "Privacy Request" and include your full name, the email address associated with your account, and a description of your request. We will respond within 30 days, or sooner where required by law.

California Residents (CCPA and CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

  1. The right to know what personal information we collect, use, disclose, and sell or share
  2. The right to delete personal information we have collected
  3. The right to correct inaccurate personal information
  4. The right to opt out of the "sale" or "sharing" of personal information
  5. The right to limit the use of sensitive personal information
  6. The right to non-discrimination for exercising your privacy rights

We do not sell personal information for monetary consideration. We may "share" personal information for cross-context behavioral advertising purposes through marketing cookies and pixels. You may opt out of this sharing by emailing us at kettleandbeanco@gmail.com with the subject line "Do Not Sell or Share My Personal Information" or by adjusting your cookie preferences on the website.

Virginia, Colorado, Connecticut, Utah, and Other State Residents

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Delaware, or another state with a comprehensive privacy law, you have rights similar to those of California residents, including the right to access, correct, delete, and opt out of targeted advertising. To exercise these rights, contact us at kettleandbeanco@gmail.com with the subject line "Privacy Request."

Email and SMS Opt-Out

You may unsubscribe from marketing emails by clicking the unsubscribe link at the bottom of any marketing email. You may opt out of SMS marketing by replying STOP to any marketing text message. Standard messaging and data rates may apply.

Opting out of marketing does not affect transactional communications related to your orders, such as order confirmations, shipping notifications, and customer service messages.

Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry standard for how to respond to DNT signals, we do not currently respond to them. You can manage tracking through cookie settings as described above.

6. Children's Privacy

Our website and products are not directed to children under the age of 18. We do not knowingly collect personal information from children under 13, and we do not sell products to individuals under 18. If you believe a child under 13 has provided us with personal information, please contact us at kettleandbeanco@gmail.com and we will promptly delete the information.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption of payment data in transit, secure hosting through our e-commerce platform, access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly notifying us of any suspected unauthorized access.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

  1. To provide products and services and maintain your account
  2. To comply with legal, tax, accounting, and regulatory obligations
  3. To resolve disputes and enforce our agreements
  4. To support legitimate business operations such as fraud prevention and analytics

When information is no longer needed, we delete or anonymize it in accordance with our internal retention schedules and applicable law.

9. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, and services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party services you visit or use.

10. International Visitors

Kettle & Bean Co operates and ships exclusively within the United States. Our website is hosted in the United States, and any information you provide is processed and stored in the United States. If you access the website from outside the United States, you do so at your own risk and consent to the transfer and processing of your information in the United States, which may have data protection laws that differ from those in your country.

We do not target our products or services to residents of the European Union, the United Kingdom, or other regions outside the United States.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required by law, provide additional notice such as an email to active customers or a banner on the website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

We will respond to legitimate privacy requests within 30 days, or sooner where required by law.