Privacy policy
BACATÁ COLOMBIAN COFFEE
PRIVACY POLICY
Last Updated: August 5, 2026
Bacatá Colombian Coffee (“Bacatá”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit or make a purchase from bacatacoffee.com, subscribe to our coffee subscriptions, purchase gift cards, contact us, or otherwise interact with our website.
We believe privacy should be simple, transparent, and respectful. We collect only the information necessary to operate our business, fulfill your orders, improve your shopping experience, and comply with legal obligations.
This Privacy Policy should be read together with our:
● Terms of Service
● Shipping Policy
● Return & Refund Policy
● Subscription Policy
1. Scope of this Policy
This Privacy Policy applies to personal information collected through:
● bacatacoffee.com
● our Shopify online store
● customer service communications
● subscription purchases
● marketing communications
● promotional campaigns
● contests or surveys (if offered)
● social media interactions that direct you to our website
This Policy does not apply to third-party websites that may be linked from our website. Those websites have their own privacy practices, and we encourage you to review them separately.
2. Our Commitment to Privacy
We are committed to handling your personal information responsibly and in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy laws.
Our objective is to collect only the information reasonably necessary to operate our business and provide you with excellent customer service.
3. Personal Information We Collect
Depending on how you interact with our website, we may collect different categories of personal information.
Information You Provide
When you place an order, create an account, subscribe, or contact us, we may collect:
● Full name
● Billing address
● Shipping address
● Email address
● Telephone number
● Order history
● Subscription preferences
● Gift card purchases
● Customer support communications
● Product reviews or feedback
● Marketing preferences
Payment Information
Payments are securely processed by Shopify and its authorized payment providers. Bacatá Colombian Coffee does not store complete credit card numbers or payment credentials on its own systems.
We currently accept payments through Shopify Payments and PayPal. We may also enable additional payment methods supported by Shopify Checkout (such as Shop Pay, Apple Pay, or Google Pay) from time to time. Each payment provider may collect information necessary to authorize and process your transaction, subject to its own privacy practices.
Subscription Information
If you purchase a coffee subscription, we may also collect information related to:
● delivery frequency;
● subscription status;
● billing history;
● renewal dates;
● shipping preferences.
Subscription management may be provided by a third-party Shopify application.
Communications
If you contact us by email, telephone, website forms, or social media, we may collect:
● your name;
● contact details;
● correspondence;
● customer service notes;
● photographs you submit (for example, when reporting damaged shipments).
4. Information Collected Automatically
When you browse our website, certain technical information may be collected automatically. This may include:
● IP address
● Browser type
● Device information
● Operating system
● Pages visited
● Date and time of access
● Referring website
● Session activity
● General geographic location derived from IP address
This information helps us understand website performance, improve user experience, and maintain website security.
5. Cookies and Similar Technologies
Like most e-commerce websites, our website uses cookies and similar technologies. Cookies are small text files stored on your device that allow websites to recognize your browser and remember certain information.
Cookies help us:
● keep products in your shopping cart;
● remember your preferences;
● improve website functionality;
● understand website traffic;
● measure advertising performance;
● enhance your shopping experience.
Some cookies are essential for our website to function properly. Others help us improve our services through analytics or marketing.
Essential Cookies
Required for website operation, including:
● shopping cart functionality;
● secure checkout;
● account login;
● fraud prevention.
These cookies cannot normally be disabled without affecting website functionality.
Performance and Analytics Cookies
These cookies help us understand:
● how visitors use our website;
● which pages are most popular;
● how customers navigate through the website;
● website performance.
Analytics data is generally aggregated and does not directly identify individual visitors.
Marketing Cookies
We use marketing and advertising cookies and tracking pixels, including the Meta Pixel (Facebook/Instagram) and Google Ads/Google Analytics, to help us understand how visitors interact with our website, measure the effectiveness of our advertising campaigns, and show relevant ads to potential customers on these platforms. These tools may collect information such as pages visited, products viewed, and actions taken on our site, and may share this information with Meta and Google for advertising purposes.
You can manage or withdraw your consent to marketing cookies at any time through our cookie consent banner, or by adjusting your browser settings. For more information on how these platforms handle your data, please refer to Meta's Privacy Policy and Google's Privacy Policy.
6. Shopify
Our online store is hosted by Shopify Inc. Shopify provides the e-commerce platform that enables us to sell our products and services. Shopify processes certain information on our behalf in order to:
● process transactions;
● host the online store;
● manage customer accounts;
● provide checkout functionality;
● support fraud prevention;
● provide website analytics.
For additional information about Shopify’s privacy practices, customers may review Shopify’s own Privacy Policy.
7. How We Use Your Information
We use personal information for legitimate business purposes, including:
To Process Orders
● payment processing;
● order confirmation;
● shipping;
● subscription fulfillment;
● customer support.
To Operate Our Business
● inventory management;
● fraud prevention;
● accounting;
● internal reporting;
● business administration.
To Improve Our Website
● understanding customer behaviour;
● improving navigation;
● identifying technical issues;
● enhancing user experience.
Marketing Communications
Where permitted by law or where you have provided consent, we may send:
● newsletters;
● promotional offers;
● product announcements;
● seasonal promotions;
● subscription reminders.
You may unsubscribe from marketing emails at any time using the unsubscribe link included in our communications. Operational emails (such as order confirmations and shipping notifications) will continue to be sent where necessary to fulfill your purchases.
Legal Compliance
We may use or disclose information where necessary to:
● comply with legal obligations;
● respond to lawful requests;
● protect our legal rights;
● investigate fraud;
● protect customers and our business.
8. Sharing Personal Information
We do not sell your personal information. We share information only where reasonably necessary to operate our business. This may include sharing information with:
● Shopify;
● payment processors;
● shipping carriers (Trexity, ClickShip, Canada Post, or other carriers as applicable);
● subscription application providers;
● email service providers;
● analytics providers;
● professional advisors (such as accountants or legal counsel);
● government authorities where required by law.
Each service provider receives only the information reasonably necessary to perform its services.
9. Retention of Personal Information
We retain personal information only for as long as reasonably necessary to:
● fulfill the purposes described in this Privacy Policy;
● complete transactions and subscriptions;
● provide customer support;
● comply with legal, accounting, tax, and regulatory obligations;
● resolve disputes; and
● enforce our agreements.
When personal information is no longer required, it will be securely deleted, anonymized, or destroyed in accordance with the following retention schedule:
● Customer orders: retained for 7 years, for accounting and tax purposes;
● Customer service communications: retained for 2–3 years;
● Marketing consent records: retained for the duration of consent, plus the applicable limitation period;
● Website analytics data: retained for 14–26 months, depending on platform settings.
10. Security of Personal Information
Protecting your personal information is important to us. We use commercially reasonable administrative, technical, and organizational safeguards designed to help protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Examples include:
● secure Shopify hosting;
● encrypted payment processing;
● restricted access to customer information;
● password-protected administrative accounts;
● software and platform security updates.
Although we take reasonable measures to safeguard personal information, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.
11. International Processing of Information
Bacatá Colombian Coffee operates in Canada; however, some of the service providers we use (including Shopify and certain third-party applications) may process or store information outside Canada.
As a result, your personal information may be subject to the laws of other jurisdictions and may be accessible to courts, law enforcement agencies, or regulatory authorities in those jurisdictions where permitted by law. Whenever possible, we work with reputable service providers that maintain appropriate privacy and security safeguards.
12. Your Privacy Rights
Depending on applicable Canadian privacy legislation, you may have the right to:
● request access to personal information we hold about you;
● request correction of inaccurate or incomplete personal information;
● withdraw consent where processing is based on consent (subject to legal or contractual restrictions);
● request information regarding how your personal information has been used or disclosed; and
● submit a complaint regarding our privacy practices.
Certain requests may be limited where we are legally required or permitted to retain information.
13. Access and Correction Requests
If you wish to access, update, or correct your personal information, please contact us using the contact information provided at the end of this Policy.
We may need to verify your identity before responding to your request. Where permitted by law, we may decline requests that are frivolous, repetitive, or would adversely affect the privacy rights of another individual.
14. Marketing Communications
You may unsubscribe from promotional emails at any time by:
● clicking the “Unsubscribe” link included in our emails; or
● contacting us directly.
Please note that even if you opt out of marketing communications, we may still send important service-related messages regarding:
● orders;
● subscriptions;
● account administration;
● shipping notifications; and
● customer support.
15. Cookies and Browser Controls
Most web browsers allow you to control or disable cookies through your browser settings. Please note that disabling certain cookies may affect website functionality, including shopping cart features, account login, and checkout.
Bacatá Colombian Coffee has implemented a cookie consent banner on its website, allowing visitors to manage certain cookie preferences directly, including analytics and marketing cookies where applicable.
16. Third-Party Websites
Our website may contain links to third-party websites, including social media platforms or partner websites. We are not responsible for the privacy practices, content, or security of third-party websites.
We encourage you to review the privacy policies of any third-party websites before providing personal information.
17. Children’s Privacy
Our website and products are intended for a general audience and are not directed toward children under the age of 13. We do not knowingly collect personal information directly from children.
If we become aware that personal information has been collected from a child without appropriate authorization where required by law, we will take reasonable steps to delete that information.
18. Business Transfers
If Bacatá Colombian Coffee is involved in a merger, acquisition, sale of assets, financing, or other business transaction, customer information may be transferred as part of that transaction, subject to applicable privacy legislation.
Any successor organization will be expected to protect personal information in a manner consistent with this Privacy Policy.
19. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
● changes in our business operations;
● changes in technology;
● changes to our website;
● legal or regulatory developments; or
● changes in our service providers.
The updated version will be posted on our website with a revised “Last Updated” date. Where required by law, we will provide additional notice of material changes.
20. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.
Bacatá Colombian Coffee
Email: listentoyou@bacatacoffee.com
Website: bacatacoffee.com
Mailing Address: 684 Bronson Ave, Unit A, Ottawa, Ontario, Canada, K1S 4E9
If you are not satisfied with our response to a privacy concern, you may have the right to contact the Office of the Privacy Commissioner of Canada or another applicable privacy regulator.