Privacy

Privacy Policy

Last updated: 28 October 2026.

This notice is provided for transparency and is not legal advice.

Who we are

Coffee Field Guide (“we”, “us”) operates this local demo website. For privacy questions, contact: privacy@coffeefieldguide.example (placeholder contact for this local build).

What we collect

Depending on how you use the site, we may process: (a) technical data such as browser type, device, approximate region, and pages viewed (e.g. via analytics cookies or similar technologies if enabled); (b) data you voluntarily enter, such as a display name, city, shop check-ins, cart contents, or order details stored in your browser; (c) optional guest or sign-in profile fields kept locally on your device. We do not intentionally collect special-category data.

On the map, a phone uses device location only after you allow it, and only to sort verified shop addresses during that visit. Those coordinates stay in the browser and are not stored. Desktop browsers are not asked for GPS. When the host already provides an approximate network location (city level) on the request, that estimate is used for the same sort. If it does not, the server may look the network address up once with a geolocation service and does not store the result. If no estimate is available, the map keeps its usual order. Addresses that are not verified are never pinned.

Purposes and legal bases

We process data to: operate and improve the site; remember preferences and check-ins; provide cart/order demos; measure aggregate usage; and respond to requests. Where GDPR applies, bases may include legitimate interests in running an informational site, performance of a request you initiate, and consent where required for non-essential cookies or optional profile features. You may withdraw consent at any time without affecting prior lawful processing.

Storage and retention

Much of the demo state (check-ins, cart, optional local profile) is stored in your browser’s localStorage on your device and is not sent to our servers in this local build. Analytics or hosting logs, if any, are retained only as long as needed for security, debugging, and aggregate statistics, then deleted or anonymised.

Sharing

We do not sell personal data. We may use processors (e.g. hosting or analytics providers) under appropriate agreements. Data may be disclosed if required by law or to protect rights, safety, or the integrity of the service.

Your rights

Where applicable (including under the GDPR), you may have the right to access, rectify, erase, restrict, or object to processing; to data portability; and to withdraw consent. You may also lodge a complaint with your local supervisory authority. To exercise rights regarding data we hold, use the contact above. For purely local browser data, you can clear site data in your browser settings.

International transfers & children

If processors are outside your country, we will rely on appropriate safeguards where required. This site is not directed at children under 16, and we do not knowingly collect their personal data.