PRIVACY POLICY

Madagascar Coffee Company respects your privacy. This Privacy Policy explains what information we may collect, how we use it, when we may disclose it, and the choices and rights that may be available to you.

Information We Collect

Depending on how you interact with MCC, we may collect information such as:

Contact Information

Including:

- name;

- email address;

- telephone number;

- billing address;

- shipping address; and

- company or organization.

Transaction Information

Including:

- products purchased;

- campaign tier;

- order history;

- transaction amount;

- currency;

- discounts;

- delivery information;

- refund information; and

- communications concerning an order.

Payment-card information is generally processed by our payment providers rather than stored directly by MCC.

Campaign Information

If you participate in Seed to Cup or another MCC campaign, we may maintain information relating to:

- your campaign tier;

- reward eligibility;

- shipment schedule;

- Founder number and optional recognition preference;

- reserved future-purchase eligibility and access windows;

- briefing, cupping, sample-set, and event eligibility;

- campaign communications; and

- fulfillment history.

Website and Device Information

Our website and service providers may automatically collect information such as:

- IP address;

- browser;

- device type;

- operating system;

- pages visited;

- referring pages;

- approximate location derived from IP address;

- interaction with the website;

- cookie identifiers; and

- similar technical information.

Communications

We may retain messages you send through email, forms, customer service, social media, surveys, or other communication channels.

How We Use Information

We may use personal information to:

- process and fulfill orders;

- collect payment;

- deliver campaign rewards;

- manage subscriptions or customer accounts;

- provide customer service;

- communicate shipping or campaign updates;

- prevent fraud and abuse;

- maintain website security;

- manage inventory and logistics;

- improve our products and services;

- understand website usage;

- measure advertising or campaign performance;

- comply with accounting, tax, customs, legal, and regulatory obligations;

- maintain business records;

- protect MCC’s legal rights;

- send marketing communications where permitted; and

- otherwise operate Madagascar Coffee Company.

Shopify and Other Service Providers

Our online store may be hosted or supported by Shopify.

Shopify and other service providers may process customer information to provide checkout, payment, hosting, fraud prevention, analytics, shipping, communications, advertising, or other services supporting our store.

Their handling of information may also be governed by their own privacy policies and legal obligations.

We may also use providers for functions such as:

- payment processing;

- email marketing;

- website analytics;

- advertising;

- customer relationship management;

- shipping;

- logistics;

- accounting;

- cloud storage;

- fraud prevention; and

-technical support.

We disclose personal information to such providers only as reasonably necessary for the services they provide, subject to applicable law.

Advertising, Analytics, and Cookies

MCC may use cookies, pixels, analytics tools, and similar technologies to operate the website, understand visitor behavior, remember preferences, evaluate campaigns, and deliver or measure advertising.

We do not sell personal information for money.

However, certain uses of advertising or analytics technology may be considered “selling,” “sharing,” or “targeted advertising” under some privacy laws even when no money changes hands.

Where applicable, we will provide required privacy choices or opt-out mechanisms.

Browser settings and other privacy controls may also allow you to manage certain cookies or tracking technologies.

Marketing Communications

If you subscribe to MCC communications, we may send information concerning coffee, harvests, company updates, campaigns, events, impact, or offers.

You may unsubscribe from marketing emails by following the unsubscribe instructions included in the message.

We may still send transactional or service-related communications concerning existing orders, accounts, shipments, campaign rewards, or other transactions.

How We Share Information

MCC may share information with:

- MCC affiliates;

- Shopify;

- payment providers;

- shipping and logistics providers;

- warehouses and fulfillment partners;

- professional advisers;

- IT and cloud-service providers;

- advertising and analytics providers;

- government, customs, regulatory, or law-enforcement authorities when required;

- transaction counterparties in connection with a merger, financing, sale, reorganization, or similar corporate transaction; and

- other providers necessary to operate our business.

We do not disclose personal information to unrelated parties simply for them to use for their own direct-marketing purposes unless permitted by law and appropriately disclosed.

International Data Transfers

MCC operates internationally.

Information may therefore be processed in countries other than the country where you live, including Madagascar and the United States.

Where applicable law requires safeguards for international transfers of personal data, MCC and its service providers will use legally recognized safeguards or other lawful transfer mechanisms as appropriate.

Data Retention

We retain information for as long as reasonably necessary to:

- fulfill orders and campaign commitments;

- maintain customer relationships;

- comply with tax, accounting, customs, corporate, and legal requirements;

- prevent fraud;

- resolve disputes;

- enforce agreements; and

- protect legitimate business interests.

Different categories of information may be retained for different periods.

Data Security

MCC uses reasonable administrative, technical, and organizational measures intended to protect personal information.

No method of transmission or storage can be guaranteed to be completely secure, and MCC cannot guarantee absolute security.

Your Privacy Rights

Depending on where you live and which laws apply, you may have rights concerning your personal information, including the right to:

- request access;

- request correction;

- request deletion;

- request a copy or portability;

- object to certain processing;

- restrict certain processing;

- withdraw consent where processing is based on consent;

- opt out of certain targeted advertising or data sharing;

- limit certain uses of sensitive personal information, where applicable; and

- receive equal service and pricing without unlawful discrimination for exercising privacy rights.

We may need to verify your identity before completing certain requests.

Legal exceptions may allow or require us to retain some information even after receiving a deletion request.

Privacy requests may be submitted using the contact information provided on our website.

California Privacy Rights

Where the California Consumer Privacy Act or another California privacy law applies to MCC, California residents may have additional rights relating to access, correction, deletion, sale or sharing, targeted advertising, sensitive information, and non-discrimination.

MCC does not sell personal information for monetary consideration.

Where required, MCC will honor legally recognized opt-out preference signals and provide applicable mechanisms for opting out of covered sharing or targeted advertising.

European Economic Area and United Kingdom

Where European or UK data-protection laws apply, MCC will process personal information using an appropriate lawful basis, which may include:

- performance of a contract;

- compliance with a legal obligation;

- MCC’s legitimate interests;

- protection of legal rights; or

- consent.

Individuals may also have rights to complain to the appropriate data-protection authority.

Children

MCC’s website and campaigns are intended for adults and are not directed toward children.

We do not knowingly solicit personal information from children in violation of applicable law.

Third-Party Websites

Our website may contain links to third-party websites or platforms.

MCC is not responsible for the privacy, security, content, or practices of third-party websites.

Changes to This Policy

We may update this Privacy Policy periodically as our business, website, service providers, or legal requirements change.

The current version will be posted on our website with an updated effective date.