Privacy Policy

1. Information we collect

When you shop, create an account or contact us, we collect the information you provide, such as your name, email address, telephone number, billing and delivery addresses, order details and messages. Account information also supports signing in and verifying your email address.

Our contact form uses Cloudflare Turnstile to check for automated abuse. Cloudflare processes technical browser and device information for this security check. We save your name, email address and message and use Resend to email the message to our team. Sending a contact message does not subscribe you to marketing.

Our website and service providers may receive technical information such as your IP address, browser, device, pages requested and error logs. Payment providers process the payment details you enter at checkout; please do not send card numbers or passwords by email.

2. How we use your information

We use personal information to process payments, fulfil and deliver orders, manage accounts, provide customer support, communicate about purchases, prevent fraud and maintain the security of our shop. We also keep records needed for accounting, tax and other legal obligations.

Where you choose to receive marketing, we use your contact information to share coffee releases, café news and offers. You can unsubscribe using the link in a marketing email or contact us. Transactional messages about your orders or account may still be necessary.

3. Cookies and optional analytics

The shop uses cookies and browser storage to remember your cart, support sign-in and account verification, save language preferences and keep the site working. Blocking or clearing this storage can sign you out, remove your saved cart or affect checkout.

When enabled and accepted through our analytics prompt, PostHog helps us understand page visits, interactions, product views and purchases. It also provides session recordings with form inputs masked. Analytics may be associated with your customer ID, name and email when you are signed in; masking form inputs does not make all analytics anonymous.

You can decline optional analytics and still shop. To change a saved choice, clear this website’s cookies and site data in your browser, then reload the site and choose again in the analytics prompt. This also resets other saved site preferences. Your choice applies to that browser; contact us about information already collected.

4. Service providers and disclosure

Running the shop involves providers for hosting, commerce, payment processing, delivery, communications and, where accepted, analytics. They receive the information needed to provide those services. Payment services and external websites may also have their own privacy policies.

We may disclose information when required by law, to respond to lawful requests, or as permitted by law to prevent fraud and protect customers and our business. Some providers may process or store information outside Alberta or Canada, including in the United States, where it may be accessible to authorities under local laws. Contact us for information about our providers and their processing locations.

5. Retention and security

We retain personal information for as long as needed for the purposes described here, including legal recordkeeping, resolving disputes and preventing fraud. Closing an account or withdrawing consent does not necessarily remove records we must retain.

Contact-form records are automatically removed from the shop database after 90 days. Copies in our support email inbox, email provider systems and backups may remain under their separate retention practices and as needed to handle your enquiry or meet recordkeeping obligations.

We use reasonable safeguards appropriate to the information we handle. No website or method of transmission can guarantee absolute security. Keep your account credentials private and contact us if you suspect unauthorized use.

6. Your privacy choices and requests

You can contact us in writing to request access to your personal information, correct inaccuracies, ask about our practices, request deletion or withdraw consent, subject to applicable law and recordkeeping requirements. We may need to verify your identity before acting on a request. If we cannot fulfil a request, we will explain the applicable reason.

Send requests to [email protected] with the subject ‘Privacy request’ for the person responsible for privacy at Bono Coffee Roasters. Please include enough information to identify your account or request, without sending sensitive payment details. You may also raise concerns with the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada, as applicable.

7. Updates to this policy

We may update this policy as our shop or practices change and will revise the date above. Where required, we will notify you of material changes and obtain consent for new uses of your personal information. Contact us if you have questions about an update.