Legal compliance

Privacy Policy

Last updated: August 22, 2026

At Cafesure S.A.S. B.I.C. ("Cafesure," "we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (cafesureexport.com) or engage with our services.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the site.

1. Information We Collect

We collect information in two ways: information you provide directly and information collected automatically through your use of the site.

Information You Provide

  • Contact details: name, email address, phone number, company name, job title, and country when you complete our contact form or sample request form.
  • Coffee preferences: variety selection, processing method, weight, and preparation preferences when you use our sample builder.
  • Communications: any information you include in messages sent to us via email, forms, or other channels.

Information Collected Automatically

  • Log data: IP address, browser type, operating system, referral URLs, pages visited, time spent on pages, and exit pages.
  • Cookies and similar technologies: we use cookies to maintain session state, remember preferences, and analyze site traffic. See Section 6 below for details.
  • Analytics data: aggregated, anonymized data about site usage patterns collected through third-party analytics tools.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and provide customer support.
  • To process and fulfill sample requests and commercial orders.
  • To communicate about your orders, shipments, and account status.
  • To send you updates about our products and services (only if you have opted in).
  • To analyze website usage and improve our site, content, and services.
  • To comply with legal obligations and enforce our agreements.
  • To detect and prevent fraud, abuse, or unauthorized access.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Consent: when you submit a form or opt in to communications.
  • Contractual necessity: when processing is required to fulfill a sample request or commercial agreement.
  • Legitimate interests: when processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud) and does not override your rights.
  • Legal obligation: when we are required to process data to comply with applicable law.

4. Data Sharing & Third Parties

We do not sell your personal information. We may share your data with the following categories of third parties:

  • Form processing services: Web3Forms processes form submissions on our behalf. Your data is transmitted directly to our inbox.
  • Analytics providers: aggregated, anonymized usage data may be shared with analytics platforms to understand site performance.
  • Logistics partners: shipping and freight companies receive only the information necessary to fulfill your orders (name, address, contact details).
  • Legal and regulatory authorities: when required by law, court order, or to protect our rights.

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

  • Inquiry and sample data: retained for up to 24 months after your last interaction, unless you request deletion earlier.
  • Commercial order data: retained for the duration of the business relationship plus 5 years, as required by Ecuadorian commercial and tax regulations.
  • Analytics data: retained in aggregated, anonymized form indefinitely.
  • Cookies: session cookies expire when you close your browser; persistent cookies expire after 12 months (see Section 6).

6. Cookies

Our website uses cookies to enhance your experience. The types of cookies we use include:

  • Essential cookies: required for basic site functionality (session state, language preference). These cannot be disabled.
  • Analytics cookies: help us understand how visitors interact with our site. These are set only with your consent.
  • Preference cookies: remember your settings and choices (e.g., language selection).

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

7. International Data Transfers

Cafesure is based in Ecuador. If you access our website from outside Ecuador, your information may be transferred to, stored, and processed in Ecuador or other countries where our service providers operate.

For transfers from the EEA, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. By submitting your information, you consent to such transfers.

8. Your Rights

For all users:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data, subject to legal retention requirements.
  • Objection: object to processing based on legitimate interests.
  • Restriction: request restriction of processing in certain circumstances.

Additional rights for EEA/UK residents:

  • Data portability: receive your data in a structured, machine-readable format.
  • Withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing.
  • Lodge a complaint: file a complaint with your local data protection authority.

Additional rights for California residents (CCPA/CPRA):

  • Right to know: request disclosure of the categories and specific pieces of personal information collected.
  • Right to delete: request deletion of personal information.
  • Right to opt out: we do not sell personal information, so no opt-out is required.
  • Non-discrimination: we will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at info@cafesureexport.com. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • HTTPS encryption for all data transmitted between your browser and our servers.
  • Access controls limiting data access to authorized personnel only.
  • Regular security reviews of our systems and third-party service providers.
  • Secure data storage with encryption at rest where technically feasible.

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our website is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email to registered contacts where feasible.

12. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Cafesure S.A.S. B.I.C.
Loja, Southern Ecuador
Email: info@cafesureexport.com
Phone: +593 96 737 0614