Privacy Policy

1. Who we are

Harborlight Coffee Works (“Harborlight”, “we”, “us”) is a coffee roastery operated by Kaycee Smith and registered in New York, USA, at 1045 Feathers Hooves Drive, New York, NY 10011. We are the controller of the personal information described in this policy. You can reach us at services@weightlosscoffeeworks.com or 631-621-7985.

2. Information we collect

We collect only what we need to sell and ship coffee:

• Identity and contact data — name, delivery address, billing address, email address, telephone number.
• Order data — products ordered, grind preference, order value, delivery method, order history and subscription status.
• Payment data — processed by our payment provider. We receive only a transaction reference, the card brand, the last four digits and the expiry date. We never see or store full card numbers.
• Communications — emails, contact form submissions, call notes and review responses.
• Technical data — IP address, browser type and version, device type, operating system, referring page, and pages viewed on this site.
• Marketing preferences — whether you have opted in to our newsletter and your cookie consent choices.

3. How we use it

We use personal information for the following purposes and legal bases:

• To take, process, roast and deliver your order — performance of a contract.
• To manage subscriptions, including pre-shipment notices and billing — performance of a contract.
• To answer enquiries, complaints and warranty or refund requests — performance of a contract and our legitimate interest in customer service.
• To send the newsletter and roast schedule — your consent, withdrawable at any time.
• To detect and prevent fraudulent orders and chargebacks — legitimate interest.
• To measure aggregate site usage and improve pages — consent, via optional analytics cookies.
• To meet tax, accounting and consumer-protection obligations — legal obligation.

4. Who we share it with

We do not sell personal information and we do not share it with data brokers. We disclose it only to service providers acting on our instructions, under written contract:

• Payment processing (PCI-DSS Level 1 certified provider).
• Shipping carriers (USPS, UPS) — name, address and telephone number only.
• Email delivery for order notifications and the newsletter.
• Website hosting and security services.
• Our accountant and, where legally required, tax or law-enforcement authorities.

5. International transfers

Our hosting and email providers may process data in the United States and the European Economic Area. Where personal information of EEA or UK residents is transferred outside those areas, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

• Order and invoice records: seven years, as required for US tax purposes.
• Customer account and subscription data: for as long as your account is active, then 24 months.
• Support correspondence: 24 months from the last message.
• Newsletter records: until you unsubscribe, plus 12 months to evidence consent.
• Server and analytics logs: 14 months maximum.

7. Your rights

Depending on where you live, you may have the right to:

• Know what personal information we hold and request a copy.
• Correct information that is inaccurate or incomplete.
• Delete information we no longer need to retain by law.
• Opt out of marketing at any time, using the link in any email.
• Opt out of the sale or sharing of personal information — we do not sell or share it, so there is nothing to opt out of.
• Object to or restrict certain processing based on legitimate interests.
• Lodge a complaint with your supervisory authority or state attorney general.

To exercise any right, email services@weightlosscoffeeworks.com with the subject line “Privacy request”. We respond within 30 days and never charge a fee or discriminate against you for making a request. We may ask for information to verify your identity before releasing data.

8. Children

This site is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

9. Security

The site is served over TLS 1.3. Administrative access requires multi-factor authentication, order data is encrypted at rest, and access is limited to the staff who need it. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant authority as required by law.

10. Cookies

Cookie use is described separately in our Cookie Policy. You can change your choice at any time using the cookie settings link.

11. Changes to this policy

We review this policy annually and whenever our processing changes. The date at the top of this page always reflects the current version. Material changes are announced by email to subscribers.

Contact for this policy

Harborlight Coffee Works
Attn: Kaycee Smith
1045 Feathers Hooves Drive, New York, NY 10011
Telephone: 631-621-7985
Email: services@weightlosscoffeeworks.com