Privacy Policy
This page describes what this site actually collects and why. It is written to match how the site is built, not copied from a template.
What we collect
When you place an order we collect your name, delivery address, email address and the contents of your order. If you create an account we store your email address and, if you set one, a password hash — never the password itself.
Payments
Card payments are processed by Stripe. Card numbers are entered on Stripe’s own form and are never sent to or stored on our servers. We receive only the result of the payment and the last four digits for your receipt.
We send transactional email — order confirmations, shipping notifications, sign-in codes and password resets. These are sent because you asked for something, and you cannot unsubscribe from them while you have an active order.
Cookies
We use cookies for three things: remembering your language choice, keeping your shopping cart between page loads, and keeping you signed in. We do not run third-party advertising or cross-site tracking cookies.
Sharing
We share your address with the delivery carrier so the parcel can reach you, and your payment details flow to Stripe. We do not sell your data.
Your data
To ask what we hold about you, to correct it, or to have it deleted, email support@buddhacoffee.jp. Order records we are required to keep for accounting purposes are the one exception to deletion.
TODO-owner: the identity and contact point of the data controller (registered business name and address), the retention period for order records, and a lawyer’s review of this policy before launch