Privacy Policy

Note:

This privacy policy is constantly being updated with the most recent available information. We may also update it simply to make it a bit more readable. If you inadvertently see that information is missing or you have questions about any part of this policy, please do not hesitate to contact me. For now, consider this document a work in progress as I continue to add information and format its layout.

Effective date June 3rd, 2018

Whole Latte Coffee values the privacy of everyone that visits our website. This privacy policy explains how we collect personal data on our website, how we use and disclose that data. It also describes how we store and protect your data.

Once you provide personal data to our website, you consent to the methods outlined in this privacy policy.

Who we are

Whole Latte Coffee is a business registered to me, Sebastiaan Swinkels. To get in contact with me please use the contact form or send me an email at info@wholelattecoffee.com

Our website address is: https://www.wholelattecoffee.com

Our address is:
Whole Latte Coffee
Sebastiaan Swinkels
Finkenstrasse 3
52538 Gangelt, Germany

What personal data we collect, store, share and why.

1. Comments

When a visitor submits a comment on our website, we collect and store only the data entered in the comment form. This data is stored indefinitely, or until the visitor asks us to remove it. Your email address is then turned into an anonymous hash which is provided to the Gravatar service to see if you have a Gravatar account. If you do have an account and the comment you submitted is approved by the administrator, your Gravatar profile picture will be publicly visible along with your comment, name and URL.

The data from the comment form is also checked by an automated spam detection service called Akismet. The data sent to the Akismet service is name, email address, site url, comment and several pieces of technical data such as IP address, browser user agent string and referrer.

Gravatar and Akismet are both services by Automattic. For more in depth information about what Automattic collects, stores and shares, visit https://automattic.com/privacy-notice/

2. Product Reviews

When a visitor submits a review for a product on our website, we collect the data entered in the review form. This data is stored indefinitely, or until the visitor asks us to remove it. Similarly to comments, reviews are also checked by Akismet (an automated spam detection service). The data sent to the Akismet service is name, email address, site url, comment and several pieces of technical data such as IP address, browser user agent string and referrer. After approval by the administrator, your review with star rating and name will be publicly visible.

Akismet is a service by Automattic. For more in depth information about what Automattic collects, stores and shares, visit https://automattic.com/privacy-notice/

3. Contact Forms

When a visitor submits data on the contact form we collect data entered in that form, along with browser user agent string and IP address. That data is not stored, it is only used to format an email to info@wholelattecoffee.com. That email will then reside in our email application for up to 6 months after our conversation has ended. We keep this data for that period to offer context to potential future correspondence. None of this data will be publicly visible on our website.

Before the email is sent however, the data is checked by Akismet, an automated spam detection service by Automattic. The data sent to the Akismet service is name, email address, site url, comment and several pieces of technical data such as IP address, browser user agent string and referrer.

Akismet is a service by Automattic. For more in depth information about what Automattic collects, stores and shares, visit https://automattic.com/privacy-notice/

4. Media

This website does not allow for visitors to upload photos directly. However, if a conversation requires photo material to further the conversation, then it is possible to email one or more photos to info@wholelattecoffee.com. With your approval we will then add that photo to the conversation. You should be aware that many devices like for instance smartphones and digital cameras add so called EXIF data to photos. That data can contain personal data like your name, email and so forth. Some devices also add GPS location information of where that particular photo was made, to the EXIF data. If you don’t want that data to be publicly available you should remove it beforehand.

If we add your photo(s) to a conversation we will store them indefinitely or until the visitor that originally submitted them asks us to remove it.

5. Analytics

As of right now, Whole Latte Coffee does not gather ANY analytical data. We may do so in the future, at which point we will update this privacy policy.

6. Order information

When you place an order with us you have to provide us with your contact details as well as your billing and shipping address details. Those details are not optional, without it we can’t fulfill or ship your order. We store all information related to your order for 10 years as required by local law. We use your address details to determine the price of shipping and to determine which taxes we have to apply to the order. If you are not logged in and haven’t provided your address details yet, your IP address may be used to estimate shipping costs. Order data will never be visible to anyone but the administrator and the customer (if they chose to create an account).

In order to ship your order we have to provide our carriers with your name and address details. Packages sent to the Netherlands are shipped via PostNL, all other packages are shipped with either DHL Germany or Deutsche post.

View DHL Germany’s Privacy Policy: https://www.dhl.de/en/toolbar/footer/datenschutz.html
View Deutsche Post’s Privacy Policy: https://www.deutschepost.de/de/f/footer/datenschutz.html
View PostNL’s Privacy Policy: https://www.postnl.nl/privacy-verklaring/

7. Shopping

While you are browsing the shopping part of our website, we will keep track of the products you’ve viewed. We do this so that we can enhance your shopping experience by showing you which products you viewed during your current shopping session. This information is stored in our database and linked to randomly hashed number assigned to your current session in a cookie. Once the session or cookie expires the data in the database is useless. This data is purged at no regular intervals.

8. User accounts

If you place an order you have the option to create a customer account on our website. All contact and address details will then be used to create your account. Afterwards you can supply or remove as much personal data as you please, which we will all store securely. At any point you can modify or remove any and all data from your account, except for your account name. The administrator of this website can also see that data. Passwords are stored in hashed form which means that the administrator can’t see your original password. This also means that the administrator can’t tell you what password you used in case you forget. The administrator can only reset the password and provide you with a temporary password that you will have to change upon your next login. Your account information will not be publicly visible.

We use that data to send you updates on your account and order details, respond to any requests (including refunds and complaints), and to comply with legal obligations such as applying the correct taxes. Rest assured that none of this information shall ever be used to send you unsolicited emails, mails or phone calls.

9. Data from third parties

Whole Latte Coffee does not acquire personal data from any other website or service than our own website.

How we protect your data

Our website is protected by WordFence to stop malicious attempts to access your data or the website as a whole. Furthermore we use a two factor login system for the admin side of the website. The password to the backend of this website is stored in a secure password manager. The website itself is hosted on servers from Protagonist. You can find their privacy policy here: https://www.protagonist.nl/downloads/privacyverklaring_protagonist.pdf

Personal data that isn’t stored on our website, such as order data and email, is stored digitally on a password protected computer with encrypted harddrives. Backups are encrypted and password protected as well.

Data breaches

WordFence constantly keeps us up to date on attempts to breach our website’s security. Should our website’s security ever be compromised we will file a report with local authorities within 72 hours of detection, depending on severity. We will also issue a public statement about any and all breaches on our website and social media.

Your data rights

We honor your right to control your own personal data. By clicking the button below you can request to download the personal data we have collected on this website:

Alternatively you can request for all your personal data to be deleted. Any data we are legally required to keep (such as order data), for administrative or security reason, will be retained. To request deletion click the button below:

If there is certain data you want rectified, please fill out the form below:

For any complaints, please fill out the form below:

Content embedded from other websites

Some posts and pages on this website will have content embedded from other websites, such as Facebook, Instagram, Twitter and so forth. Through embedding such content these websites often collect data, as well as place cookies on your system and track your usage and interaction with the embedded content. In the privacy control center is a switch that enables this content, it is disabled by default.

Who on our team has access to shop data

Whole Latte Coffee is a one-man “team”. As such, only the owner, Sebastiaan Swinkels, has access to this data.

Payments

We use only PayPal as a payment gateway. That means that once you commit to an order, you are transferred to a part of the PayPal website to pay the balance of your account. You do not need to have or create a PayPal account to complete the checkout process. Through PayPal you can pay with your credit or debit card, your PayPal credit (PayPal account required) and a variety of other methods. Note that not all methods may be available in your country.

To make the payment process possible, we send data like your contact and address details, a unique payment identifier and payment provider identifier to PayPal when you are transferred to the PayPal website.View their Privacy Policy here: https://www.paypal.com/uk/webapps/mpp/ua/privacy-prev

Because we use PayPal as the payment processor we never see your actual payment details and as such can’t store it either.