Privacy Policy | Always 305

1. Introduction

Always 305, LLC ("Always 305," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit https://always305.com (the "Site"), purchase our coffee products, enroll in a subscription, or otherwise interact with us.

By using the Site or buying from us, you agree to the practices described here. If you do not agree, please do not use the Site.

2. Who We Are

Always 305, LLC is a Florida-registered direct-to-consumer specialty coffee company headquartered in Miami, Florida. We sell whole bean and ground coffee, including our four house blends: TRANQUILO, EL PUENTE, AZUCAR, and LA VENTANITA.

For privacy questions, contact: privacy@always305.com

3. Information We Collect

3.1 Information You Provide Directly

Account information: name, email address, phone number, password, and authentication identifiers when you sign in with Google or Apple.
Order information: shipping address, billing address, products purchased, gift messages, and delivery preferences.
Payment information: card details and billing address (processed by Stripe; we do not store full card numbers on our servers).
Subscription preferences: delivery frequency, blend selection, pause/skip choices, and shipping cadence.
Customer support: the content of emails, chat messages, and survey responses you send us.
Marketing preferences: email and SMS opt-ins, referral activity, and review submissions.

3.2 Information Collected Automatically

Device and usage data: IP address, browser type, operating system, device identifiers, language, referring URL, pages viewed, time on page, and clickstream data.
Cookies and similar technologies: see our Cookie Policy for the full list of cookies, pixels, and SDKs we use.
Location data: approximate location derived from IP address (we do not collect precise GPS data).

3.3 Information from Third Parties

Identity providers: name and email from Google or Apple when you use single sign-on.
Payment processors: transaction confirmation, fraud signals, and dispute data from Stripe and PayPal, Inc.
Marketing platforms: engagement events from Klaviyo, Meta Platforms, Inc. (Facebook Pixel), and Google Analytics 4 (operated by Google LLC).
Product analytics: session replay, heatmaps, and behavioral analytics from Microsoft Clarity (operated by Microsoft Corporation).
Shipping protection partner: ShipKeeper (operated by Avnz, Inc.) processes shipping protection enrollments and claims when you opt in at checkout.
Fulfillment partner: Roastify roasts and ships our coffee orders and receives your shipping address and order details to fulfill purchases.
Carriers: shipment tracking and delivery confirmations from USPS, UPS, and FedEx.

4. How We Use Your Information

We use personal information to:

Create and manage your customer account.
Process orders, charge payments, and fulfill subscriptions.
Coordinate shipping and provide tracking updates.
Send transactional messages (order confirmations, shipping notifications, pre-shipment subscription reminders).
Send marketing emails and SMS where you have opted in, including promotions, new product announcements, and recovery messages for abandoned carts.
Personalize the Site, recommend products, and tailor advertising on Meta, Google, and other ad networks.
Measure marketing performance and conduct analytics.
Detect, prevent, and respond to fraud, security incidents, and policy violations.
Comply with legal obligations, including tax reporting and consumer protection laws.
Improve our products, customer experience, and operations.

5. How We Share Your Information

We share personal information with the following categories of recipients:

Payment processors: Stripe and PayPal, Inc. receive billing details, transaction amounts, and order identifiers to process payments and manage disputes.
Fulfillment partner: Roastify receives your name, shipping address, contact email, order line items, and delivery preferences to roast and ship your order.
Shipping protection partner: When you opt into shipping protection at checkout, ShipKeeper (operated by Avnz, Inc.) receives your order ID, customer email, cart total, line items, and (once shipped) tracking information to administer protection coverage and any claims. See shipkeeper.io/legal for ShipKeeper's privacy practices.
Shipping carriers: USPS, UPS, and FedEx receive shipping addresses and package details to deliver your orders.
Email and SMS platform: Klaviyo receives your email address, phone number, order history, and engagement events to send transactional and marketing messages you have opted into.
Analytics providers: Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) receive device, usage, and behavioral data including pseudonymous identifiers, pages viewed, click events, and (in the case of Clarity) session replays and heatmaps. Clarity stores data in U.S. data centers and retains it for 30 days.
Advertising partners: Meta Platforms, Inc. (Facebook Pixel) and Google LLC (Google Ads) receive pseudonymous identifiers, page view events, and conversion events to measure advertising performance and serve personalized ads.
Professional advisors such as accountants, auditors, and lawyers, under confidentiality obligations.
Government authorities when required by law, subpoena, or court order.
Successors in the event of a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal information for money. Some sharing of identifiers and behavioral data with advertising and analytics partners (such as Meta, Google, and Microsoft Clarity) may qualify as a "sale" or "sharing for cross-context behavioral advertising" under the California Consumer Privacy Act. California residents may opt out as described in Section 8.

6. Cookies, Pixels, and Tracking

We use first-party cookies and browser local storage for authentication, cart persistence, shipping protection opt-in state, and recording your cookie consent choice. We use third-party cookies, pixels, and SDKs including the Meta Pixel (Meta Platforms, Inc.), Google Analytics 4 (Google LLC), Microsoft Clarity (Microsoft Corporation), and Klaviyo for analytics, session replay, marketing attribution, and ad personalization.

You can control cookies through our cookie banner and through your browser settings. Browser-based "Do Not Track" signals are not currently honored, but we honor the Global Privacy Control signal where required by law. See our Cookie Policy for details.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy:

Account data: for the life of your account, plus up to 24 months after closure.
Order and tax records: at least 7 years to satisfy tax, accounting, and audit obligations.
Marketing data: until you unsubscribe, plus up to 12 months for suppression list management.
Support records: up to 36 months from the last interaction.
Server logs: up to 90 days.

8. Your Privacy Rights

8.1 All Customers

You can request to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated personal information (subject to legal retention requirements).
Export a copy of your data in a portable format.
Unsubscribe from marketing emails (use the link in any email or update preferences in your account).
Opt out of marketing SMS (reply STOP to any message).

To exercise these rights, email privacy@always305.com from the email address associated with your account, or submit a request through your account settings.

8.2 California Residents (CCPA / CPRA)

California residents have additional rights, including the right to:

Know what categories of personal information we collect, use, disclose, or share.
Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
Limit the use of sensitive personal information.
Be free from retaliation for exercising these rights.

To opt out of sale or sharing, click "Do Not Sell or Share My Personal Information" on our Site footer, or send your request to privacy@always305.com. We honor verified Global Privacy Control signals as opt-out requests.

8.3 European Economic Area, United Kingdom, and Switzerland

If we expand sales to these regions, residents will have rights under the GDPR and UK GDPR, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. Lawful bases include performance of a contract, consent, legitimate interests, and legal obligations. You will have the right to lodge a complaint with a supervisory authority.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact privacy@always305.com and we will delete it.

10. Security

We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest for sensitive fields, access controls, and PCI-DSS compliant payment processing through Stripe. No method of transmission or storage is 100 percent secure, and we cannot guarantee absolute security.

11. International Transfers

Always 305 currently operates in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top reflects the latest revision. For material changes, we will notify you by email or through a prominent notice on the Site at least 30 days before the change takes effect.

13. Contact Us

Always 305, LLC
Attn: Privacy
Miami, Florida, USA
Email: privacy@always305.com