Privacy Policy
1. Data Controller
DobleYo Café, a Colombian specialty coffee company based in Colombia, is responsible for processing personal data collected through dobleyo.cafe and en.dobleyo.cafe. To exercise your rights or make inquiries, contact us at:
- Email: privacy@dobleyo.cafe
- Website: dobleyo.cafe
2. Data We Collect
We collect data you provide directly and data generated automatically:
Data you provide
- Name and email address (account registration, newsletter, contact form)
- Shipping address and phone number (orders)
- Payment data (processed by our payment provider — we do not store card numbers)
- Messages and feedback you send us
Data collected automatically
- IP address and browser type
- Pages visited and time spent on site
- Referring URL and device type
- Cookie identifiers (see our Cookie Policy below)
3. How We Use Your Data
- To process and fulfill your orders
- To send order confirmations, shipping updates and receipts
- To send newsletters and promotional offers (only with your explicit consent)
- To respond to inquiries and provide customer support
- To improve our website, products and services
- To comply with legal obligations
4. Legal Basis for Processing
- Contract performance — processing your order requires handling your name, address and contact details.
- Legitimate interest — website analytics, fraud prevention and improving our services.
- Consent — marketing emails and non-essential cookies. You may withdraw consent at any time.
- Legal obligation — tax records and invoicing requirements.
5. Data Sharing
We do not sell your personal data. We share it only with:
- Shipping carriers — to deliver your order
- Payment processors — to handle transactions securely
- Email service provider — to send transactional and marketing emails
- Analytics tools — aggregated, anonymised data only
- Legal authorities — when required by law
6. International Transfers
As an international e-commerce store, your data may be processed in countries outside your own. We ensure appropriate safeguards are in place (standard contractual clauses or equivalent mechanisms) for all cross-border transfers.
7. Data Retention
- Order data: 7 years (accounting and tax requirements)
- Account data: while your account is active, plus 2 years after closure
- Marketing consent: until you unsubscribe
- Contact form messages: 2 years
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email privacy@dobleyo.cafe.
9. Cookies
We use essential cookies for site functionality (session management, cart) and optional cookies for analytics. You can manage your preferences through the cookie banner shown on your first visit.
10. Security
We implement technical and organisational measures to protect your data, including HTTPS encryption, access controls and regular security reviews. No system is 100% secure; in the event of a breach we will notify you as required by law.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or via a banner on our website. The date at the top of this page always reflects the latest revision.
12. Contact
Questions about this policy? Email us at privacy@dobleyo.cafe or use our contact form.