1. About This Policy

This policy applies to the website published at homesikcoffee.buzz and to every page under that domain, including our services page, our contact page, this privacy page and our terms of service page. It also applies to information we collect in the ordinary course of running a home roast subscription roastery, such as your name, contact details, delivery address, roast preferences and the notes you send us about a batch you received.

The policy does not apply to any website operated by a third party, even where that third party is linked from our pages or is used to process a payment or deliver a parcel. Those organizations publish their own privacy documents and we encourage you to read them before handing over information. We also do not control the privacy practices of the mail carrier, payment processor or email platform that touches your data on our behalf, though we choose those partners carefully and we hold them to written terms.

This document is meant to be read alongside our Terms of Service. The Terms of Service describe the commercial relationship between you and Homesik Coffee LLC, including subscription cadence, shipping windows and cancellation rules. This Privacy Policy describes the information relationship. Where the two documents overlap, for example around payment records, both apply and neither one cancels the other.

2. Who We Are

Homesik Coffee LLC is a limited liability company registered in the United States and operating a small roasting and writing practice from West Valley City, Utah. Our full mailing address is 3586 S Davi Ct, West Valley City - 84119-3499, United States (US). Our general contact email is hello@homesikcoffee.buzz and our telephone number is +19897483675.

The business is deliberately small. Roasting, cupping and most correspondence happen in the same room, and the person who answers your email is usually the person who roasted your bag. That closeness matters for privacy because it limits how far your information travels. We do not run a large data operation, we do not buy lists of prospects, and we do not sell information about our subscribers to anyone.

Because we operate from a single location in the United States, our primary compliance posture is built around United States federal and Utah state law. Where a visitor or subscriber is located in another jurisdiction with stronger privacy protections, we aim to honor the substance of those protections even when we are not strictly required to do so. Please see the section on international visitors for more detail.

3. Information We Collect

We collect three broad categories of information. The first is information you give us directly. The second is information that is created automatically when you use the website. The third is information we receive from the partners who help us deliver coffee or collect payment.

Information you give us directly may include your full name, email address, telephone number, postal address for delivery, the name of a gift recipient where you send a box, your brew method preferences, your grinder and kettle details where you share them during a question hour, the text of any message you send through the contact form, and any feedback you volunteer about a roast. It may also include photographs or screenshots of a brew you send for comment, though we ask that you avoid including other people in such images without their permission.

Information created automatically may include the type of browser and device you use, the pages you visit on our site, the approximate region from which a request originates, the referring page that brought you here, and the time and date of your visit. This information is aggregated by our hosting environment to keep the site available and to detect abusive traffic. We do not attempt to identify individual visitors from this data except where necessary to stop fraud, spam or a security incident.

Information received from partners may include a payment confirmation, the last four digits of a card, a billing postal code and a transaction identifier from our payment processor. We do not receive or store full card numbers. We may also receive delivery confirmation events from a shipping carrier, which tell us that a parcel was delivered, delayed or returned.

4. How Information Reaches Us

Most information reaches us through one of four routes. You may type it into the contact form on our contact page, which then opens your own email program so that the message travels from your mailbox to ours. You may reply to a cupping note letter that we send after a batch ships. You may subscribe to a weekly batch and provide delivery and contact details in the process. Or you may speak with us on the telephone, and we may take a note of the conversation so that the next batch is roasted correctly.

Some information arrives indirectly. Our email platform records that a letter was delivered and whether it was opened, which helps us judge whether the cupping note format is actually being read. Our payment processor sends a confirmation when a recurring charge succeeds or fails. Our hosting provider keeps short lived access logs for security purposes. Each of these partners is discussed in more detail in the service provider section below.

We do not use hidden trackers, fingerprinting scripts or data brokers to build a profile of you across other websites. If we ever add a measurement tool beyond basic hosting logs, we will describe it here and in the cookie section before it goes live, and we will keep the added tool limited to what is necessary for running the roastery.

5. Why We Use Information

We use information to roast and deliver the coffee you asked for, to write a cupping note letter that matches your batch, to answer your questions during a home barista hour, and to keep the business records that any small company must keep. Each of those purposes requires a different amount of data, and we try to collect only the amount that the purpose actually needs.

Specifically, we use contact information to confirm a subscription, to send the letter and the brew guide sheet, to notify you about a shipping delay or a recalled lot, and to respond when you write to us. We use delivery information to pack and route a parcel and to handle a reshipment when a carrier reports a problem. We use roast preference information to choose the profile for your next batch and to decide which green lot to buy next. We use payment records to charge a recurring subscription and to resolve a billing dispute. We use aggregate website information to keep pages loading quickly and to notice when a form is broken.

We use information for internal record keeping as well. A roastery that forgets which batch went to which subscriber cannot answer a legitimate complaint, and it cannot trace a defect back to a green lot. Keeping a written record protects you as much as it protects us. Those records are kept in a locked cabinet and in a small number of password protected digital files, never in an open shared folder.

7. Subscriptions and Recurring Orders

A weekly batch subscription is a standing arrangement. When you start one, we record the cadence you chose, the roast profile you prefer, the delivery address and the date of the first shipment. That record is used every week to generate the next roast list and the matching cupping note letter. Without it we could not roast the right amount or send the right letter.

If you pause a subscription, we keep the record but stop generating new roasts until you resume. If you cancel, we mark the record as closed and stop charging, but we keep the transaction history for the accounting period required by law. You can ask us to shorten that retention where the law allows, and you can ask us to correct a preference at any time by writing to hello@homesikcoffee.buzz or calling +19897483675.

Gift box roasts are treated slightly differently. When you buy a gift, we record the recipient name and address so the parcel arrives correctly, but we do not add the recipient to a marketing list and we do not keep the recipient details longer than needed to resolve delivery problems. If the recipient later starts their own subscription, that new relationship is governed by this policy from the date it begins.

8. Payments and Billing

We use a payment processor to handle card details. Your card number is entered into the processor interface and is never stored on our servers. We receive a confirmation that includes a transaction identifier, the amount, the billing postal code and the last four digits of the card so that we can match a charge to an order and help you if a card is replaced.

Billing records are kept for the period required by tax and accounting rules. We do not sell payment records, and we do not share them with anyone except the processor, our accountant and a tax authority where compelled by law. If a charge is disputed, we may share the relevant order and delivery records with the processor so that the dispute can be resolved fairly.

We will never ask you for a full card number by email, by text message or over the telephone. If you receive a message that claims to come from Homesik Coffee LLC and asks for card details, treat it as fraudulent and report it to us immediately. Our legitimate billing messages only reference an order, an amount and a date, never a full card number.

9. Cookies and Local Storage

This website keeps its footprint small. We do not run advertising cookies and we do not run cross site tracking cookies. The site may set a small number of functional values in your browser storage so that the mobile menu behaves correctly and so that a page remembers a preference while you are using it. These values are not used to identify you and they are not shared with a third party.

Our hosting environment may set a short lived security cookie to distinguish a normal browser from automated traffic. That cookie expires quickly and carries no personal content. If your browser blocks it, the site should still work normally, though we cannot guarantee that every anti-abuse measure will behave identically.

You can clear cookies and local storage at any time through your browser settings. Clearing them may reset the mobile menu state and any temporary preference, but it will not affect a subscription or a saved order. If we introduce a cookie that is not strictly functional, we will describe it in this section before it is used and we will provide a way for you to decline it.

10. Measurement and Analytics

We measure the performance of this website in aggregate. That means we look at counts, such as how many people visited a page or how many contact form attempts failed, rather than at the identity of any individual visitor. Aggregate counts help us decide whether a page loads quickly enough and whether a form is doing its job.

If we adopt a third party measurement service in the future, we will choose one that allows us to disable identifying signals, and we will document the service here. We will not permit a measurement provider to combine our data with data from other sites for advertising purposes. If we cannot obtain that restriction in writing, we will not use the provider.

Email letters are measured more closely because they are a core part of the product. Our email platform records delivery, open and link events for each subscriber. Those events help us decide whether the cupping note format is clear. You can ask us to stop recording open events for your address, and we will honor the request by sending a plain text version of the letter without tracking.

11. When We Share Information

We do not sell personal information. We do not rent it, trade it or hand it to a data broker. We share it only in the limited circumstances described in this section, and only to the extent needed for a specific purpose.

We share information with service providers who help us run the roastery, such as a shipping carrier, a payment processor, an email platform and an accountant. Each provider is bound by a contract that restricts its use of the information to the service it performs for us. We share information when the law requires it, for example in response to a valid legal order, a tax filing or a product safety obligation. We share information when it is necessary to protect the rights, safety or property of Homesik Coffee LLC, our subscribers or the public, such as when investigating fraud or a threat.

We may share information in connection with a sale, merger or reorganization of the business. If that happens, the successor will be bound by this policy for information collected before the transfer, unless you are given a new notice and a new choice. We will tell you about a transfer that affects your information by email and by a notice on this page.

12. Service Providers

Our service providers fall into a few categories. Hosting and security providers keep the website online and defend it against automated abuse. Email providers deliver the cupping note letters and the brew guide sheets and record basic delivery events. Payment providers process card charges and send us a confirmation. Shipping carriers move parcels and report delivery status. Accounting providers maintain the records that a limited liability company is required to keep.

Each category of provider receives only the information needed to do its job. A shipping carrier receives a name and an address, not your brew preferences. A payment processor receives a billing amount and a card, not your cupping notes. An email provider receives an address and a message, not your full order history. We review our providers periodically and we replace a provider that cannot meet our standards.

Some providers process information outside the United States. Where that happens, we rely on written contractual protections and on the provider account settings that limit data location and retention where the provider offers such controls. We do not authorize a provider to use our information for its own marketing, and we do not authorize a provider to build a profile of our subscribers for resale.

13. How Long We Keep Information

We keep information only as long as we need it for the purpose it was collected, plus any period required by law. Contact messages are kept for as long as needed to answer the question and for a short period afterward in case the same person writes again. Subscription records are kept for the life of the subscription and for the accounting period that follows it. Payment records are kept for the period required by tax and accounting rules. Delivery records are kept long enough to resolve a carrier dispute.

When a retention period ends, we delete the information or make it anonymous. Deletion is carried out in our email platform, our order system and any local files that contain the same information. Backup copies are cycled out on a rolling schedule. We cannot always delete a record from a backup instantly, but we will not restore a record from backup for any purpose other than disaster recovery, and the record will be deleted again as soon as the backup cycle turns over.

If you ask us to delete information and we are required to keep a record for tax or accounting reasons, we will tell you which record we must keep and for how long. We will delete everything that is not covered by that obligation. You can make a deletion request by writing to hello@homesikcoffee.buzz or by calling +19897483675.

14. How We Protect Information

We protect information with a combination of physical, technical and organizational measures. Physical measures include a locked cabinet for paper records and a roastery that is not open to the public. Technical measures include password protected accounts, two factor authentication on the accounts that hold subscriber data, encrypted connections to this website and a payment processor that never exposes a full card number to us. Organizational measures include limiting access to the people who actually need it and training everyone at the roastery on how to handle a suspicious message.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by law, and we will tell you what happened, what we have done and what you can do to reduce the risk. We keep a written incident log so that we can learn from a mistake rather than repeat it.

Please help us by using a strong password for any account you create, by not sending sensitive information through an unencrypted channel and by telling us promptly if you receive a message that looks like it came from us but does not feel right. A quick report from you can stop a fraud attempt before it reaches another subscriber.

15. Your Privacy Rights

You have the right to ask what information we hold about you and to receive a copy of it. You have the right to ask us to correct information that is wrong or incomplete. You have the right to ask us to delete information that we no longer need, subject to the records we must keep by law. You have the right to ask us to restrict how we use information while a question about accuracy is being resolved. You have the right to object to a use that is based on our legitimate interests. You have the right to ask for a portable copy of information you provided to us. And you have the right to withdraw consent where consent is the basis for a use.

To exercise a right, write to hello@homesikcoffee.buzz with enough detail for us to find your record, such as the email address you used to subscribe and the approximate date of your last order. We will confirm receipt within a reasonable time and respond within the period required by applicable law. We may ask for additional verification where the request concerns sensitive information, but we will not ask for more than we need.

We will not discriminate against you for exercising a privacy right. If you ask us to delete your data, we will still honor any live order that has already shipped, and we will still answer a direct question you send us. You may also authorize another person to act on your behalf, provided you give us a written permission that we can verify.

16. Privacy for Children

This website and the subscription service are intended for adults. We do not knowingly collect personal information from a child under the age of thirteen. If you believe that a child has sent us information, please contact us at hello@homesikcoffee.buzz and we will delete the information promptly. A parent or guardian may also contact us to ask what information, if any, we hold about a child.

Gift boxes may be addressed to a young person, but the order is placed by an adult and the contact information we keep belongs to that adult. We do not create a separate account for a gift recipient and we do not send marketing messages to a recipient. If a recipient later subscribes independently, we will treat that subscription as an adult relationship and will confirm age where the law requires it.

If we learn that we have inadvertently collected information from a child in a way that is not permitted, we will delete it as soon as possible and will review how it happened so that the same mistake does not recur. We take this obligation seriously because a small roastery depends on the trust of the households it serves.

17. Email and Message Choices

There are two kinds of email you may receive from us. The first is transactional, and it is necessary to fulfill a subscription. It includes a subscription confirmation, a shipping notice, a delivery alert, a billing failure notice and a cupping note letter that is part of the product you bought. The second is optional, and it includes a seasonal announcement, a new lot preview or an invitation to a home barista hour. You can stop optional email at any time by using the unsubscribe link in the message or by writing to us.

Stopping optional email does not stop transactional email while a subscription is live. If you want to stop all email, you must first cancel the subscription, because we cannot roast and deliver a weekly batch without sending the matching shipping notice. After a cancellation, we will send one final confirmation and then stop.

We may send a short text message if you have given us a mobile number and asked for delivery alerts. You can reply with the word stop to end those alerts. Standard message rates may apply, and we do not send marketing text messages to a number that was provided only for delivery alerts.

19. International Visitors

Homesik Coffee LLC operates in the United States, and information we collect is processed in the United States. If you visit this website or subscribe from another country, you should understand that United States law may offer different protections than the law of your home country. By using the site or placing an order, you consent to the transfer of information to the United States for the purposes described in this policy.

Where a visitor is located in a jurisdiction with a comprehensive privacy law, we will make a good faith effort to honor the core rights described above even where we are not strictly required to do so. That includes a right to access, a right to correct, a right to delete and a right to object. If local law requires a representative or a specific channel for a request, please write to hello@homesikcoffee.buzz and we will explain the available route.

We do not currently offer a separate regional data center. If the volume of international subscribers grows to the point where a regional arrangement becomes useful, we will update this policy and describe the arrangement in plain language. Any such change will not reduce the protections you already have under this version of the policy.

20. Changes to This Policy

We may update this policy when our practices change, when we adopt a new service provider or when the law requires a different disclosure. When we make a material change, we will update the effective date at the top of this page and, where the change affects an active subscriber, we will send a short email that summarizes what changed and why.

We will not apply a materially different use to information we already hold without giving you a chance to object, unless the law requires the new use. If you do not agree with an update, you may cancel a subscription and ask us to delete information that is not subject to a legal retention obligation. Continued use of the website after an update means that you accept the updated policy for future interactions.

We keep a dated copy of each version of this policy so that we can answer a question about what the policy said at a particular time. If you need a copy of an earlier version for a complaint or an audit, write to us and we will provide the version that was in force on the date you specify.

21. How to Reach Us

If you have a question about this policy, a request about your information or a concern about how a message was handled, please contact us using any of the channels below. We prefer email for detailed requests because it creates a written record, but a telephone call is fine for a quick question and we are happy to speak with you directly.

We aim to acknowledge a privacy request within a few business days and to resolve it within the period required by applicable law. If a request is complex, we will tell you why and give you an estimate of when we expect to finish. If we cannot fulfill a request in full, we will explain the reason and tell you how to appeal the decision.

Thank you for reading this policy. A roastery that explains its practices clearly is easier to trust, and trust is the reason a home brewer keeps a subscription running week after week.