Privacy Policy

2.1 Overview

Hightower collects and processes information to operate our marketplace, fulfill purchases, provide personalized coffee experiences, communicate with customers and businesses, prevent fraud, and improve our services.

This Privacy Policy explains the categories of information we may process and the reasons for doing so.

2.2 Information collected

Depending on the services used, we may collect:

• Account details, including name, email, login credentials managed through our authentication systems, and account preferences.
• Shipping, billing, order, and transaction information.
• Coffee quiz answers, taste preferences, flavor interests, origin interests, saved products, Coffee Passport activities, and purchase history.
• Business identity, company details, product submissions, sourcing inquiries, and communications.
• User-generated profile information, public content, and support correspondence.
• Device, browser, usage, security, cookie, and analytics information.
• Information from service providers and business integrations where permitted.

Payment card data is processed through designated payment providers. Hightower should not represent that it never receives payment information unless that claim has been verified against its implementation.

2.3 Purposes

We use information to provide accounts and requested features, process orders, support customers, display relevant coffees, maintain business connections, communicate about transactions, prevent abuse, enforce agreements, improve functionality, perform analytics, and comply with legal requirements.

Where legally permitted and subject to applicable user choices, information may also be used to personalize advertisements and marketing communications.

2.4 Coffee personalization

Quiz responses and coffee interactions may be used to build, update, and improve your Coffee Profile and recommendations.

Eligible purchase history may update your preferences and personalized recommendations.

A Coffee Profile reflects preferences and activity; it is not intended as a sensitive personal assessment.

2.5 Sharing information

Hightower may share information with service providers and recipients as reasonably necessary to deliver its services, including payment processors, hosting providers, fulfillment partners, roasters fulfilling orders, communications providers, fraud-prevention providers, analytics providers, and advertising services where permitted.

Only information reasonably necessary for the relevant purpose should be shared.

Hightower does not authorize third parties to use fulfillment information for unrelated marketing merely because they receive an order.

2.6 Public profiles

Consumer accounts are private by default.

If a user elects to make a profile public through an available feature, designated public information may become visible to other users or visitors.

Information marked private should not be displayed publicly without appropriate authorization.

Users should be informed of the specific information that will be shared before enabling a public profile.

2.7 Advertising and cookies

Cookies and comparable technologies may support account sessions, functionality, analytics, fraud prevention, and advertising.

Users will be provided legally required notices, consent mechanisms, and opt-out choices.

Where applicable, Hightower will honor legally recognized privacy requests and preference signals.

2.8 Marketing messages

Transactional communications may include order confirmations, security notices, sourcing messages, service changes, and account-related correspondence.

Marketing communications are managed separately from transactional messages.

Users may unsubscribe from marketing emails through the provided unsubscribe mechanism or applicable account settings.

2.9 Data retention

Information is retained for purposes reasonably related to operations, contractual obligations, legal compliance, security, fraud prevention, and dispute resolution.

Retention periods differ by category and must be specified in Hightower's verified internal retention schedule.

2.10 User privacy rights

Depending on applicable law, users may have rights to access, correct, delete, obtain copies of, or limit certain uses of their personal information.

Requests may be sent to hello@hightowercoffee.com or submitted through supported account controls.

Hightower may verify the identity of a requester and retain information where legally permitted or required.

2.11 Security

Hightower uses reasonable technical, administrative, and organizational safeguards appropriate to the information processed.

No electronic system can be guaranteed completely secure.

2.12 Children

Hightower is not intended for children under 13 and does not knowingly seek their personal information.

Transactional services require users to be at least 18 years old.

2.13 Changes

Material changes will be communicated when required by law, and the updated policy will display its effective date.

2.14 Privacy contact

hello@hightowercoffee.com