Privacy, considered

Submitting a quotation or sample request stores your name, work email, company if supplied, destination, selected coffees and format, quantity, message and consent record. Authorized site administrators and editors can review these details in the CMS. No email or CRM delivery is connected. Consent covers storing and reviewing this request, not marketing.

Requests expire after 30 days. Daily cleanup removes expired requests; submitting a new request also runs expiry cleanup. The site uses database and media storage: local operation uses Cloudflare development bindings; a hosted version uses D1 and R2. Staff-managed backups may retain earlier records until those backups are rotated separately from live cleanup.

Downloading a buying brief creates a text file on your device and does not submit it. Your device keeps that file until you delete it. Staff sign-in uses authentication cookies. There are no advertising analytics, newsletter subscriptions, tracking pixels or third-party chat tools. Form details are not saved in browser storage.

Request protection stores a keyed, non-readable identifier derived from the network address and a short time window. The address itself is not stored in inquiry records. Counters expire within an hour and are removed by cleanup. A signed form token supports safe retries. Request bodies and email addresses are not written to application logs. A hosting provider may process standard technical request data under its own service operation.

To ask about a saved request or its deletion, contact the site operator through the person who shared this website with you. Do not include payment details or sensitive personal information in the form. Policy version: 6 November 2026.