Privacy Policy

Privacy Policy (GDPR + CCPA Compliant)

Thumb Butte Coffee Co.

Last Updated: June 2026

Thumb Butte Coffee Co. (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you visit or make a purchase from our website, in accordance with the GDPR and CCPA.

1. Information We Collect

When you use our WooCommerce store, we may collect the following information:

Information you provide:

  • Name
  • Billing and shipping address
  • Email address
  • Phone number (if provided)
  • Order and purchase details

Payment information:

  • Payments are processed securely through third-party providers (such as Authorize.net)
  • We do not store full credit card or payment details on our servers

Automatically collected information:

  • IP address
  • Browser type and device information
  • Pages visited and time spent on site
  • Referring website
  • Cookies and usage data (via Google Analytics and WooCommerce)

2. How We Use Your Information

We use your information to:

  • Process and fulfill orders through WooCommerce
  • Send order confirmations, shipping updates, and customer service communications
  • Improve our website, products, and customer experience
  • Prevent fraud and ensure secure transactions
  • Analyze website traffic and performance using Google Analytics
  • Send marketing emails (only if you opt in)

3. WooCommerce & Third-Party Services

Our store is powered by WooCommerce (WordPress), which stores order and customer data necessary to process purchases.

We also use trusted third-party services, including:

  • Payment processors (Authorize.net)
  • Shipping carriers (USPS, UPS, FedEx)
  • Google Analytics (website traffic and performance tracking)
  • Email marketing tools (if subscribed)

These providers only access the data necessary to perform their functions and are required to protect your information.

4. Google Analytics

We use Google Analytics to understand how visitors use our website.

Google Analytics may collect:

  • IP address (anonymized where supported)
  • Device and browser information
  • Pages visited and interactions
  • General geographic location (not precise location)

Google may use cookies to collect this data. You can opt out using:

  • Google Analytics Opt-Out Browser Add-on
  • Your browser’s cookie settings

5. Cookies

We use cookies to:

  • Enable WooCommerce shopping cart functionality
  • Remember user preferences
  • Analyze traffic via Google Analytics
  • Improve site performance and user experience

You can disable cookies in your browser settings, but some site features may not function properly.

6. Legal Basis for Processing (GDPR)

If you are located in the EEA, we process your data under the following legal bases:

  • Contract – to process and deliver your order
  • Legitimate interests – site security, analytics, and business operations
  • Consent – marketing emails and non-essential cookies
  • Legal obligation – tax and accounting compliance

7. Your Rights (GDPR)

You have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Request data portability
  • Withdraw consent at any time (for marketing or cookies)

To exercise these rights, contact us using the information below.

8. Your Rights (CCPA – California Residents)

If you are a California resident, you have the right to:

  • Request disclosure of personal information collected
  • Request deletion of personal data (subject to legal exceptions)
  • Opt out of the sale or sharing of personal information
  • Not be discriminated against for exercising your privacy rights

We do not sell personal information.

9. Data Retention

We retain personal data only as long as necessary to:

  • Fulfill orders and customer service needs
  • Meet legal, tax, and accounting requirements
  • Maintain business records

10. Data Security

We use reasonable technical and organizational measures to protect your data, including secure hosting, SSL encryption, and restricted access controls. However, no online system is completely secure.

11. International Data Transfers

Your information may be processed in the United States or other countries where our service providers operate. By using our site, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last Updated” date.

13. Contact Us

If you have questions or wish to exercise your privacy rights:

Thumb Butte Coffee Co.
402 E Sheldon Street
Prescott, Arizona 86301
thumbbuttecc@gmail.com
(623) 229-4030
thumbbuttecoffeeco.com