This policy explains how Better Coffee collects and uses your personal data when you visit this website or join our waitlist. It applies to visitors in the European Union (under the GDPR and Spain’s LOPDGDD) and in the United States.

1. Who is responsible for your data

The data controller is [Company legal name], tax ID (NIF/CIF) [number], registered at [registered address]. Contact: david@sevenrootsvc.com.

2. What we collect

When you join the waitlist: your email address and the flavor and purchase option you selected. When you visit the site: technical data such as your IP address, browser type and pages visited, recorded automatically by our hosting provider for security and operation. We do not collect payment details on this site.

3. Why we use it and our legal basis

We use your email to tell you when orders open, confirm your reserved option and send launch news and offers. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form. Technical data is processed on the basis of our legitimate interest in keeping the site secure and working (Art. 6(1)(f) GDPR).

4. How long we keep it

We keep your waitlist data until you unsubscribe or ask us to delete it, and no longer than 24 months after launch if you never place an order. Server logs are kept for up to 30 days.

5. Who we share it with

We do not sell your personal data or share it for advertising. We use service providers who process data on our behalf under a data processing agreement: website hosting (Vercel Inc.), our email service ([email provider]) and Google Fonts, which receives your IP address to deliver the typefaces. Some of these providers are based in the United States. Transfers outside the EU are covered by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. Cookies

This website does not use cookies or tracking technologies. If we add analytics or advertising tools in the future, we will update this policy and ask for your consent first.

7. Your rights (EU)

You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. Every email includes an unsubscribe link. To exercise these rights, email david@sevenrootsvc.com. We will respond within one month. You can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the authority in your country.

8. Your rights (United States)

Depending on your state, including California (CCPA/CPRA), you may have the right to know what personal information we hold, to delete or correct it, and to opt out of its sale or sharing. We do not sell or share personal information as defined by those laws. We will not treat you differently for exercising your rights. Send requests to the email above.

9. Children

Our products contain caffeine and this site is not intended for anyone under 16. We do not knowingly collect data from children.

10. Changes

We may update this policy. The date at the top shows the latest version. If changes are significant, we will tell waitlist members by email.