Privacy Policy

What we collect

We only collect information you choose to give us, plus a small amount of technical data your browser sends automatically.

Information you give us

• Contact and private-hire forms: name, email, topic and message.
• Job applications: name, email, phone, availability, and any résumé you upload.
• Wholesale inquiries: business name, contact name, email, business type and estimated volume.
• Roastery tour bookings: name, email and party size.

Collected automatically

• IP address, browser type, device type and pages visited, through basic server logs and privacy-friendly analytics.

In the shop

Card payments are processed by our point-of-sale provider; we never see or store your full card number. Our security cameras cover the entrance and register only, and footage is overwritten after 30 days.

How we use it

• To reply to your messages and process event, tour or wholesale requests.
• To review job applications and contact candidates.
• To keep the website secure and understand which pages are useful.
• To meet legal, tax and accounting obligations.

We do not sell, rent or trade personal information, and we do not use it for targeted advertising.

Cookies

This site uses no advertising or cross-site tracking cookies. We use:

Type	Purpose	Duration
Strictly necessary	Remembering basic preferences such as a dismissed notice	Session
Analytics	Anonymous, aggregated page counts (no personal profiles)	Up to 12 months
Embedded content	The Google Maps embed on our contact page may set its own cookies	Set by Google

You can block or delete cookies in your browser settings; the site will still work.

Third parties

We share data only with service providers who help us run the shop and website, under contracts that limit their use of it:

• Website hosting and form delivery — to store and send form submissions to our inbox.
• Google Maps — to show our location on the contact page.
• Google Fonts and jsDelivr — to load fonts and scripts, which may log your IP address.
• Instagram — when you tag #TheRetroATX, your post is governed by Instagram’s own policy.
• Point-of-sale and payroll providers — for in-shop payments and staff we hire.

We may disclose information if required by law, such as a valid subpoena.

Your rights

Wherever you live, you can ask us to:

• Tell you what personal information we hold about you;
• Correct anything inaccurate;
• Delete your information;
• Stop using it for any purpose you have not agreed to.

Texas residents have these rights under the Texas Data Privacy and Security Act, and California residents under the CCPA/CPRA. Email privacy@example.com and we will respond within 45 days. We will not treat you differently for exercising your rights.

This site is not directed to children under 13 and we do not knowingly collect their information.

Retention

• Contact and event messages: 24 months after our last reply.
• Job applications: 12 months, or for the length of employment plus as required by law if hired.
• Wholesale records: for the length of the account plus 7 years for tax purposes.
• Server logs: 90 days. Security footage: 30 days.

When we no longer need information, we delete it or make it anonymous. If we change this policy, we will update the date above.