Privacy Policy

1. Introduction and scope

CoffeeCraft Hub Inc. ("CoffeeCraft Hub," "we," "us" or "our") is committed to protecting the privacy of individuals who visit coffeecrafthub.one and participate in our home barista community platform. This Privacy Policy describes how we collect, use, disclose, retain and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in British Columbia.

This policy applies to personal information collected through our website, contact forms, community platform registration, program enrollment and any other interactions you have with CoffeeCraft Hub. It does not apply to third-party websites linked from our platform, which maintain their own privacy practices.

CoffeeCraft Hub is a home barista community platform. We are not a restaurant, bakery, food delivery service or generic social network. We do not sell food or beverages. Personal information we collect supports community operations, member communication and platform security — not commercial food service.

2. Accountability

CoffeeCraft Hub Inc. is responsible for personal information under our control. We have designated a Privacy Officer accountable for compliance with this policy. You may contact the Privacy Officer at:

• Email: [email protected] (subject line: "Privacy Request")
• Mail: CoffeeCraft Hub Inc., 836 Yates Street, Suite 502, Victoria, BC V8W 1L8, Canada
• Phone: +1 (250) 555-3685

We train staff and volunteers who handle personal information on privacy obligations and limit access to those who require it for legitimate business purposes.

3. Information we collect

3.1 Information you provide directly

When you contact us, register for community membership or enroll in programs, we may collect:

• Full name and preferred display name
• Email address and phone number (if provided)
• Mailing address (if provided for program correspondence)
• Home barista equipment details and brew preferences (if shared voluntarily)
• Messages, inquiries and consent records from contact form submissions
• Program registration details and payment confirmation references (we do not store full credit card numbers)
• Explicit PIPEDA consent checkbox confirmations with timestamps

3.2 Information collected automatically

When you visit coffeecrafthub.one, we may automatically collect:

• IP address and approximate geographic location (city/province level)
• Browser type, operating system and device identifiers
• Pages visited, referral URLs and time spent on pages
• Cookie and similar technology data as described in our Cookie Policy
• Server log entries including request timestamps in America/Vancouver timezone

3.3 Community platform data

Registered members who submit brew logs, recipe cards, challenge entries or ratings may provide:

• Username and public profile information
• Recipe content including grind settings, extraction parameters and tasting notes
• Images or videos uploaded as part of challenge submissions
• Rating scores and review comments
• Moderation flags and communication with moderators

Content you choose to publish in community lanes may be visible to other registered members. Profile visibility settings, where available, are described in platform documentation.

4. Purposes for collection and use

We collect and use personal information only for purposes that a reasonable person would consider appropriate. These include:

• Responding to contact form inquiries and program registration requests
• Creating and managing community member accounts
• Operating brew log hosting, rating infrastructure and challenge programs
• Moderating community content and enforcing our Terms of Service
• Sending transactional communications about programs, challenges and account status
• Improving platform functionality and user experience through aggregated analytics (with consent where required)
• Detecting and preventing fraud, spam, honeypot submissions and security threats
• Complying with legal obligations and responding to lawful requests from authorities
• Maintaining corporate records as required by British Columbia business regulations

We will not use your personal information for purposes materially different from those described above without obtaining additional consent, except where permitted or required by law.

5. Consent

We obtain meaningful consent before collecting, using or disclosing personal information, except where the law permits collection without consent. Contact form submissions require an explicit, unchecked consent checkbox confirming agreement with this Privacy Policy under PIPEDA.

For optional cookies (analytics and marketing), we request consent through our cookie banner offering Accept all, Reject all and Customise options. Your choice is stored for six months, after which we will request consent again. Essential cookies necessary for platform operation do not require consent.

You may withdraw consent at any time by contacting our Privacy Officer, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may limit your ability to use certain platform features.

6. Disclosure of personal information

We do not sell, rent or trade personal information to third parties. We may disclose personal information to:

• Service providers who assist with hosting, email delivery, analytics (with consent) and payment processing — bound by contractual confidentiality obligations
• Volunteer moderators, limited to information necessary for content review and dispute resolution
• Legal and regulatory authorities when required by law, court order or to protect our legal rights
• Professional advisors (lawyers, accountants) bound by confidentiality duties
• Successors in the event of a merger, acquisition or asset sale, with continued protection of personal information

Personal information is stored on Canadian infrastructure wherever practicable. If information is processed outside Canada, we ensure comparable protection through contractual safeguards.

7. Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods include:

• Contact form submissions: three years from last interaction, unless deletion is requested earlier
• Community account data: duration of membership plus two years after account closure
• Cookie consent records: six months, aligned with our cookie banner cycle
• Server logs: twelve months, then anonymized or deleted
• Financial and corporate records: seven years as required by Canadian tax and business regulations

8. Security safeguards

We implement administrative, technical and physical safeguards appropriate to the sensitivity of personal information. These include encrypted transmission (HTTPS/TLS), access controls limiting employee and volunteer access, secure hosting environments, honeypot spam protection on contact forms and regular review of security practices.

Contact form submissions are processed through send.php on our server with POST-only validation, consent verification and automated bot detection. Email notifications are transmitted to authorized CoffeeCraft Hub staff using secure mail transport. We review access logs periodically and restrict administrative privileges to personnel who require them for platform maintenance.

No method of electronic transmission or storage is completely secure. While we strive to protect personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any account credentials associated with community platform access.

9. Individual access and rights

Under PIPEDA, you have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete personal information
• Request deletion of personal information, subject to legal retention requirements
• Withdraw consent for optional data processing activities
• Receive information about our privacy practices and third-party disclosures
• Challenge our compliance with PIPEDA by contacting us or the Office of the Privacy Commissioner of Canada

Submit access or correction requests to [email protected] with the subject line "Privacy Request." We will respond within 30 days. We may request identity verification before processing requests.

10. Children's privacy

CoffeeCraft Hub is intended for individuals aged 16 and older. We do not knowingly collect personal information from children under 16. If we become aware that personal information from a child under 16 has been collected, we will take steps to delete it promptly. Parents or guardians who believe their child has provided personal information should contact our Privacy Officer.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal requirements. Material changes will be posted on this page with an updated "Last updated" date. Where changes significantly affect how we use personal information, we will seek renewed consent where required by law.

12. Contact us

For privacy questions, complaints or requests regarding personal information:

• CoffeeCraft Hub Inc., Privacy Officer
• 836 Yates Street, Suite 502, Victoria, BC V8W 1L8, Canada
• Email: [email protected]
• Phone: +1 (250) 555-3685
• Business Number: BN 846789012BC0001

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.