Privacy Policy

We collect only the information reasonably needed to operate the online store, support customers, keep records, protect the website, and communicate where lawful.

• Identity and contact details such as name, email address, phone number, billing address and delivery address.
• Order, account and support information, including products ordered, delivery status, returns history, support messages and form submissions.
• Payment-related information such as payment method, authorization status, transaction reference, masked card details where available, and anti-fraud or verification results. Full card details should be handled by the payment provider, not stored by Out of Coffee.
• Marketing preferences, consent records, unsubscribe records, cookie preferences and communication history.
• Technical information such as IP address, browser, device, pages visited, security logs, analytics events and cookie identifiers.

We collect information directly from you when you browse the website, create an account, place an order, submit a form, contact us, subscribe to updates, request support or respond to a marketing consent request.

We may also receive limited operational information from service providers, including payment providers, delivery/courier tools, analytics services, hosting/security providers, email systems and support tools, but only where this is needed for their role in the customer journey.

We process personal information to provide the website and store, process and deliver orders, handle payment and fraud checks, manage customer accounts, respond to enquiries, manage returns and refunds, keep legal/accounting records, improve website performance, secure the site and send communications that are lawful and relevant.

Where consent is required, such as for certain direct marketing or non-essential cookies, we ask for it separately and keep a record where practical. Where processing is necessary for a contract, legal obligation, legitimate store operation or security purpose, we process only what is needed for that purpose.

Payments are intended to be processed through the configured payment provider. Out of Coffee does not intend to store full card details on its own systems.

If saved or tokenized payment methods are enabled at checkout, the saved-payment facility should be provided by the payment provider. Customers should receive a clear choice before a payment method is saved, and saved methods should be manageable through the payment/account flow provided by the relevant service.

Delivery information may be shared with courier or fulfilment providers where needed to prepare, dispatch, track and support an order.

Prospective customers must opt in before receiving electronic direct marketing. Existing customers may receive limited communication about similar Out of Coffee products where lawful, but every marketing message should include a practical unsubscribe or objection route.

SMS, WhatsApp, email or recorded telephonic consent must not be bundled into general terms acceptance. Consent must be specific, voluntary and capable of being recorded.

We use strictly necessary cookies to run the website, cart, account, checkout, security and preference functions. Analytics, advertising and social/marketing technologies are controlled through the cookie consent tool where required.

Known intended tools include Google Analytics/MonsterInsights, Google Ads, Meta Pixel and WhatsApp-related tooling, but the public cookie provider list should be finalized from the consent tool scan rather than guessed.

We may share personal information with trusted operators and service providers, including hosting, security, analytics, payment, delivery, email, support, accounting, legal or compliance providers. They should receive only the information needed for their role.

We may also disclose information where required by law, regulatory process, fraud prevention, security response, debt recovery, dispute handling or lawful business administration.

Even where Out of Coffee sells only in South Africa, technology providers may process or access information outside South Africa. Where this occurs, we rely on appropriate contractual, legal or operational safeguards required for the transfer and processing of personal information.

We keep information only for as long as reasonably needed for orders, support, legal records, accounting, security, fraud prevention, consent records, analytics, dispute handling or business administration.

We use reasonable technical and organizational safeguards to protect personal information, including access controls, secure payment handoff, security monitoring and operational limits on the information collected. No online system can be guaranteed completely risk free.

You may ask for access to personal information we hold about you, correction of inaccurate information, deletion where lawful, objection to certain processing, withdrawal of consent where processing is consent-based, and help with direct-marketing preferences.

Requests can be sent to info@outofcoffee.co.za or baruch@digitallyshifted.com. We may need to verify your identity before acting on a request.

If you have a privacy concern, please contact us first so we can try to resolve it. You also have the right to complain to the Information Regulator South Africa where applicable.

We may update this Privacy Policy when the website, store, providers, legal requirements or business model change. The latest version will be published on this page.