We collect information in the following ways:
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, password (stored in hashed form by our authentication provider) | Provided by you when you register an account |
| Wholesale / shop profile information | Coffee shop or company name, contact name, role, email, phone number, city and state, business type, number of locations, current supplier, estimated monthly volume | Provided by you via our wholesale inquiry / shop profile form |
| Order & payment information | Billing name, shipping address, order contents, payment method details; for wire or bank transfers, the amount, date, reference, and any proof of transfer you choose to upload | Payment is collected and processed by Stripe — we do not store full card numbers on our servers. For signed-in members, a record of each completed order (product, quantity, total, and shipping address) is also stored in our database (hosted on Supabase) to power your account dashboard and volume-tier tracking. |
| Communications | Emails or messages you send us and our replies | Direct correspondence (e.g. contact@originmatchaus.com) |
| Usage data | Pages visited, referring pages, approximate location, device/browser type | Automatically collected via Google Analytics and standard server logs |
| Cookies | Session and analytics cookies | Set by our Site and by Google Analytics — see Section 5 |
If you are located in the European Economic Area or United Kingdom, we process your personal data under the following legal bases:
We do not sell your personal information. We share information only with:
We use essential cookies to operate the Site (e.g. keeping you signed in) and analytics cookies via Google Analytics to understand traffic and usage patterns. You can control cookies through your browser settings; disabling cookies may affect Site functionality such as staying signed in.
We retain account and order information for as long as your account is active and afterward as needed to comply with tax, accounting, and legal obligations (typically 7 years after your last order or account activity). Wholesale inquiry data submitted by non-customers is retained for a reasonable period to follow up, and deleted or anonymized upon request.
If you are in the EEA/UK (GDPR): you have the right to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information — we do not sell personal information. You will not be discriminated against for exercising these rights.
To exercise any of these rights, contact us at contact@originmatchaus.com. We may need to verify your identity before completing your request.
We are based in the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate, which may have different data protection laws than your home country.
Our Site is intended for business customers and is not directed to individuals under 18. We do not knowingly collect personal information from children.
We use reasonable administrative, technical, and physical safeguards to protect your information, including relying on PCI-compliant payment processing through Stripe and encrypted authentication through Supabase. No method of transmission or storage is 100% secure.
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and, where appropriate, notified to registered account holders by email.
Questions about this Privacy Policy or your data can be directed to:
Ceremonial Trade LLC
Email: contact@originmatchaus.com