What we keep, and for how long.
Short version: your name, address and email so we can send coffee, kept for seven years because Dutch tax law says so. Nothing is sold, nothing is shared with advertisers, and there are no tracking cookies on this site.
Who is responsible
Rift Coffee Roasters, Keileweg 26, 3029 BS Rotterdam, Netherlands. KVK 88 42 19 07. Questions about your data go to hello@riftroasters.nl and are answered by a person, usually the same day.
What we collect and why
When you place an order — name, email address, delivery address, and a phone number if you give one. We need these to fulfil the contract between us: to roast, pack, ship and, if something goes wrong, to find your parcel. Legal basis: performance of a contract.
When you subscribe — the same details, plus your chosen coffee and interval, kept until you cancel. Every subscription email contains a cancel link that works without logging in.
When you email us — whatever you write, kept for two years so the next conversation makes sense.
What we do not collect — payment card details never touch our server; they go directly to our payment provider. We do not run advertising pixels, we do not fingerprint your browser, and we do not build a profile of what you looked at.
Cookies and local storage
This site sets no cookies at all. Your bag is stored in your own browser's local storage under the key rift-bag-v1 and never leaves your device until you submit the order form. Clearing your browser data empties the bag, and nobody else can read it.
Who else sees your data
- Hosting and formsNetlify — EU region
- PaymentsTODO(client) — payment provider
- ShippingTODO(client) — carrier
- EmailTODO(client) — mail provider
Each of these receives only what it needs to do its job — the carrier gets an address, the payment provider gets an amount — and each is bound by a processing agreement. None of them may use your details for their own purposes.
How long we keep it
Order and invoice records: seven years, the retention period Dutch tax law requires. Subscription details: until you cancel, then seven years for the invoices already issued. Emails that are not orders: two years. Everything else is deleted as soon as it stops being useful.
Your rights
You can ask us for a copy of everything we hold about you, ask us to correct it, ask us to delete it, or object to us processing it at all. Write to hello@riftroasters.nl and we will respond within thirty days, usually within one. If we cannot delete something because the tax authority requires us to keep it, we will tell you exactly what and why.
If you are not happy with how we handle it, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
Last updated . If we change anything that affects existing customers we say so by email rather than quietly editing this page.
Demo note: this is a portfolio demonstration of a working shop, not a live business. No orders are processed and no personal data is collected. A real deployment would need the TODO(client) rows above filled in and a lawyer's read-through.