Privacy Policy
Last updated: June 2026
Your privacy matters to us. Below we explain what personal data we collect, why, and on what legal basis we process it under the GDPR (Regulation (EU) 2016/679).
Data controller
The controller of your personal data is Coffee Rain, Orzechowa 4B, 30-422 Kraków, Poland. For any data-protection matters, contact us at kontakt@coffeerain.pl.
What data we collect
Your name, email address, phone number and — for delivery — your shipping address. For company orders we also collect the company name and tax ID (NIP). Payment data is handled by our payment provider; we do not store card numbers.
Purposes and legal bases
We process your data to fulfil orders and the sales contract (Art. 6(1)(b) GDPR), to meet tax and accounting obligations (Art. 6(1)(c) GDPR), and — with your consent — to run your account and send the newsletter (Art. 6(1)(a) GDPR).
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to its processing. You may withdraw your consent at any time. You also have the right to lodge a complaint with the supervisory authority (in Poland, the President of the Personal Data Protection Office).
Retention
Order-related data is retained for the period required by law (including tax law). Account data is kept until the account is deleted, and data processed on the basis of consent until that consent is withdrawn.