Privacy Policy

This Privacy Policy describes how Groove Coffee Roasters LLP ("Hill Groove Coffee", "we", "us", or "our") collects, uses, discloses, and protects information in connection with our websites, mobile experiences, and related online services (collectively, the "Services"). By using the Services, you agree to the practices described here.

1) Who we are

The Services are operated and managed by Groove Coffee Roasters LLP. For questions about this Policy or our data practices, see the Contact & Grievance Redressal section below.

2) Scope

This Policy applies to information we collect when you access or use our Services, make a purchase, create an account, subscribe to our communications, contact us, or otherwise interact with us. This Policy does not cover third‑party websites, services, or applications that we do not control.

3) Information we collect

• Identity & contact data (e.g., name, email address, phone number, shipping/billing addresses).
• Account data (e.g., username, password, preferences, saved items, order history).
• Transaction & payment data (e.g., products purchased, payment method, amounts). Card details are processed by our payment processors and are not stored by us.
• Device & usage data (e.g., IP address, browser type, device identifiers, pages viewed, referring/exit pages, clickstream data, approximate location).
• Cookies & similar technologies that help us remember your preferences, understand usage, and personalize content. See “Cookies” below.
• Communications you send us (e.g., emails, messages, support requests, reviews).

4) How we use information

• Provide, operate, improve, and personalize the Services.
• Process and fulfill orders, payments, returns, and customer support.
• Send transactional messages (order confirmations, shipping updates) and respond to your requests.
• Send marketing communications where permitted or with your consent (you can opt out anytime).
• Analyze usage and performance; develop new products and features.
• Prevent fraud, enforce our Terms, and comply with legal obligations.

5) Legal bases for processing (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on the following legal bases: performance of a contract, legitimate interests (e.g., to secure and improve the Services), consent (e.g., for certain marketing/cookies), and legal obligations.

6) Cookies & similar technologies

We use cookies, pixels, and local storage to remember settings and to understand how the Services are used. Categories include: strictly necessary, performance, analytics, personalization, and advertising. You can manage cookies through your browser settings and (where available) our cookie preferences banner. Disabling some cookies may affect site functionality.

7) How we share information

• Service providers who perform services on our behalf (e.g., hosting, payments, analytics, logistics, customer support) under appropriate confidentiality and data protection terms.
• Business transfers in connection with a merger, acquisition, financing, reorganization, or sale of assets.
• Legal & compliance when we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, and property.
• With your consent or at your direction.

8) Your choices

• Account: You can update certain information in your account settings.
• Marketing: You can opt out of marketing emails by using the unsubscribe link in those emails or contacting us. Transactional emails will still be sent.
• Cookies: Adjust browser settings or use our cookie banner (where available).

9) Your privacy rights

Depending on your location, you may have rights such as access, correction, deletion, portability, restriction, and objection. You may also have the right to withdraw consent where processing is based on consent. To exercise rights, contact us using the details below. We may request information to verify your identity.

For India residents, we process personal information in accordance with applicable Indian laws. EEA/UK residents may also lodge a complaint with a supervisory authority. California residents may have additional rights under applicable state laws.

10) International transfers

We may process and store information in countries other than your own. Where required, we implement appropriate safeguards for cross‑border transfers.

11) Data retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose.

12) Children’s privacy

The Services are not directed to children under the age of 13 (or the age of digital consent where you live). We do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us so we can delete it.

13) Security

We use administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is completely secure.

14) Third‑party sites & services

Our Services may link to third‑party websites or services that we do not control. Their privacy practices are governed by their own policies.

15) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take appropriate steps to notify you (for example, by posting the updated Policy on this page with a new “Last updated” date). Your continued use of the Services after an update constitutes acceptance of the changes.

16) Contact & Grievance Redressal

If you have questions, concerns, or requests regarding this Policy or your information, please contact us:

• Groove Coffee Roasters LLP
• Phone: +91‑7455054459
• Email: hillgroovecoffee@gmail.com