Privacy Policy

Hi — Mara here, co-founder of Bdila Coffee Roasters. We wrote this policy ourselves, the same way we write everything on this site. If anything below is unclear, email us at [email protected] and a real person (usually me or Tomás) will answer within a couple of business days.

What we collect

Very little, and only when you hand it to us directly:

• Email correspondence. If you write to us — a wholesale inquiry, a question about a roast date, a note about your order — we receive your name (if you share it) and your email address, along with whatever you tell us in the message.
• Order and shipping details. If you place an order through the café or by email, we keep the information needed to fulfill it: your name, shipping address, the coffees you ordered, and any delivery notes you add (like "leave with the neighbor in 2B").

That's the whole list. We don't have a newsletter list you can land on accidentally, and we don't run a customer account system, so there is no password, profile, or purchase history dashboard to protect.

What we don't collect

• No third-party trackers. This site loads no analytics scripts, no advertising pixels, and no social media beacons. There is nothing here reporting your visit back to a data broker.
• No advertising cookies. We don't set cookies for marketing, retargeting, or cross-site tracking. We don't show ads, and we don't help anyone else show you ads.
• No accounts. Because there's no sign-in system, we never store credentials, and there is nothing for anyone to break into on our end.

How long we keep email, and how to delete it

We keep email threads for as long as they're useful — typically up to 24 months for general questions, and up to 7 years for order records where we need them for tax and bookkeeping purposes under Oregon and federal law. If you'd like a conversation deleted sooner, just reply and ask. We'll remove everything we're not legally required to retain, and we'll confirm once it's done, usually within 10 business days.

About our hosting

This website is a static site — plain pages, no database behind it. Our hosting provider, like essentially every web host, automatically keeps standard server logs. Those logs can include your IP address, browser user-agent string, the pages requested, and timestamps. The host uses them for security monitoring and performance (for example, blocking abusive traffic and diagnosing outages). We don't mine these logs for marketing, we don't build visitor profiles from them, and we don't share them with advertisers.

We don't sell your data

We have never sold, rented, or traded customer information, and we never will. We don't share what we hold with third parties except in two narrow cases: the delivery carrier that physically ships your coffee (they need your address to do their job), and if a court or law validly compels us. That's it.

Children under 13

Our site and café are intended for adults. We do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA). If you believe a child has sent us personal information, email [email protected] and we will delete it promptly.

Changes to this policy

If we ever change how we handle information, we'll update this page and change the "last updated" date at the top. For anything significant — say, if we ever add a mailing list — we'll note the change plainly on this page at least 14 days before it takes effect. We won't quietly expand what we collect.

Questions?

Write to us at [email protected], call (503) 555-0184 during café hours, or stop by 2417 SE Ankeny St, Portland, OR 97214. We'd rather explain something twice than have you wonder about it.