Privacy policy

Last updated: 4 June 2026

ESSABRI Coffee (hereinafter “we”, “our”, “Essabri Coffee”) attaches the utmost importance to the protection of your personal data. This policy is established in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and French Act No. 78-17 of 6 January 1978 as amended, known as the “Data Protection Act”.

1. Data controller

ESSABRI Coffee, simplified joint-stock company with a sole shareholder
Registered office: 1177 Ancien Chemin de Gareoult à Rocbaron, 83136 Rocbaron, France
Draguignan Trade Register 105 710 933
Email: contact@essabricoffee.com
Website: essabricoffee.com

2. Personal data collected

We collect only the data strictly necessary for the purposes described below:

  • Identification data: surname, first name, email address, postal address, telephone number
  • Order data: products purchased, amount, date, payment method (full bank card details are processed exclusively by our payment provider and are never stored on our servers)
  • Connection data: IP address, browser type, pages visited, date and time
  • Communication data: content of messages exchanged with our customer service

3. Purposes and legal bases for processing

Purpose Legal basis Retention period
Order and delivery management Performance of the contract (Art. 6.1.b GDPR) 10 years (accounting obligation)
After-sales service Performance of the contract 5 years after last contact
Accounting and invoicing Legal obligation (Art. 6.1.c) 10 years (Art. L123-22 Commercial Code)
Sending newsletters Consent (Art. 6.1.a) 3 years after last contact or withdrawal
Analytics and marketing cookies Consent 13 months maximum
Fraud prevention Legitimate interest (Art. 6.1.f) 5 years

4. Recipients of the data

Your data is intended for the authorised internal departments of Essabri Coffee. It may be passed on to our strictly necessary subcontractors:

  • Shopify International Limited (Ireland) — hosting and management of the store
  • Stripe Payments Europe Ltd or Shopify Payments — payment processing
  • Our partner roasting workshop (Provence, South of France) — preparation and dispatch of orders (name and delivery address only)
  • La Poste / Colissimo, Mondial Relay, Chronopost — delivery of orders
  • Google (Workspace, Analytics) — communication and audience analysis
  • Meta Platforms Ireland Ltd — audience measurement and advertising (Meta Pixel), subject to your consent

No data is transferred, sold or rented to third parties for commercial purposes.

5. Transfers outside the European Union

Some of our subcontractors (Shopify, Google, Meta) may process data outside the EU. These transfers are governed by the standard contractual clauses of the European Commission (decision 2021/914) or by adequacy decisions, guaranteeing a level of protection equivalent to the GDPR.

6. Data security

We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, restricted access, secure PCI-DSS-compliant hosting for payments, regular security updates.

7. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to portability of your data
  • Right to object to processing, in particular for direct marketing purposes
  • Right to withdraw your consent at any time
  • Right to give directives concerning the fate of your data after your death

To exercise these rights, contact us at contact@essabricoffee.com, providing proof of your identity. We will reply within a maximum of one month.

8. Complaint to the CNIL

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French Data Protection Authority (CNIL):
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
www.cnil.fr

9. Cookies

Our site uses cookies essential to its operation (cart, session) and, subject to your consent, analytics cookies (Google Analytics) and marketing cookies (Meta). On your first visit, a banner allows you to accept, refuse or customise your preferences. You can change your choice at any time via the “Cookie settings” link at the bottom of the page.

10. Changes

This policy may be amended at any time to adapt to legal, case-law or technical developments. The date of the last update appears at the top of the document.

11. Contact

For any question relating to the protection of your data: contact@essabricoffee.com