Privacy policy

Last updated: June 4, 2026

ESSABRI Coffee (hereinafter "we", "our", "Essabri Coffee") attaches the utmost importance to the protection of your personal data. This policy is drawn up in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and French Law No. 78-17 of January 6, 1978, as amended ("Informatique et Libertés").

1. Data controller

ESSABRI Coffee, société par actions simplifiée à associé unique (simplified joint-stock company under French law)
Registered office: 1177 Ancien Chemin de Gareoult à Rocbaron, 83136 Rocbaron, France
Trade and Companies Register (RCS): Draguignan 105 710 933
E-mail: contact@essabricoffee.com
Website: essabricoffee.com

2. Personal data collected

We collect only the data strictly necessary for the purposes described below:

  • Identification data: surname, first name, e-mail address, postal address, phone number
  • Order data: products purchased, amount, date, payment method (full banking details are processed exclusively by our payment provider and are never stored on our servers)
  • Connection data: IP address, browser type, pages visited, date and time
  • Communication data: content of messages exchanged with our customer service

3. Purposes and legal bases of processing

Purpose Legal basis Retention period
Order and delivery management Performance of the contract (Art. 6.1.b GDPR) 10 years (accounting obligation)
After-sales service Performance of the contract 5 years after last contact
Accounting and invoicing Legal obligation (Art. 6.1.c) 10 years (Art. L123-22 French Commercial Code)
Newsletters Consent (Art. 6.1.a) 3 years after last contact or withdrawal
Analytics and marketing cookies Consent 13 months maximum
Fraud prevention Legitimate interest (Art. 6.1.f) 5 years

4. Recipients of the data

Your data is intended for the authorized internal services of Essabri Coffee. It may be shared with our strictly necessary processors:

  • Shopify International Limited (Ireland) — hosting and store management
  • Stripe Payments Europe Ltd or Shopify Payments — payment processing
  • Our partner roasting workshop (Saint-Maximin-la-Sainte-Baume, France) — order preparation and shipping (name and delivery address only)
  • La Poste / Colissimo, Mondial Relay, Chronopost — order delivery
  • Google (Workspace, Analytics) — communication and audience measurement
  • Meta Platforms Ireland Ltd — audience measurement and advertising (Meta Pixel), subject to your consent

No data is ever transferred, sold or rented to third parties for commercial purposes.

5. Transfers outside the European Union

Some of our processors (Shopify, Google, Meta) may process data outside the EU. These transfers are governed by the European Commission's Standard Contractual Clauses (Decision 2021/914) or by adequacy decisions, guaranteeing a level of protection equivalent to the GDPR.

6. Data security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, restricted access, PCI-DSS compliant secure hosting for payments, regular security updates.

7. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing, in particular for marketing purposes
  • Right to withdraw your consent at any time
  • Right to define directives regarding the fate of your data after your death

To exercise these rights, contact us at contact@essabricoffee.com, providing proof of your identity. We will respond within a maximum of one month.

8. Complaints to the CNIL

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés — CNIL):
3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr

9. Cookies

Our website uses cookies essential to its operation (cart, session) and, subject to your consent, analytics cookies (Google Analytics) and marketing cookies (Meta). On your first visit, a banner allows you to accept, refuse or customize your preferences. You can change your choice at any time via the "Cookie settings" link at the bottom of the page.

10. Changes

This policy may be amended at any time to reflect legal, case-law or technical developments. The date of the last update appears at the top of this document.

11. Contact

For any question relating to the protection of your data: contact@essabricoffee.com