Privacy policy

This policy explains how Cassinova Coffee Company Pty Ltd (ABN 74 209 583 617) collects, uses and protects your personal information when you visit cassinova24.com, buy from us or contact us.

We are based in Shelley, Western Australia, and we follow the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you are in the EU or UK, the GDPR section on our legal page gives you additional rights.

What we collect

We collect only what we need to run the business:

• Contact details you give us through forms, email or phone: name, email, phone number.
• Order information for purchases and subscriptions: delivery address, items ordered, payment status (card details are handled by our payment processor, never stored by us).
• Event details for catering bookings: date, venue, guest numbers, special requests.
• Technical data from your browser: IP address, device type, pages visited. This is standard web analytics, not surveillance.

How we use it

Your information is used to:

• Process orders, subscriptions and event bookings
• Deliver coffee and equipment to the right address
• Reply to your questions and provide customer support
• Send you order updates and, if you opt in, occasional news about new roasts
• Improve the website and understand what content people actually read

We do not sell your data, share it with advertisers, or use it for anything unrelated to running Cassinova.

Who we share it with

We share personal information only with service providers who help us operate:

• Payment processors for card transactions
• Delivery services (Australia Post, local couriers) for shipping addresses
• Email and hosting providers who store our systems

These providers are bound by their own privacy obligations and only access what they need to do their job. We do not share data with third parties for marketing.

How long we keep it

We keep order and contact records for 7 years as required by Australian tax law. Subscription and marketing data is kept until you ask us to delete it or until it has been inactive for 3 years. Event booking details are kept for 2 years after the event date.

You can ask us to delete your data at any time, subject to legal retention requirements.

Your rights

Under Australian privacy law you can:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong or out of date
• Ask us to delete your information (where legally permitted)
• Withdraw marketing consent at any time
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au)

Email cassinova24@gmail.com or call +61 3 9527 1049 to exercise any of these rights. We respond within 30 days.

Security

We protect your information with reasonable technical and organisational measures: encrypted connections (HTTPS), access controls on our systems and limited staff access to customer data. No system is perfectly secure, but we take reasonable steps to protect what you give us.

Cookies

We use cookies for essential site functions and basic analytics. You can manage them through your browser settings or our cookie banner. Full details are in our cookie policy.

Changes to this policy

We may update this policy from time to time. The 'last updated' date at the top shows when it last changed. Significant changes will be flagged on the homepage or by email to subscribers.

Questions about this policy? Contact us at cassinova24@gmail.com or +61 3 9527 1049.