At Riviera Coffee Company Inc., we take your privacy seriously. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit rivieracoffee.com (the "Site"), create an account, make a purchase, subscribe to our coffee programme, or otherwise interact with us.

Please read this policy carefully. By using our Site, you agree to the practices described below. We may update this policy from time to time — when we do, we will update the effective date above. Continued use of our Site after any changes constitutes your acceptance of the revised policy.

If you have questions at any time, contact us at:

📧 info@rivieracoffee.com
📞 480-802-8077

We collect information in two ways: information you provide directly to us, and information collected automatically through your use of our Site.

Information You Provide Directly

• Full name, email address, phone number
• Billing and shipping addresses
• Account login credentials (username and password)
• Payment information (credit/debit card details, processed securely through our payment provider)
• Order history, product preferences, and subscription configuration
• Communications you send us via email, contact forms, or customer support
• Gift recipient information where applicable
• Reviews, feedback, or content you submit to the Site

Information Collected Automatically

• IP address, browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Cookie data and session identifiers
• Purchase behavior and browsing patterns
• Analytics data collected through third-party tools including Google Analytics and Meta Pixel

We collect your information when you:

• Create an account or register on our Site
• Place a single order or set up a recurring subscription
• Sign up for drop notifications or our email list
• Fill out a contact form, survey, or promotional entry
• Interact with our Site through cookies and tracking technologies
• Contact our customer support team by phone or email

We use the information we collect to:

• Process and fulfill your orders, including roasted-to-order single purchases and recurring subscription shipments
• Manage and communicate about your account, orders, and subscription status
• Send transactional communications — order confirmations, shipping notifications, and roast date updates
• Send marketing communications, including new roast announcements, limited drop alerts, and promotions (with your consent where required by law)
• Personalize your experience on the Site and in our communications
• Administer our limited drop release system, including waitlists and early access notifications
• Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activity
• Comply with legal obligations under applicable federal and state law
• Improve our Site, products, and customer experience through analytics and feedback

We will not use your information for any purpose materially different from those listed above without providing you with prior notice and, where required, obtaining your consent.

Where required by applicable law, we rely on the following legal bases to process your personal information:

• Contractual Necessity — to fulfill your orders and manage your subscription
• Legitimate Interests — to improve our services, prevent fraud, and conduct marketing
• Legal Obligation — to comply with applicable federal and Arizona state law
• Consent — for marketing communications and non-essential cookies, where required

We use cookies, pixel tags, and similar tracking technologies to operate and improve our Site. Specifically, we use:

• Essential Cookies — required for the Site to function, including shopping cart and session management
• Analytics Cookies — to understand how visitors interact with our Site (e.g., Google Analytics)
• Marketing Cookies — to measure the effectiveness of our advertising and deliver relevant content (e.g., Meta/Facebook Pixel)
• Preference Cookies — to remember your settings and personalise your experience

Your Cookie Choices You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Site. For California residents and visitors from states with applicable privacy laws, we provide a cookie consent mechanism upon your first visit to the Site.

We honor Global Privacy Control (GPC) signals where technically feasible, in compliance with applicable state privacy laws.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We may share your information with trusted third-party service providers who assist us in operating our Site and conducting our business, including:

• Payment processors — to securely handle transaction data
• Shipping carriers — UPS and/or USPS, to fulfill your orders
• Email marketing platforms — Klaviyo or Mailchimp, to manage our email programme
• Analytics providers — Google Analytics, to understand Site usage
• Advertising platforms — Meta and Google, to measure and deliver marketing campaigns
• Shopify — our e-commerce platform provider, who processes data on our behalf

All third-party service providers are contractually required to protect your data and use it solely for the purposes for which it was disclosed. They are not permitted to sell or independently use your personal information.

We may also disclose your information:

• To comply with applicable law, regulation, legal process, or government request
• To enforce our Terms of Service or protect the rights, property, or safety of Riviera Coffee, our customers, or others
• In connection with a merger, acquisition, sale of assets, or other business transfer, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, including:

• Active account maintenance and order history
• Legal, tax, and accounting obligations (typically up to 7 years under IRS requirements)
• Fraud prevention and dispute resolution

When your data is no longer required, we securely delete or anonymize it. You may request deletion of your data at any time (see Your Privacy Rights below).

We implement appropriate physical, technical, and administrative security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted through our Site
• Secure, encrypted storage of payment information through PCI-DSS compliant processors
• Firewalls, access controls, and routine security assessments
• Restricted access to personal data — limited to authorized personnel with a legitimate business need

Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information to the highest practicable standard.

Depending on where you reside, you may have specific rights regarding your personal information. We honor these rights for all US residents to the extent required by applicable law.

For All US Residents

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to certain legal exceptions
• Portability — request your data in a structured, machine-readable format
• Opt-Out of Marketing — unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us directly

California Residents — CCPA / CPRA Rights Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have additional rights:

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of personal information (we do not sell your personal information)
• The right to limit the use of sensitive personal information
• The right to non-discrimination for exercising any of the above rights

To exercise your California privacy rights, contact us at info@rivieracoffee.com or call 480-802-8077. We will verify your identity before processing your request and respond within 45 days as required by law.

Colorado, Connecticut, Virginia, Texas & Other State Residents Residents of states with enacted comprehensive privacy laws (including but not limited to the Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, and Texas Data Privacy and Security Act) have rights similar to those described above. To exercise any applicable rights, contact us at info@rivieracoffee.com.

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information to us, we will take immediate steps to delete that information from our records.

If you believe a child under 13 has submitted personal information to our Site, please contact us at info@rivieracoffee.com.

With your consent, we may send you marketing emails including new roast announcements, limited drop alerts, subscription offers, and promotional communications. All marketing emails comply with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.) and include:

• A clear identification that the message is an advertisement
• Our physical mailing address
• A clear and functional unsubscribe mechanism

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at info@rivieracoffee.com. Please allow up to 10 business days for your request to take effect. Note that opting out of marketing emails does not affect transactional communications related to your orders or subscription.

Some browsers transmit "Do Not Track" (DNT) signals to websites. At this time, there is no uniform standard for how websites should respond to DNT signals, and we do not currently modify our data collection practices in response to DNT signals.

However, we do honor Global Privacy Control (GPC) signals where technically feasible, in compliance with the CCPA/CPRA and applicable state laws that require such recognition.

Our Site may contain links to third-party websites, including our wholesale platform. These sites have their own independent privacy policies. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of any site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by updating the effective date at the top of this page and, where appropriate, by sending you a direct notification. Your continued use of our Site following any such update constitutes your acceptance of the revised policy.

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Riviera Coffee Company Inc.
6700 W. Chicago Street, Suite 10 Chandler, AZ 85226
📞 480-802-8077
✉️ info@rivieracoffee.com
🌐 rivieracoffee.com