Effective October 25, 2026

1. Who we are and what this policy covers

Jeremiah's Pick Coffee Co. ("Jeremiah's Pick", "we", "us") is a coffee roaster based in San Francisco, California. This Privacy Policy applies to our online shop and our wholesale portal at https://jpcteam.com, and to the Jeremiah's Pick app for iPhone and Android (together, the "Services"). It explains what personal information we collect, how we collect it, how we use and share it, how long we keep it, and the choices and rights you have. Wholesale (business) customers should also read our Wholesale Privacy Notice, which adds the details that apply to business accounts.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. The Services contain no advertising and no third-party analytics or tracking software, and we do not track you across apps or websites owned by other companies.

2. Information we collect

Information you give us

• Contact and account details: your name, email address, phone number, and shipping and billing addresses.
• Sign-in information: the password you choose, which we keep only in a protected one-way form that cannot be turned back into your password; and, when you choose to sign in with a code or a link sent to your email or phone, that one-time code, which is also kept only in a form that cannot be read back, works once and expires shortly after it is sent.
• Orders and subscriptions: the products you buy, order, payment and delivery status, your subscription schedule and the changes you make to it, returns, refunds, and the gift cards and promotion codes you use.
• Payment information: you enter card details on our payment processor's secure page, not on ours. We receive confirmation of each payment and, if you save a card, a reference to it with the card brand, last four digits and expiry date so you can recognize it. We never receive or store your full card number or security code.
• Content you send us: messages, product reviews, a report about a damaged or incorrect delivery together with a photo if you choose to attach one, and your sign-up to our mailing list.
• Preferences: your wishlist, referral code, email and text-message preferences, and the items in your cart.

Information collected automatically

• Device and connection information: your IP address, browser or device type, operating system and app version, and the time of each sign-in. We keep a record of sign-in attempts to protect your account.
• Website usage: on our content pages we measure page views, button clicks and how far a page is scrolled, together with the page that referred you and your browser type, linked to a random identifier stored in your browser. This measurement is our own; it is not linked to your name or account and is not shared with any analytics or advertising company. You can decline it by choosing "Essential only" in the cookie banner. The app sends no usage analytics.
• App installation identifier: when you sign in, the app creates a random identifier for that installation so that you can see your signed-in devices and sign any of them out. It is not an advertising identifier and is never used to track you.

Information from other sources

• Our payment processor tells us whether a payment succeeded and the brand, last four digits and expiry date of a saved card.
• Shipping carriers send us tracking and delivery updates for your orders.
• Someone who gives you a gift subscription provides your name and email address so we can deliver it.
• For a wholesale account, the person who manages your business account can add your contact details.

3. How we use information

• To provide the Services: take, price, fulfill and deliver your orders; run your subscriptions and renewals; show your order history; and keep your saved addresses and payment methods.
• To communicate with you: order confirmations, shipping updates, subscription reminders, security notices and replies to your requests by email, and by text message only where you asked for it (see our Text Message Terms).
• To keep accounts and the Services secure: confirm who is signing in, detect and prevent fraud and abuse, and investigate problems.
• To improve the Services: understand which pages and products are used, and suggest products based on your orders and wishlist.
• To send marketing email if you joined our mailing list or are a customer who has not opted out. Every marketing email includes an unsubscribe link.
• To meet legal obligations: tax, accounting, consumer-protection and record-keeping requirements, and to respond to lawful requests.

4. How we share information

We share personal information only as described here.

• Service providers that work on our behalf, in these categories: payment processing; email delivery; text-message delivery; shipping carriers and shipping-label services; tax calculation; accounting and invoicing; hosting, data storage and content delivery; mapping and delivery-route planning; error monitoring; and protection against automated abuse. Each receives only what its task needs. For example, a carrier receives your name, delivery address and phone number, and a text-message provider receives your phone number and the message. We require each provider to use the information only to provide its service to us and to protect it with the same or equal protection as this policy.
• Your business account: orders placed under a wholesale account are visible to the people who manage that account.
• Legal and safety: when the law requires it, to respond to lawful requests, or to protect the rights, property and safety of our customers, our staff or others.
• Business transfers: if we merge, are acquired or sell assets, personal information may transfer to the successor, which must honor this policy.

We do not sell personal information, we do not share it for targeted advertising, and we do not give it to third-party artificial-intelligence services.

5. Cookies, embedded content and browser signals

Our website uses a small number of strictly necessary cookies to keep you signed in and to protect sign-in and the forms you submit, a few functional cookies and browser storage for your cart and preferences, and the first-party measurement described in Section 2, which you can decline. Our Cookie Policy lists them.

Some pages embed a video from a video service. If you play it, that service receives your IP address and browser information and applies its own privacy policy. When you pay, our payment processor's checkout page is operated by the processor under its own privacy policy. No other company collects information about your activity across websites through our Services.

Because we do not sell or share personal information or track you across other websites, a "Do Not Track" or Global Privacy Control signal has nothing further to switch off; we treat such a signal as a request not to sell or share your information, which we already honor.

6. The Jeremiah's Pick app

• What the app keeps on your device: your sign-in credential, in the operating system's protected storage; screens you have already opened (orders, subscriptions, the catalog), so the app works offline; and the items in your shop cart until you check out. Signing out removes the saved screens and your sign-in credential.
• Permissions: the app requests no access to your camera, microphone, contacts or location. When you choose to attach a photo to a delivery report, or to upload a tax-exemption document to a wholesale account, the system picker lets you choose one file, and only that file is sent to us.
• Notifications: the app does not send push notifications.
• No advertising, tracking or third-party analytics software is included in the app.
• Staying signed in: the app keeps you signed in until you sign out; after a period without use it asks you to sign in again. You can review your signed-in devices and sign any of them out from your account's security settings.

7. Deleting your account

• Shop customers: in the app, open Account, then Settings, then Privacy & data, and choose Delete my account. On the website, sign in and choose Delete my account in your account settings. The steps are also published, with no sign-in needed, at https://jpcteam.com/shop/delete-account.
• Approved wholesale customers: in the app, open the Wholesale account screen and choose Request account deletion. You can also request deletion by email to [email protected].
• Wholesale applicants whose application has not been approved: in the app, choose Delete my application. The application is deleted at once and the sign-in is closed.
• If you cannot sign in, email [email protected] from the address on the account.

Section 8 explains what happens to your information after a deletion request.

8. Data retention

• Account information: kept while your account is active.
• When a shop customer deletes an account: you are signed out on every device at once and active subscriptions are cancelled. Thirty days later your name, email address, phone number, saved addresses and password are permanently erased and your signed-in devices are removed. Signing in during those 30 days restores the account.
• When an approved wholesale customer requests deletion: the account stays usable while our team reviews the request. Thirty days after the request, the personal details on the sign-in are anonymized. The business's orders, invoices and payment-terms records are kept as described below.
• Orders, invoices, payments, refunds, gift cards, tax and tax-exemption records: kept for at least seven years to meet tax, accounting and legal obligations, including the name and address used for each order.
• Records of the emails and text messages we send you (the address or number, the type of message, the time and whether it was delivered): kept with the business records above.
• Sign-in and security records: sign-in attempts and routine security events for up to 90 days; records of serious security events for up to two years.
• Website measurement events: kept for reporting, linked only to the random browser identifier, never to your account.
• Sign-in sessions: until you sign out or the session expires.

9. Your choices

• Your details: review and update your name, email address, phone number, addresses and saved payment methods in your account settings on the website or in the app.
• Marketing email: use the unsubscribe link in any marketing email, or email [email protected].
• Text messages: reply STOP to any message; wholesale account holders can also turn off text order updates in the account's security settings. See our Text Message Terms.
• Website measurement: choose "Essential only" in the cookie banner.
• A copy of your information: shop customers can download their account information from account settings on the website or in the app.
• Withdrawing consent: you can withdraw any consent described in this policy in the same way you gave it, or by emailing [email protected]; withdrawal does not affect what was done before it.

10. How we protect information

We protect personal information with administrative, technical and physical safeguards suited to its sensitivity, including encryption of information in transit, encryption of sensitive stored information, protections against automated and repeated sign-in attempts, access limited to staff who need it for their role, and monitoring for unusual activity. No method of transmission or storage is completely secure. Keep your password private and tell us at [email protected] if you suspect someone has used your account.

11. Your privacy rights

You can ask to know what personal information we hold about you, to receive a copy, to correct it and to delete it, wherever you live. We will not treat you differently for making a request.

California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to know the categories and specific pieces of personal information we collect, the categories of sources, our business purposes and the categories of third parties we disclose it to; to delete and to correct your personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

• Categories collected in the last 12 months: identifiers (name, email address, phone number, postal address, IP address, account and installation identifiers); customer records (contact, payment-card brand, last four digits and expiry date, and billing details); commercial information (purchases, subscriptions, returns); internet or other electronic network activity (sign-in records and website measurement events); audio, electronic or visual information (photos you attach to a delivery report); professional information (for wholesale accounts, your business and your role); inferences (product suggestions based on your orders and wishlist); and sensitive personal information limited to account sign-in credentials.
• Sources: you; your browser or device; our payment processor and shipping carriers; a person who gives you a gift; and the manager of a wholesale account.
• Purposes: those in Section 3.
• Disclosed for a business purpose in the last 12 months: identifiers, customer records, commercial information, network activity and visual information, to the categories of service providers in Section 4.
• Sold or shared in the last 12 months: none. We have not sold or shared personal information, including that of consumers under 16.
• Sensitive personal information: we use your sign-in credentials only to sign you in and protect your account, never to infer characteristics about you, so there is no further use to limit.

How to make a request. Use the tools in your account on the website or in the app (download a copy, update your details, delete your account), or email [email protected] with "Privacy request" in the subject line. We confirm a request comes from you by asking you to reply from, or sign in with, the email address on the account. We respond within 45 days and, if we need longer, extend once by up to 45 more days and tell you why. You may use an authorized agent; we will ask the agent for your signed permission and confirm the request with you.

California "Shine the Light". We do not disclose personal information to third parties for their own direct-marketing purposes.

12. Children

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from anyone under 18, and our Terms require account holders to be 18 or older. If you believe a minor has given us personal information, email [email protected] and we will delete it.

13. Changes to this policy

We review this policy at least once every 12 months. When we change it, we post the new version here with a new effective date; for a material change we also tell you by email or with a notice in the Services before it takes effect.

14. Contact us

Jeremiah's Pick Coffee Co., San Francisco, California · Email: [email protected] · Website: https://jpcteam.com

For a privacy request, write "Privacy request" in the subject line.