PRIVACY POLICY
Last updated: July 2026
At Iwana Specialty Coffee Roasters (“we,” “us,” or “our”), operated by FARO USA, LLC, your privacy is important to us. This Privacy Policy explains in clear, straightforward terms how we collect, use, protect, and share your personal information when you visit or make a purchase through iwanacoffee.com.
By using our website, you agree to the collection and use of information as described in this policy. If you do not agree with any part of this policy, please do not use our website.
This Privacy Policy applies exclusively to information collected through iwanacoffee.com and does not apply to information collected at our retail location, through third-party websites, or through any other offline means.
1. INFORMATION WE COLLECT
We collect information in two ways: information you provide to us directly, and information that is collected automatically when you visit our website.
Information You Provide Directly:
When you make a purchase, create an account, subscribe to our newsletter, submit a contact form, or communicate with us via email, you may provide the following types of information: your first and last name, email address, shipping and billing address, phone number, and payment information. Payment details such as credit card numbers are processed securely and exclusively by our payment processor, Stripe. We never store, access, or have visibility into your full credit card information on our servers.
Information Collected Automatically:
When you visit iwanacoffee.com, certain information is collected automatically through cookies and similar technologies. This may include your IP address, browser type and version, operating system, device type, referring website or URL, pages viewed on our website and the order in which they were viewed, time and date of your visit, time spent on individual pages, and general geographic location based on your IP address. This information is collected to help us improve your browsing experience, maintain website security, and understand how visitors interact with our website.
2. CATEGORIES OF PERSONAL INFORMATION COLLECTED (CCPA DISCLOSURE)
In accordance with the California Consumer Privacy Act (CCPA), the following is a list of the categories of personal information we have collected from consumers within the last twelve (12) months:
Category A — Identifiers: First name, last name, email address, shipping address, billing address, phone number, IP address, and account username. Collected directly from you and automatically through website usage.
Category B — Personal Information Under California Civil Code Section 1798.80(e): Name, address, telephone number, and financial information (payment details processed by Stripe). Collected directly from you during the purchase process.
Category D — Commercial Information: Records of products purchased, purchasing history, order details, and payment transaction records. Collected directly from you and generated through your transactions.
Category F — Internet or Other Electronic Network Activity Information: Browsing history on our website, pages viewed, referring URLs, browser type, operating system, device type, and interactions with our website. Collected automatically through cookies and server logs.
Category G — Geolocation Data: General geographic location derived from your IP address. Collected automatically. We do not collect precise GPS location data.
We do not collect biometric information, sensory data, professional or employment-related information, education information, or any other categories of personal information not listed above.
3. COOKIES AND THIRD-PARTY TECHNOLOGIES
Cookies are small text files stored on your device by your web browser. They allow our website to function properly, remember your preferences, and help us understand how you use our site. Our website uses the following specific technologies:
Strictly Necessary Cookies (Required for the website to function):
WooCommerce — These cookies are essential for the operation of our online store. They manage your shopping cart, maintain your session while you browse, remember your shipping selections, and process your orders. Without these cookies, the e-commerce features of our website cannot function. These cookies do not track you for marketing purposes.
LiteSpeed Cache — These cookies are required for website performance optimization. They help pages load faster and reduce server load, ensuring a smooth browsing experience. These cookies are strictly technical and do not collect personal information.
Stripe — Our payment processor uses cookies that are necessary to process your transactions securely, prevent fraud, and comply with financial regulations. These cookies are active only during the checkout process. Stripe’s handling of your data is subject to Stripe’s Privacy Policy, available at stripe.com/privacy.
Functional and Security Cookies:
Google reCAPTCHA v3 — We use this service to protect our website forms from spam, bots, and abuse. reCAPTCHA may collect hardware and software information such as device data, application data, and the results of integrity checks, and send this data to Google for analysis. This service operates in the background and does not require you to solve any puzzles. Subject to Google’s Privacy Policy, available at policies.google.com/privacy.
Third-Party Embedded Content:
Google Maps — We embed Google Maps on certain pages to help you locate our retail store. Google Maps may set its own cookies and collect usage data such as your interaction with the map. Subject to Google’s Privacy Policy.
Trustindex.io — We use this service to display verified Google Reviews on our website. This widget may set cookies to load and display review content. Subject to Trustindex’s Privacy Policy.
What We Do NOT Use:
As of the date of this policy, we do not use Google Analytics, Meta Pixel (Facebook), or any third-party advertising, retargeting, or behavioral tracking tools. We do not serve targeted advertisements, and we do not allow any third party to collect your information from our website for advertising purposes. If we adopt any such tools in the future, this policy will be updated prior to their implementation.
4. HOW WE USE YOUR INFORMATION
We use the information we collect solely for the following legitimate business purposes:
To process, fulfill, and ship your orders accurately and efficiently. To send you transactional communications including order confirmations, shipping notifications, and delivery updates. To respond to your questions, concerns, and customer service inquiries. To send you marketing communications such as newsletters, product launches, promotions, and event announcements — only if you have voluntarily opted in to receive them. To improve and optimize our website, product offerings, and overall customer experience. To detect, prevent, and address fraud, unauthorized activity, and security threats. To comply with applicable legal obligations, tax requirements, and regulatory mandates. To enforce our Terms of Service, Refund Policy, and other published policies.
We will never use your information for any purpose that is not disclosed in this policy.
5. MARKETING COMMUNICATIONS AND YOUR CHOICES
We respect your inbox. If you subscribe to our newsletter or opt in to receive marketing communications at checkout, we may send you emails about new product releases, limited edition coffees, seasonal promotions, upcoming events, and company news related to Iwana Specialty Coffee Roasters.
You are in full control of your marketing preferences. Every marketing email we send includes a clearly visible unsubscribe link at the bottom. You may opt out at any time by clicking the unsubscribe link in any marketing email or by emailing us directly at hello@iwanacoffee.com with the subject line “Unsubscribe.” We will process your request within 10 business days as required by the CAN-SPAM Act.
Please note that opting out of marketing emails will not affect transactional communications related to your orders, such as order confirmations, shipping updates, and delivery notifications. These communications are necessary to fulfill your purchase and are not considered marketing.
6. HOW WE SHARE YOUR INFORMATION
We do not sell, rent, lease, or trade your personal information to any third party for their own marketing, advertising, or commercial purposes. We never have and we never will.
We share your information only with trusted service providers who are strictly necessary to operate our business and fulfill your orders. These include:
Stripe — for secure payment processing and fraud prevention. Stripe is PCI-DSS Level 1 certified, the highest level of security certification in the payments industry.
Shipping carriers (USPS, UPS, FedEx, or other carriers) — for the sole purpose of delivering your order to the address you provide.
Hostinger — our website hosting provider, which stores website data on secure servers.
All service providers we work with are contractually obligated to protect your personal information, use it only for the specific purpose for which it was shared, and comply with applicable data protection laws. They are prohibited from using your data for their own purposes.
We may also disclose your information in the following limited circumstances: when required by law, subpoena, court order, or governmental regulation; to protect the rights, property, or safety of Iwana Specialty Coffee Roasters, our customers, or the public; to enforce our website policies and terms; and in connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our business assets, in which case you would be notified via email and/or a prominent notice on our website of any change in ownership, uses of your personal information, and choices you may have regarding your personal information.
7. DATA SECURITY
We take the protection of your personal information seriously and implement multiple layers of security:
Encryption in Transit — Our entire website uses SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption. This means all data transmitted between your browser and our servers is encrypted and protected. You can verify this by looking for the padlock icon and “https://” in your browser’s address bar.
Payment Security — All payment transactions are processed exclusively by Stripe, which is PCI-DSS Level 1 compliant — the highest security standard in the payments industry. Your full credit card number is never transmitted to, processed by, or stored on our servers at any time.
Access Controls — Access to customer personal information is strictly limited to authorized personnel who require it to perform their specific job functions. All team members with data access are bound by confidentiality obligations.
Server Security — Our website is hosted on secure servers provided by Hostinger, which employs firewalls, intrusion detection systems, and regular security monitoring.
While we implement commercially reasonable and industry-standard security measures to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incident that may affect your data. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.
8. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:
Order and transaction records are retained for a minimum of 7 years for tax, accounting, and legal compliance purposes as required by applicable federal and state law.
Account information is retained for as long as your account remains active. If you request account deletion, we will delete or anonymize your personal information within 30 calendar days, with the exception of information we are legally required to retain.
Newsletter subscriber information is retained until you unsubscribe. Upon unsubscribing, your email address will be removed from our marketing list within 10 business days. A record that you unsubscribed may be retained to ensure we honor your opt-out request.
Server logs and automatically collected data are retained for up to 12 months for security and performance analysis purposes, after which they are automatically purged.
9. YOUR PRIVACY RIGHTS
We believe you should have control over your personal information. Depending on your state of residence, you may have specific legal rights as outlined below.
All Customers:
Regardless of where you live, you may at any time request to know what personal information we have about you, request correction of any inaccurate personal information, request deletion of your personal information (subject to legal retention requirements), and opt out of marketing communications.
California Residents — Your Rights Under the CCPA/CPRA:
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information. You have the right to know what categories and specific pieces of personal information we have collected about you (see Section 2 for a detailed list of categories); the right to request deletion of your personal information, subject to certain legal exceptions; the right to correct inaccurate personal information we hold about you; the right to opt out of the sale or sharing of your personal information — we want to be clear: we do not sell or share your personal information as defined by the CCPA/CPRA, and we have not done so in the preceding twelve (12) months; the right to limit the use of your sensitive personal information — we only use sensitive personal information as necessary to provide our services to you; and the right to non-discrimination for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your privacy rights.
Nevada Residents — Your Rights Under Nevada SB 220:
Under Nevada Revised Statutes Chapter 603A, Nevada residents have the right to opt out of the sale of their personally identifiable covered information. We do not sell your personal information as defined under Nevada law. If you are a Nevada resident and wish to submit a verified opt-out request, please contact us at hello@iwanacoffee.com. We will respond to your request within 60 days as required by Nevada law.
How to Exercise Your Rights:
To exercise any of the rights described above, please email us at hello@iwanacoffee.com with the subject line “Privacy Request” and include your full name, the email address associated with your account or order, and a description of the specific right you wish to exercise. For your protection, we may need to verify your identity before processing your request. We will respond to all verified requests within 45 calendar days as required by law. If additional time is needed, we will notify you of the reason and the extension period in writing.
You may also designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with written permission, and we may require verification of both your identity and the agent’s authority.
You will never be charged a fee for exercising your privacy rights.
10. CHILDREN’S PRIVACY
Our website and services are intended for use by individuals who are at least 16 years of age. We do not knowingly collect, store, or process personal information from anyone under the age of 16. We do not target or direct our website or marketing to children. If we become aware that we have inadvertently collected personal information from a child under 16, we will take immediate steps to delete that information from our records within 30 days. If you are a parent or guardian and believe your child under the age of 16 has provided us with personal information, please contact us immediately at hello@iwanacoffee.com and we will promptly remove the information.
11. ACCESSIBILITY
Iwana Specialty Coffee Roasters is committed to ensuring that our website is accessible to all users, including individuals with disabilities. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards. If you experience any difficulty accessing any part of our website or need assistance with your order, please contact us at hello@iwanacoffee.com or call us, and we will be happy to assist you. We welcome your feedback on how we can improve the accessibility of our website.
12. THIRD-PARTY LINKS
Our website may contain links to third-party websites, platforms, or services that are not owned, operated, or controlled by Iwana Specialty Coffee Roasters. These links are provided for your convenience and reference only. We have no control over and assume no responsibility for the content, privacy policies, data practices, or security of any third-party websites. We strongly encourage you to review the privacy policy of every website you visit. Clicking on a third-party link or visiting a third-party website is entirely at your own risk.
13. DO NOT TRACK SIGNALS
Some web browsers offer a “Do Not Track” (DNT) signal that indicates you do not wish to be tracked across websites. Because there is currently no industry standard for recognizing or honoring DNT signals, our website does not currently respond to DNT signals. However, as noted in this policy, we do not engage in cross-site tracking or targeted advertising.
14. DISPUTE RESOLUTION AND BINDING ARBITRATION
In the event of any dispute, claim, or controversy arising out of or relating to this Privacy Policy or the collection, use, or handling of your personal information (“Dispute”), you and Iwana Specialty Coffee Roasters agree to first attempt to resolve the Dispute informally by contacting us at hello@iwanacoffee.com. We will make good faith efforts to resolve any Dispute within 30 days of receiving your written notice.
If the Dispute cannot be resolved informally within 30 days, you and Iwana Specialty Coffee Roasters agree that the Dispute shall be resolved exclusively through final and binding individual arbitration, rather than in court, except that either party may bring qualifying claims in small claims court in Clark County, Nevada, if the claim falls within the court’s jurisdictional limits.
Arbitration shall be administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, which are available at adr.org. The arbitration will be conducted in Clark County, Nevada, unless you and we agree to a different location or to virtual proceedings. Each party shall bear its own costs associated with the arbitration, except that Iwana Specialty Coffee Roasters will pay all AAA filing and administration fees if required by the AAA Consumer Arbitration Rules.
Class Action Waiver: You and Iwana Specialty Coffee Roasters agree that any Dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. If for any reason a claim proceeds in court rather than in arbitration, both you and we waive any right to a jury trial. If this class action waiver is found to be unenforceable, then the entirety of this arbitration provision shall be null and void, but all other provisions of this Privacy Policy shall remain in effect.
You may opt out of this arbitration provision by sending a written notice to hello@iwanacoffee.com within 30 days of your first use of iwanacoffee.com. Your notice must include your name, address, email address, and a clear statement that you wish to opt out of the arbitration provision.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Last updated” date at the top of this page. For material changes that significantly affect how we handle your personal information, we will make reasonable efforts to notify you, such as by posting a prominent notice on our website or sending an email to the address associated with your account. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of iwanacoffee.com after any changes are posted constitutes your acceptance of the updated policy.
16. GOVERNING LAW
This Privacy Policy and any disputes related to it or your personal information shall be governed by and construed in accordance with the laws of the State of Nevada, without regard to its conflict of law provisions. To the extent any legal proceeding is not subject to the arbitration provision in Section 14, such proceeding shall be brought exclusively in the state or federal courts located in Clark County, Nevada, and you consent to the personal jurisdiction of such courts.
17. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, we are here to help. Please contact us:
Iwana Specialty Coffee Roasters
FARO USA, LLC
61 W Utah Ave, Suite 101
Las Vegas, NV 89101
Email: hello@iwanacoffee.com
For privacy-related requests, please use the subject line “Privacy Request” to ensure your inquiry is routed to the appropriate team member and handled promptly.
