Your data, handled with the same care as our coffee.

1. Overview

flo. Coffee Roastery ("we", "us", "our", operating at flocoffee.id) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you visit our website, browse our collections, place an order, or interact with our advertising, and how we use, share, and protect that data.

We collect data both directly (information you provide, such as your name, delivery address, and WhatsApp number when placing an order) and automatically (through cookies and similar technologies, including analytics and advertising measurement).

2. Information We Collect

Information you provide

• Order details: name, delivery address, phone / WhatsApp number, order contents and quantities, and any notes you add.
• Communications: messages you send us via WhatsApp, email, or social media.
• Feedback: cupping session registrations, event RSVPs, and responses to surveys.

Information collected automatically

• Device & usage data: browser type, device type, operating system, pages viewed, time spent, referring URLs, and approximate location (region/city level).
• Interaction events: product views, add-to-cart actions, checkout steps, and purchases.
• Identifiers: cookies, advertising IDs, and hashed identifiers used for advertising measurement.

3. How We Use Your Information

• To process and fulfil your orders, and to communicate with you about them.
• To improve our website, products, and customer experience.
• To measure the performance of our marketing campaigns.
• To show you relevant advertisements, including retargeting ads, on Meta platforms (Facebook & Instagram) and the Google network.
• To comply with legal obligations and protect our legal rights.

4. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to remember your cart, understand how visitors use the site, and power advertising features.

Google Analytics

We use Google Analytics 4 (Google Tag: G-LM9G2597XV) to understand how visitors use our website. Google Analytics uses cookies to collect information such as pages visited, time on site, and device information. This data is processed by Google in accordance with Google's Privacy Policy. You can learn more and opt out at Google Analytics opt-out.

Meta (Facebook & Instagram) advertising

We use the Meta Pixel and Meta Conversions API (CAPI) on our website to measure conversions, build audiences, and deliver personalized ads on Facebook and Instagram. These tools may collect and send to Meta event data such as page views, product views, add-to-cart actions, and purchase details (with payment information removed), along with hashed identifiers derived from your contact details where available.

Meta processes this data under its own responsibilities as described in the Meta Privacy Policy. You can control the ads you see on Meta platforms at any time in your Ad Preferences.

5. Advertising & Remarketing

With your interactions on our website, we run advertising campaigns on Meta platforms and Google. Specifically:

• Retargeting: we may show you ads for products you have viewed after you leave our website.
• Lookalike audiences: we may use hashed, non-identifiable data to help Meta find new customers similar to our existing visitors.
• Conversion tracking: event data (such as a completed order initiated via WhatsApp) is used to measure campaign results.

6. Sharing of Information

We share your information only in the following circumstances:

• Service providers: web hosting, analytics (Google), and advertising platforms (Meta) that process data on our behalf or as separate controllers, as described above.
• Order fulfilment: courier/shipping partners receive the delivery address and recipient name needed to deliver your order.
• Legal requirements: if required by law, regulation, or legal process, or to protect our rights and safety.

7. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy: order records for accounting and warranty purposes (typically 2–5 years), and analytics/advertising data according to the retention settings of the platforms we use (Google Analytics and Meta). When data is no longer needed, we delete or anonymize it.

8. Data Security

We use industry-standard safeguards, including HTTPS encryption on all pages, restricted access to personal data, and secure storage for our servers. While no method of transmission is 100% secure, we work to protect your data against unauthorized access, alteration, or destruction.

9. Your Rights & Choices

Depending on your location, you may have the following rights:

• Access & portability: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Object / restrict: object to processing for marketing purposes.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

Opting out of advertising

• Meta: adjust your ads settings at Meta Ad Preferences.
• Google: manage ad personalization at Google Ads Settings.
• Cross-platform: visit Digital Advertising Alliance to opt out of interest-based advertising from participating companies.
• Cookies: you can block or delete cookies through your browser settings; some site features may then work differently.

To exercise any of these rights, contact us using the details in Section 12. We respond to verified requests within 30 days.

10. Third-Party Links

Our website may contain links to external sites (e.g., WhatsApp, Instagram, Google, Meta). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Children's Privacy

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

12. Contact Us

If you have questions about this Privacy Policy, the data we hold about you, or wish to exercise any of your rights, please reach out:

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be highlighted on our website.