Privacy policy.

To fulfil an order: your name, email address, shipping address, and phone number if you give one. We cannot ship coffee without an address, and the carrier cannot deliver it without a name. Order contents, totals, and the Stripe session id are stored so we can answer questions about your order later.

If you make an account: your name, email, and a bcrypt hash of your password. We never store the password itself and cannot recover it — a reset issues a new one-time code instead. Guest checkout works without any of this.

If you write to us or use the chat: the message, your name, and your email, so we can reply.

If you join the list: your email, and your phone number only if you deliberately enter one and tick the SMS box. Marketing consent is recorded separately from your order history, and buying coffee does not subscribe you to anything.

Automatically: request logs and aggregate page analytics (which pages loaded, how fast), plus a short-lived rate-limiting record keyed to your IP so a single machine cannot flood the login or contact form.

We do not sell or rent personal data, we do not share it for anyone else’s advertising, and we do not run credit checks or profiling. We do not store card numbers: the payment form is Stripe’s, on Stripe’s page, and card details never pass through our servers.

These are the services that necessarily see some of it. Each is used for the purpose listed and nothing else.

Essential cookies — your session, the CSRF token, and your cookie choice itself — are set because the site cannot function without them. The advertising and analytics tags (Meta Pixel, Meta Conversions API, Google Ads) only load after you accept analytics cookies in the banner; decline and they are never initialised. You can change your mind at any time, and the details are on the Cookie Policy page.

Orders and invoices: seven years, because tax law requires it. This is the one category we cannot delete on request while the retention period runs.

Account records: until you ask us to close the account.

One-time codes: fifteen minutes, then they expire and are unusable.

Contact messages and chat transcripts: up to two years, so we can pick up a thread you started last season.

Marketing list membership: until you unsubscribe.

Rate-limit records: the length of the window, then they are gone.

Wherever you live, you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, or ask us to stop emailing you. California residents have those same rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them — and since we do not sell personal information, there is nothing to opt out of on that front. If you are in the UK or EU, the lawful bases we rely on are contract (fulfilling your order), legitimate interests (security, fraud prevention, and service email), consent (marketing and analytics), and legal obligation (tax records).

Email admin@liyyucoffee.com with the address you used and we will answer within thirty days. Every marketing email also carries a one-click unsubscribe link.

This shop is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us information, write to us and we will remove it.

If this policy changes materially we will update the date at the top of this page. For anything privacy-related — a copy of your data, a deletion, or a question about the list above — email admin@liyyucoffee.com, call +1 (717) 928-3545, or use the contact form.