Cafform — Privacy Policy

Version 1.0 — In effect since August 18, 2026

Who is responsible for your data

Caffora Limited, trading as Cafform, is responsible for the personal information described in this policy. Our contact details are on our Contact Information page. For any question about privacy, write to support@cafform.shop.

What we collect

• Order information — your name, email address, delivery address, billing address, phone number if you give one, and what you bought.
• Payment information — processed by our payment provider. We receive confirmation that a payment succeeded, the card type and the last four digits. We do not receive or store your full card number.
• Account information — if you create an account, your login details and order history.
• Communications — the content of emails and contact form messages you send us.
• Technical information — your IP address, browser and device type, and how you move through our site, collected by Shopify, the platform our store runs on.

Where it comes from

Almost all of it comes from you, when you place an order, create an account, or contact us. Technical information is collected automatically by Shopify when you visit. Our payment provider tells us whether a payment succeeded.

Why we use it

• To take, fulfil and deliver your order
• To handle returns, refunds, cancellations and warranty claims
• To answer your questions
• To detect and prevent fraud
• To meet our legal, tax and accounting obligations
• To operate and improve the store

We do not sell your personal information for money.

Who we share it with

• Shopify — our store platform, which hosts the site and processes orders on our behalf.
• Our payment provider — to take payment and issue refunds.
• Red Stag Fulfillment — our fulfilment partner in Sweetwater, Tennessee, which receives your name and delivery address in order to pack and ship your machine, and to receive returns.
• UPS and FedEx — which receive your name, delivery address and phone number in order to deliver, whether your order is going to the United States or to Canada.

As of the date of this policy, we do not use any third-party analytics, advertising, email marketing, reviews or chat tools. No advertising pixel, tag or tracking script from Google, Meta, TikTok, Pinterest or any similar company runs on this store. The only analytics we see are the built-in reports Shopify produces for us as our store platform. If this changes, we will update this policy before any such tool goes live.

Shopify does, however, use data about your interactions with our store alongside data from its wider network to improve its products, to personalise your experience, and to target advertising for our store — for example, showing our machines to people likely to be interested in them. Shopify is responsible for that processing, and you can opt out of it at any time through the link described below.

We also disclose information where the law requires it, or to establish or defend a legal claim.

Shopify processes personal information as described in its Consumer Privacy Policy. You can also manage certain privacy choices and exercise certain rights directly with Shopify through its Privacy Portal.

Targeted advertising

We run no advertising pixels or tags of our own, so nothing about your visit is sent by us to Google, Meta or any other ad platform.

Advertising for our store does happen through Shopify's own network features, described above. In plain terms: Shopify may use what it knows about your interactions with our store, together with data from its wider merchant network, to show you advertising for Cafform and to personalise what you see.

You can opt out of this. Where the data sharing opt-out page is available in your region, you can use our data sharing opt-out page. You may also write to support@cafform.shop at any time and we will action your opt-out request. Where Shopify's automated privacy settings apply, a Global Privacy Control signal is treated as an opt-out automatically.

Sale or sharing of personal information

We do not sell your personal information for money.

Some privacy laws — including US state laws and Canadian federal and provincial law — define "sale" or "sharing" broadly enough to cover advertising technologies even where no money changes hands, and the Shopify network features described above may fall within those definitions depending on where you live. Where the data sharing opt-out page is available in your region, you can use our data sharing opt-out page. You may also write to support@cafform.shop at any time to object to any use of your information.

How long we keep it

We keep order records for as long as we need them to fulfil and support your purchase, to honour the return and warranty periods described in our other policies, and to satisfy our legal, tax and accounting obligations. Communications are kept for as long as they are useful to support you.

In practice:

• Order records — kept for 7 years after the order, to meet accounting and tax record-keeping obligations.
• Support emails and contact form messages — kept for 2 years, then deleted.
• Account details, if you create an account — kept until you ask us to delete the account.

You can ask us to delete your information sooner. Where we are legally required to keep a record — a completed sale, for instance — we will tell you which part we cannot delete and why.

Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and get a copy of it
• correct information that is wrong
• delete information we hold about you
• obtain your information in a portable format
• opt out of targeted advertising, or of any sale or sharing of your information
• not be discriminated against for exercising any of these rights

We extend these rights to every customer, in the United States and in Canada, regardless of state or province.

How to exercise your rights

Write to support@cafform.shop and tell us which right you want to exercise. We may need to confirm your identity before acting, usually by matching your request to an order.

You may authorise someone else to make a request for you. We will ask for proof of that authorisation.

How quickly we respond

We respond to a privacy request within 45 days. Where a request is complex we may need longer, and if so we will tell you within those 45 days and explain why.

If you are unhappy with our decision

If we decline a request, we will tell you why. You may ask us to reconsider by replying to the same address, and a different person will review it. Depending on where you live, you may also contact your state attorney general (United States) or the Office of the Privacy Commissioner of Canada.

Sensitive information

We do not ask for or intentionally collect sensitive personal information — such as health, biometric, precise geolocation, racial or ethnic origin, or religious belief. Please do not send it to us.

Children

Cafform is not directed at children and we do not knowingly collect information from anyone under 13. If you believe a child has given us personal information, write to support@cafform.shop and we will delete it.

Transfers across borders

Caffora Limited is established in the United Kingdom. Personal information you give us is accessed and processed by our team in the United Kingdom, as well as by service providers in the United States and elsewhere. That means information about you leaves the country where you live in the ordinary course of us running the business, fulfilling your order and answering your messages.

We take the same care with it wherever it is held, and we require our service providers to do the same.

Cookies and similar technologies

Shopify sets cookies that are necessary for the site to work — keeping your cart, keeping you signed in, and securing checkout. Others may be used to understand how the site is used.

You can block or delete cookies in your browser settings. Blocking necessary cookies will prevent checkout from working.

Because we run no advertising or analytics tools of our own, there are no third-party advertising cookies on this store. The cookies present are the ones Shopify sets to operate the shop, to produce our sales reports, and to support the network features described above. Where a cookie banner is displayed in your region, it lets you manage your preferences.

Automated opt-out signals

Some browsers and extensions send an automated opt-out signal, such as Global Privacy Control, telling websites not to sell or share your information for advertising. Several US state laws require that these signals be honoured.

Where the data sharing opt-out page is active for your region, a Global Privacy Control signal is treated automatically as an opt-out request for the browser and device you are using. You may also send an opt-out request to support@cafform.shop at any time, and we will action it.

Notice at collection

At the point you give us information — at checkout, when creating an account, or when contacting us — you are told what is being collected and why, and linked to this policy. We do not collect categories of information beyond those listed above without telling you first.

Security and breach notification

Payment card details are handled by our payment provider and never reach our systems. Access to order and customer data is limited to people who need it. Shopify holds the data on our behalf under its own security arrangements.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as required by law, and tell you what happened and what to do.

Changes to this policy

We will update this policy as our practices change. The version number and effective date at the top of this page tell you which version you are reading. Where a change materially affects how we use your information, we will tell you.