Privacy Policy

Depending on how you interact with us, we may collect:

• identity information, such as your name;
• contact information, such as email address, phone number, billing address and shipping address;
• order information, including products purchased, order value, delivery details, returns, refunds and customer-service history;
• account information, including login credentials or account preferences where customer accounts are enabled;
• payment-related information. Payment details may be collected or processed directly by our payment providers; HCC may receive transaction identifiers, payment status and limited payment metadata rather than full card details;
• device and technical information, such as IP address, browser type, device identifiers, operating system, pages viewed, referral source and approximate location derived from network information;
• marketing and preference information, such as subscriptions, consent choices, campaign interactions and promotional preferences;
• communications you send to us by email, phone, WhatsApp, social media, forms, reviews or customer support; and
• fraud-prevention and security information reasonably needed to protect customers, payments and the website.

We may use personal information to:

• process, confirm, fulfil, deliver and manage orders;
• process payments, COD verification, cancellations, replacements and refunds;
• create and manage customer accounts;
• provide customer service and respond to enquiries or complaints;
• send transactional communications, including order confirmations and delivery updates;
• prevent fraud, misuse, chargebacks, security incidents and unauthorised transactions;
• operate, secure, troubleshoot and improve the website, checkout and customer experience;
• measure website and campaign performance and understand how customers use our services;
• personalise content and advertising where permitted by law and your consent choices;
• send marketing communications where permitted and manage your opt-in or opt-out preferences;
• comply with legal, tax, accounting, customs, regulatory and record-keeping obligations; and
• establish, exercise or defend legal claims and enforce our policies.

Our website uses cookies, pixels and similar technologies for essential storefront and checkout functions, cart continuity, security, preferences, analytics and, where enabled, advertising. Some technologies are necessary for the site to work; others may be optional depending on your location and consent choices.

Where required by law, we will provide privacy or cookie controls for non-essential technologies. You can also manage cookies through your browser, although disabling necessary cookies may affect website functionality.

Our online store is hosted on Shopify. Shopify and its service providers process information needed to provide the storefront, checkout, hosting, fraud prevention and related e-commerce services. Shopify may process information in accordance with its own privacy terms and the services we enable on our store.

We support online payment methods and Cash on Delivery where available. Online payments are processed through third-party payment gateways, banks, wallets or payment processors. These providers may collect and process your payment information under their own privacy and security terms. We do not intentionally store complete payment-card credentials when the payment provider processes them directly.

We may share personal information only as reasonably necessary to operate the business, including with:

• Shopify and e-commerce infrastructure providers;
• payment gateways, banks, wallets and payment processors;
• couriers, fulfilment providers, postal services, customs brokers and delivery partners;
• hosting, IT, security, fraud-prevention and customer-support providers;
• analytics, advertising and marketing providers where permitted by law and your choices;
• professional advisers, including lawyers, accountants, auditors and insurers;
• regulators, courts, law-enforcement or governmental authorities where disclosure is legally required; and
• a buyer, investor, lender or successor in connection with a proposed or completed corporate transaction, subject to appropriate safeguards.

We do not sell customer personal information for money. Some advertising or analytics arrangements may be treated as "sharing" or a similar regulated activity in certain jurisdictions; where applicable, we will provide the choices required by law.

Because our store and service providers operate internationally, personal information may be processed outside the country where you live. Where applicable law requires safeguards for such transfers, we will use appropriate contractual, organisational or other lawful transfer mechanisms.

If you subscribe or otherwise permit marketing, we may send product news, offers, launches, stories, events and other promotional communications. You can unsubscribe from marketing emails using the unsubscribe link and can opt out of SMS or WhatsApp marketing through the method provided in the message or by contacting us. Opting out of marketing does not prevent essential order, account, security or service communications.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including order fulfilment, support, tax and accounting records, fraud prevention, dispute resolution and legal compliance. Retention periods vary by data type and legal requirement. When information is no longer required, we may delete, anonymise or securely isolate it.

We use reasonable administrative, technical and organisational safeguards designed to protect personal information. No internet transmission or electronic storage system can be guaranteed to be completely secure. If you have an account, you are responsible for keeping your login credentials confidential and for notifying us if you suspect unauthorised access.

Depending on the law that applies to you, you may have rights to request access to, correction of, deletion of, or information about the personal data we hold; to withdraw consent; to object to or restrict certain processing; to opt out of certain marketing or advertising uses; or to make a complaint to an appropriate authority. These rights may be subject to legal exceptions and identity verification.

To exercise a privacy right, email care@himalayacoffeecompany.com with the subject line "Privacy Request" or contact us on +977 980-2377008. We will respond in accordance with the timeframes required by applicable law.

Our online store is intended for customers who can lawfully enter into a purchase. Persons under 18 should use the website or place an order only with the involvement and permission of a parent or legal guardian where required by law. We do not knowingly seek to collect personal information from children in violation of applicable law.

The website may link to third-party sites, social networks or services. Their privacy practices are governed by their own terms and policies. HCC is not responsible for the privacy practices of services we do not control.

For privacy questions, complaints or requests, contact the HCC Customer Care & Grievance Desk at care@himalayacoffeecompany.com or +977 980-2377008. We will investigate and respond in accordance with applicable law.

We may update this Privacy Policy to reflect changes in our business, technology, service providers, legal requirements or data practices. The "Last updated" date will show when the policy was most recently revised. Where legally required, we will provide additional notice or obtain renewed consent for material changes.