What we collect, and why.

If you give us your first name and email on our coming soon page, we store:

• your first name and email address
• the date and time you joined
• your IP address and browser user agent
• the website that referred you, if any
• the exact wording of the consent line shown to you at the time
• a referral code of your own, and the code you arrived through, if you followed a link from a friend, a cafe or one of our own posters

The name and email are so we can tell you when the coffee is ready and greet you properly. The IP address and user agent are there to block spam signups and to keep an honest record that the request came from a real person. We store the consent wording so that if we ever move the list to an email service, we can show what you actually agreed to.

After you join, we give you a link you can send to a friend. If someone joins through it, we record that their signup came from your code, so we know word of mouth is working. We use the same kind of link for our own channels, so we can tell whether people found us through a cafe, a market stall or a poster.

The code in the link is a random string. It is not built from your name or your email, and nobody who receives your link can learn anything about you from it. You are never obliged to share it, and nothing about your place on the list depends on whether you do.

The contact form stores your name, email, subject and message, along with the date, your IP address and your browser user agent. We use it to reply to you and nothing else.

In a database on a private server we rent and control. Your details are not sitting in a third party marketing platform today. If we later move the list to an email service so we can send the launch announcement, that service will handle it on our behalf, under their own terms, and we will update this page before we do it.

We do not set any cookies when you visit this site or join the list. No analytics, no advertising pixels, no social media trackers, no session cookie of any kind for ordinary visitors.

The only cookies this site can issue are for the private areas the family uses to read the list and preview the shop. Those are set only after someone signs in with a password, and they exist purely to keep that person signed in.

Nobody. We do not sell, rent or trade your details, and we do not share them for anyone else’s marketing. We would only ever hand information over if the law genuinely required it.

Until you ask us to remove you, or until the pre-launch list has served its purpose and we no longer need it. Messages sent through the contact form are kept as long as they are useful for answering you and keeping track of the conversation.

Email hello@bandolabrews.com and we will do any of the following, free, without asking why:

• send you a copy of everything we hold about you
• correct anything that is wrong
• delete you from the list entirely

Every email we send will also carry an unsubscribe link. We honour these requests wherever in the world you live, not only where the law obliges us to.

This site is not aimed at children, and we do not knowingly collect anything from anyone under 13. If you believe a child has given us their details, email us and we will remove them.

If we change what we collect or who handles it, we will update this page and change the date at the top. If the change is significant and we have your email, we will tell you directly rather than quietly editing this page.

Bandola Brews, a family coffee farm in Grecia, Alajuela, Costa Rica. Questions about any of the above go to hello@bandolabrews.com, and a real person will answer.