Privacy Policy

This policy explains what personal information Africafe collects when you visit africafe.us or place an order, how we use it, who we share it with, and the choices you have. We keep the list of the companies that process data on our behalf accurate and current — if that list changes, this policy changes with it.

Who we are

Africafe (trading as Africafe.us) is the business responsible for your information. You can reach us at info@africafe.us, (713) 364-3230, or 5829 W. Sam Houston Pkwy N, Ste 306, Houston, TX 77041, United States.

What we collect

• Information you give us: your name, email address, shipping and billing address, phone number, and the contents of your order. If you contact us, we keep your message and our reply.
• Payment information: your card details are entered directly into Stripe’s hosted checkout. We never see or store your full card number — we receive only a confirmation of payment and the last four digits and card type from Stripe.
• Information collected automatically: when you browse the site we and our hosting providers record standard technical data such as your IP address, browser type, the pages you visit, and the date and time — used to serve the site, keep it secure, and diagnose errors.

How we use your information

• To process, ship, and confirm your orders, and to handle returns and refunds.
• To send you transactional messages about your order (confirmation, shipping, delivery, refunds) and to answer your questions.
• To calculate and remit sales tax, keep financial records, and meet our legal obligations.
• To detect and prevent fraud, abuse, and security incidents.
• To send marketing email only if you have opted in — every marketing email has a one-click unsubscribe, and unsubscribing never affects the transactional messages about your orders.

Who we share it with

We do not sell your personal information for money. We share it only with the service providers that make the store run, and only with the data each one needs to do its job. They act on our instructions and may not use your information for their own purposes.

ProviderWhat it doesWhat it receives StripeProcesses payments, calculates tax, and screens for fraudName, email, billing and shipping address, order amount; card details entered directly with Stripe ResendSends order and account emailsName, email, order details ShippoBuys shipping labels and provides trackingName, shipping address, package contents and weight VercelHosts and serves the websiteTechnical request logs, IP address NeonOur database — stores orders and account recordsOrder and account data CloudflareServes images and protects the siteTechnical request data, IP address UpstashRate-limiting and abuse preventionIP address and request metadata SentryError monitoring so we can find and fix bugsTechnical error data, which can include an IP address Google AnalyticsMeasures site traffic and how pages are used, so we can improve the store. Loaded only after you accept analytics cookies in our banner, and never when your browser sends a Global Privacy Control signal.A truncated (anonymized) IP address, a cookie identifier, and the pages and actions you view on the site

We may also disclose information if the law requires it, to enforce our terms, or in connection with a sale or reorganization of the business — in which case we will require the recipient to honor this policy.

Cookies and tracking

We group cookies and similar technologies into three categories, and you control the last two:

• Strictly necessary (always on): the cookies that keep your cart and session working, remember your cookie choices, and sign administrators in. The site cannot function without these, so they do not require consent and cannot be switched off.
• Analytics (off until you opt in): we use Google Analytics to understand how the store is used — which pages are visited and where visitors run into trouble — so we can improve it. We ask Google to anonymize your IP address, and these cookies load only after you accept analytics in our cookie banner.
• Marketing (off until you opt in): advertising and measurement pixels that help us reach and understand our audience. These are strictly opt-in and off by default. Any pixel we enable loads only after you accept marketing cookies in our banner, and never when your browser sends a Global Privacy Control (GPC) signal. The advertising and measurement services we may use are listed under “Advertising and measurement services” below; we keep that list current, and any service we have not enabled sets no cookies and sends no data.

Our cookie banner lets you reject non-essential cookies just as easily as you accept them, and you can change your choice at any time. If your browser sends a Global Privacy Control (GPC) signal we treat it as a refusal of analytics and marketing cookies, and we do not load them regardless of any earlier choice.

Advertising and measurement services

Depending on which advertising or audience-measurement services we have turned on, we may use the providers below. Each one is off by default and loads only after you accept marketing cookies in our banner; none of them loads — and none sets a cookie or sends any data — when your browser sends a Global Privacy Control (GPC) signal, or while it is not enabled. When enabled, these services may set their own cookies and receive your device and browsing information to measure advertising and build audiences. Google Analytics, listed above, is an analytics service and loads under the analytics category instead.

• Meta Pixel — measures advertising performance and builds audiences for Meta (Facebook and Instagram) advertising.
• Pinterest Tag — measures conversions and builds audiences for Pinterest advertising.
• Google Ads — measures conversions and builds remarketing audiences for Google advertising.
• TikTok Pixel — measures conversions and builds audiences for TikTok advertising.
• Microsoft UET — the Microsoft Advertising (Bing) conversion and remarketing tag.
• LinkedIn Insight Tag — measures conversions and builds audiences for LinkedIn advertising.
• Snap Pixel — measures conversions and builds audiences for Snapchat advertising.
• Reddit Pixel — measures conversions and builds audiences for Reddit advertising.

If you accept marketing cookies, some of these services act as advertising partners with whom your information may be “shared” for cross-context behavioral advertising, as those terms are defined by California and Texas law. You can withdraw that consent at any time by rejecting marketing cookies in our banner, by using the Your Privacy Choices page, or by sending a Global Privacy Control (GPC) signal, which we honor.

Your privacy choices and rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and get a copy of it;
• correct information that is wrong;
• delete your information (we may keep anonymized order and tax records we are legally required to retain);
• opt out of any sharing of your information for targeted advertising.

To make a request, email info@africafe.us or use the Your Privacy Choices page. We respond within 45 days. We will never treat you differently for exercising these rights. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of sharing for advertising.

California and Texas residents

California (CCPA/CPRA) and Texas (TDPSA) residents have the rights described above, including the right to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. If you accept marketing cookies, some of the advertising and measurement services listed under “Cookies and tracking” above may involve “sharing” your personal information for cross-context behavioral advertising; you can opt out at any time by rejecting marketing cookies, by using the Your Privacy Choices page, or by sending a Global Privacy Control (GPC) signal, which we honor. You may exercise your rights through the same contacts above, and you may designate an authorized agent to act for you.

How long we keep information

We keep your account and order information for as long as your account is active or as needed to provide the store. Financial and order records are kept for at least four years to meet tax and accounting obligations. When you ask us to delete your information, we remove or anonymize it except where we are required to retain a record.

How we protect it

We use encryption in transit, restrict access to the people and services that need it, protect the administrator console with two-factor authentication and an audit log, and keep card handling out of our own systems by using Stripe’s hosted checkout. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

Children

The store is intended for adults. We do not knowingly collect personal information from children under 13, and we will delete it if we learn we have.

Visitors outside the United States

We are based in the United States and process information here. If you order from another country, you understand that your information will be handled in the United States, and we will honor access and deletion requests wherever you live.

Changes to this policy

If we change this policy we will update the date shown at the top of this page, and for material changes we will give notice on the site. Continuing to use the store after a change means you accept the updated policy.

Contact us

Questions about your privacy? Email info@africafe.us or call (713) 364-3230.