Privacy policy

The Cumulus Coffee Company Privacy Notice

Last updated: August 2024

The Cumulus Coffee Company (collectively, “Cumulus Coffee,” “we,” “our,” or “us”) sells coffee equipment, including coffee capsules and a machine that uses Cold Cloud Technology to create cold brew coffee in different styles, through our website at www.cumuluscoffee.com, and our related mobile apps (collectively, the “Site”). This Privacy Notice details our practices in collecting, using, disclosing, and otherwise processing your personal information, as well as the choices you have regarding such personal information, as you use our Site, and purchase and use our products. For information about your privacy choices, please review Section 7 Your Privacy Choices.

Cumulus Coffee markets and sells its products and services to consumers in the United States of America. As such, this Privacy Policy applies to users of our Website and consumers of our products and services purchased through our Website who reside in the United States of America. Cumulus Coffee makes not representations for any use of our Website or our products outside of the United States of America.

Table of Contents:

Scope
Personal Information Collected
Purposes for Collecting and Processing Your Information
Disclosures and Sharing of Personal Information
Aggregate and De-identified Information
Cookies and Tracking
Your Privacy Choices
Retention
Children’s Information
Security
Third-Party Links
Changes to this Privacy Notice
Contact Us
California Consumer Privacy Notice
Colorado Privacy Notice
Additional US Privacy Notices

1. Scope

Except as otherwise described below, this Privacy Notice applies to the personal information Cumulus Coffee collects and processes related to: visitors to our Site; individuals who use, access, or otherwise interact or engage with the services, features, and/or products made available through our Site; individuals who purchase our products through the Site; individuals who register for or participate in our events, surveys, research, or promotions; individuals who subscribe to receive news, information, and other communications from us; current, former, and prospective business partners; and individuals who communicate or otherwise interact or engage with us (collectively, the the “Services”).

Not in Scope. This Privacy Notice does not apply to the personal information that we collect and process about Cumulus Coffee employees, contractors, personnel, job applicants, or candidates.

2. Personal Information Collected

As further described below, we collect personal information directly from individuals, third parties, and automatically through your use of our Services.

Personal Information Collected Directly From You. The personal information we may collect from you depends on how you use our Services or otherwise interact or engage with us, but generally includes:

Account Information. If you choose to register for an account through the Site, we collect your name, email, cell phone number, address, and order history.
Identifiers/contact information. When you contact us, including via email or phone, either through access to the Site or calling through our call center, we collect certain personal information from you, such as your name, phone number, email address, and any personal information that you otherwise submit to us.
Survey responses. If you choose to participate in our surveys, we may collect your survey responses, including information regarding demographics, preferences, and your opinion about our Services. Participation in our surveys is voluntary.
Promotions. If you participate in our promotions, we may collect your name, email address, and other registration information related to that promotion.
Professional information. When you work with us in your professional capacity, we may collect the business’ name, postal address, and phone number, your email address, and your position with the business.
Communications and interactions. When you email, call, or otherwise communicate with us or members of our team, we collect and maintain a record of your communications. We also maintain records of communications and information that you may post on our social media channels and information you provide to us related to any customer support requests.
Events. If you register for or attend an event that we host or sponsor, we may collect personal information related to your registration for and participation in such event.
Payments and Purchases. When you make a purchase through the Site, we collect information such as your name, the item purchased, and your shipping address. Additionally, our third-party payment providers provide us with limited information related to your transaction, such as the type of card used (e.g., Visa, American Express, etc.) and the last four digits of the card used for payment.
Other information. Depending on your interactions with us, we may collect additional information such as personal information related to your interactions with our Services.

Personal Information from Third Parties. We may collect personal information about you from third-party sources, such as public databases, joint marketing partners, social media platforms, or other third parties, including third-party commercial data providers.

We may receive lead and prospect information from third parties about prospective customers who may be interested in our Services.
If you post information about us or engage with us on third-party platforms, such as through your social media account, we may collect personal information about you from that third-party platform or account (e.g., your social media username and/or handle). These third-party platforms and services control the information that they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.
We will use personal information lawfully collected from third parties in accordance with this Privacy Notice. We, however, assume no liability or responsibility for the actions and activities of the third-party information providers.

Personal Information Collected Automatically. We automatically collect and derive personal information related to your use of our Services and your interactions with us, including information about devices you gain access from. Such information may include:

Device and browsing information. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information when users access or use our Services. We may collect IP address, general location information, domain name, pageviews, date and time stamps, browser type, device type, device ID, Internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, see Section 6 Cookies and Tracking.
Activities and usage. We also collect activity information related to your use of the Services, such as information about links clicked, searches, features used, preferences, items viewed, items purchased, and time spent within the Services.
Location Information. We may collect or derive location information about you such as through your IP address. With your permission, we may also collect geolocation information from your device. You may turn off location information sharing through your device. We will only collect location information from your device with your permission. This does not restrict our use of location information from public and commercial sources that is otherwise lawfully obtained.

3. Purposes for Collecting and Processing Your Information

Generally, we collect, use, and otherwise process the personal information that we collect for the following purposes:

Providing Services and support. To provide our products and to operate our Services; to communicate with you about your use of our products and Services; to provide support; to respond to your inquiries; to gather customer feedback; to fulfill your requests; to facilitate your purchases and order fulfilment; to communicate with you; and for similar Service and support purposes.
Analytics and improvement. To better understand how users access and use our Services, products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop Services and features, and for internal quality control and training purposes.
Customization and personalization. To tailor the content that we may send you and that we may display on the Site, including to offer personalized help and instructions, and to otherwise personalize your experience.
Marketing and advertising. For marketing and advertising purposes. For example, to send you information about our products and Services, such as newsletters, and other marketing content, as well as any other information that you sign up to receive. We also may use certain personal information that we collect to manage and improve our advertising campaigns so that we can better reach individuals with relevant content. We may use your personal information in e-mail, SMS, and social media marketing campaigns related to your purchase and or account with us, for the purpose of keeping you informed of product, program, and company developments.
Planning and managing events. For event planning and management, including contacting you about our promotions and Services.
Research and surveys. To administer surveys, such as for market research, customer satisfaction purposes or improving our products and Services; to conduct statistical and data analytics; and for other similar purposes.
Security and protection of rights. To protect our Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use, Terms of Sale, or this Privacy Notice.
Legal proceedings and obligations. To comply with the law and our legal obligations, and to respond to legal process and related legal proceedings.
General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions, such as financings, and related to the administration of our general business, accounting, auditing, compliance, record keeping, and legal functions.

4. Disclosures and Sharing of Personal Information

We do not sell personal information that we collect. Generally, we disclose the personal information that we collect to provide our Services, respond to and fulfil your requests, as otherwise directed or consented to by you, and for other purposes otherwise described in this Privacy Notice, such as:

Services and support. To provide and operate our products and Services, communicate with you about your use of the products and Services, provide troubleshooting and technical support, respond to your inquiries, fulfill your requests including your purchases and order fulfillment, and for similar Service and support purposes.
Analytics and improvement. To better understand how users access and use the Services, our products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our products, Services, and business operations, to develop our products, Services, and features, and for internal quality control and training purposes.
Marketing, advertising, and campaign management. We may disclose certain personal information to third-party advertising network providers, sponsors, or traffic measurement services, who may use this information to improve and measure the effectiveness of our advertisements and those of third parties. For more information, see Section 6 Cookies and Tracking.
In support of business transfers. If we, our affiliates, or subsidiaries are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction or corporate transactions such as financings or restructurings, to lenders, auditors, and third-party advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction.
Compliance, governance, and legal requirements. To comply with our legal and compliance obligations and to respond to legal process and related legal proceedings. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. We may also disclose information, including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
Security and protection of rights. To protect the Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use, Terms of Sale, or this Privacy Notice.

We may disclose and make available personal information for the purposes described above to third parties, which may include:

Vendors and service providers: We may disclose the personal information that we collect to our service providers and others who perform functions on our behalf or provide us services. These may include, for example, service providers that host or operate our Site, payment processors, analytics providers, information technology service providers, customer service vendors, consultants, auditors, and legal counsel.
Third-party platforms, providers, and networks. We may disclose or make available personal information to the third-party platforms and vendors that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests, including your product purchases and order fulfillment. We may also make certain information (such as browsing information) available to third parties in support of our marketing, advertising, and campaign management.
Others as permitted or required by applicable law. We may disclose personal information to third parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.
Security and protection of rights. We may disclose your personal information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use, Terms of Sale, or this Privacy Notice, or as evidence in litigation in which we are involved.

5. Aggregate and De-identified Information

To the extent permitted by applicable law, we may receive, use, and disclose aggregate and other non-identifiable information related to our business, products, and Services for quality control, analytics, research, development, and other purposes.

6. Cookies and Tracking

We and other third parties use cookies, pixel tags, and other similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within our Site and Services. This information, which may be considered personal information in some jurisdictions, is used, for example, to analyze and understand how you access, use, and interact with our Site and Services; to identify and resolve bugs and errors in our Site and Services; to assess, secure, protect, optimize, and improve the performance of our Site and Services; for marketing, advertising, measurement and analytics purposes; and to personalize content on our Site. We may also de-identify and/or aggregate such information to analyze trends, administer our Site and Services, and gather broad demographic information for aggregate uses, and for any other lawful purposes.

Cookies. Cookies are alphanumeric identifiers used for tracking purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process, to support the security and performance of the Site and Services, or to allow us to track activity and usage data within and across our Site and Services.

Pixel Tags and Similar Technologies. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. We may use these tracking technologies to understand users’ activities, to help manage content and compile usage statistics, and in emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.

Third-Party Analytics and Tools. We use third-party tools, such as Google Analytics, which are operated by third party companies to evaluate usage and traffic on our Site and Services. These third-party analytics companies use cookies, pixels, and other tracking technologies to collect usage data to provide us with reports and metrics that help us analyze, improve, and enhance performance and user experience. You can learn more about how Google uses your information at www.google.com/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services”). You can also download the Google Analytics Opt-out Browser Add-on to prevent your information from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking. We and third parties may use the information we collect about you within our Site and Services, and on other third-party websites and services, to help us and these third parties identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.) to interact or engage with us or our Site and Services.

Targeted Advertising. We work with third parties, such as ad networks, channel partners, mobile ad networks, analytics and measurement services, and others (the “third-party ad companies”) to personalize content and display advertising within our Services, as well as to manage our advertising on third-party websites, mobile apps, and online services. We may share certain information with third-party ad companies, and we may each use cookies, pixels tags, and other tools to collect usage and browsing information within our Services, as well as on third-party websites, apps, and services. This information may include IP address, location information, cookie and advertising IDs, and other identifiers, as well as browsing information.

7. Your Privacy Choices

You have certain choices regarding our processing of your personal information. For example:

Marketing Communications. We may send periodic promotional and operational emails or other similar communications to you. You may change your preferences by following the instructions provided to you in the communication. If you opt out of receiving promotional emails from us, we may still send you communications about your account or any Services you have requested or received from us.

Industry Ad Choice Programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Site and Services and those of third parties, in order to display more relevant targeted advertising to you. You can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance).

Cookie preferences. You can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Sites, but some features may not function. If you visit our Site from a different device or from a different browser on the same device, you will need to apply your cookie settings for that browser and/or device as well.

8. Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or as otherwise necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements.

9. Children’s Information

Our Services are not designed for children under 16. If we discover that a child under 16 has provided us with personal information, we will delete such information from our systems. Additionally, our Terms of Use for our Site require that all users be at least eighteen (18) years of age. If you are a parent or guardian and believe we have collected your child’s information in violation of applicable law, please contact us as set forth in Section 13 Contact Us.

10. Security

We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

11. Third-Party Links

Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Privacy Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.

12. Changes to this Privacy Notice

We may make changes to this Privacy Notice from time to time, so please be sure to check back periodically. We will post updates to the Privacy Notice on the Site. If we make any material changes to this Privacy Notice, we will endeavor to provide you prior notice, such as by emailing or posting prominent notice on our Site.

13. Contact Us

Cumulus Coffee welcomes your questions and comments about your privacy or this Privacy Notice. Please contact us by emailing support@cumuluscoffee.com for additional information.

14. California Privacy Notice

This California Consumer Privacy Notice (the “California Notice”) applies to personal information Cumulus Coffee collects online about California consumers. This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”).

1. Notice of Collection and Use of Personal Information. We may collect and may have collected during the 12-month period prior to the Last Updated date of this California Notice the following categories of personal information about you:

Identifiers: information that identifies you, including your legal name, email address, unique personal identifiers (such as a device identifier and/or IP address), account name, government-issued ID numbers (e.g., drivers license) which we may use to verify your identity when we set up your account with Cumulus Coffee.
Other Records: such as phone number, billing address, or credit or debit card information, and any other personal information covered by Cal. Civ. Code §1798.80(e) (which may overlap with other categories listed here).
Demographic Information: such as your age or gender, or, where you have provided such information to Cumulus Coffee voluntarily, demographic information about your race, ethnicity, sexual orientation, or gender identity, provided in connection with market research or marketing campaigns we conduct. This category includes information that may qualify as protected classifications under other California or federal laws.
Commercial Information: including purchases, products sold, and/or your interaction with our Site.
Internet or Other Network Activity: information including your interactions with our Site and Services and what led you to our Site and use of our products and Services (including web/mobile traffic related information); device type and/or identifier, operating system and version, browser type and settings and cookie-related data (e.g., cookie ID).
Sensory Information: data categorized as visual data, such as pictures or videos posted on our Site.
Geolocation Data: your general location provided through location-enabled services such as WiFi and GPS or precise location information, with your consent, when enabled through one of our mobile applications or from your mobile device settings.
Inferences: inferences based on personal information about you, including your interests, preferences, and favorites; inferred information about your demographic category used to create marketing segments or profiles.

2. The Sources and Purposes for Our Collection. We collect the categories of personal information described in this California Notice from the sources described in Section 1 and 2 of the Cumulus Coffee Privacy Notice, which includes collecting information directly from you, your devices, and our partners. The sources of this data include you, advertising networks, service providers (including internet service providers), social networks, government entities or other public sources, marketing and business partners, and our vendors and suppliers.

We use these categories of personal information for our business and commercial purposes as described throughout our Privacy Notice.

3. Sale or Sharing of Personal Information. We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties (such as online advertising services) to collect personal information through automated technologies on our Site for targeted (cross-context behavioral) advertising purposes. This kind of sharing may be considered a “sale” under California law, and you have a right to opt out of it.

We may sell or share for cross-contextual or interest-based advertising purposes the following categories of personal information about you to online advertising services or networks:

Identifiers
Commercial Information
Internet or Network Activity
Inferences

You can opt out of allowing us to share your data for purposes of cross-context behavioral advertising by clicking the “Do Not Sell or Share My Personal Info” link at the footer of our homepage or through your account privacy settings. For California residents, you can also opt out by broadcasting the Global Privacy Control signal from a supported browser. Requests sent using the Global Privacy Control will apply to the browser from which they are submitted and will be applied at the account level. For more information about the Global Privacy Control, please visit https://globalprivacycontrol.org. We do not knowingly sell or share the personal information of minors younger than 18.

4. Disclosure of Personal Information for a Business Purpose. We share personal information with service providers, contractors, and other third parties. Below are the categories of personal information that have been disclosed during the last 12 months for a business purpose and the categories of recipients with whom we may have shared your information. Please note that not every one of the following categories may apply to your information.

Categories of Personal Information shared for a Business Purpose.

Identifiers
Other records
Commercial information
Internet or other electronic network activity information
Geolocation information
Sensory information
Inferences derived from personal information

Categories of Third Parties who may receive Personal Information for a Business Purpose.

Our corporate affiliates
Our buyers and sellers (for example, when you post publicly in our forums or leave reviews)
Our vendors or other service providers
Our marketing and business partners
Online advertising services
Analytics providers
Social networks
Internet service providers

5. Shine the Light. California residents are entitled to ask for a notice describing what categories of personal information we share with third parties for their own direct marketing purposes. Cumulus Coffee does not share any personal information with third parties for their own direct marketing purposes, unless you otherwise consent to it and/or direct it. If you have questions about these practices, or would like to make a request, you can contact us through one of the channels listed in the “Contact Us” section of this Privacy Notice. In your request, please include the statement “Shine the Light Request,” and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

15. Colorado Privacy Notice:

This Colorado Privacy Notice (the “Colorado Notice”) applies to personal information Cumulus Coffee collects online about Colorado consumers. We adopt this Supplemental Notice to comply with the Colorado Privacy Act (the “CPA”). This Colorado Notice uses certain terms that have the meanings given to them in the CPA.

1. Collection and Use of Personal Information. Please see Sections 1, 2, and 3 of the Cumulus Coffee Privacy Notice , for information about the categories of personal information we collect and the purposes for which we use the information. We do not knowingly process personal information from children under the age of 16. We do not knowingly process “sensitive data” as that term is defined under the CPA.

2. Sharing of Personal Information. We share your information with our service providers or other third parties where necessary to perform the Services, comply with our legal obligations, or for purposes set out in this Privacy Notice. Your personal information will be shared with our service providers or other third parties. Below are the categories of personal information and categories of service providers and third parties with whom we may share your information. Please note that not every one of the following categories may apply to your personal information.

Categories of Personal Information

Buyer Account Information
Payments Information
Transaction Information
Customer Support Information
Survey Responses
Browser / Device Information
Service Usage Information
Location Information

Categories of Third Parties with whom We share Personal Information

Our Buyers, such as when you post to your Public Profile or in our public forums
Professional services organizations, such as auditors and law firms
Our marketing and business partners
Online advertising services
Data analytics providers
Social networks
ISPs, operating systems and platforms
Government entities

3. Sales and Targeted Advertising. We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties (such as online advertising services) to collect personal information via automated technologies on our Site and Apps for targeted advertising purposes. You have the right to opt out of these types of disclosures of your information. We may “sell” (as defined by statute) or share for cross-context behavioral advertising purposes the following categories of personal information about you to online advertising services or networks:

Identifiers: information that identifies you, such as your email address or unique personal identifiers (such as a device identifier and/or IP address).
Commercial Information: information such as product purchases or services used.
Online and Network Activity: information such as interactions with our Site (including what led you to our Site such as traffic-related information); device type, operating system and version, browser type, and settings, and cookie-related data (e.g., cookie ID).
Inferences: inferences based on personal information about you, including your interests, preferences, and favorites; inferred information about your demographic category used to create marketing segments or profiles.

4. Profiling. To the extent we engage in automated processing or profiling to prevent, detect, protect against or respond to fraudulent or unlawful activity, we are not required to offer the right to opt out. We otherwise do not engage in profiling that requires an opt-out as defined under the CPA.

16. Additional US Privacy Notices

Cumulus Coffee reserves the right to amend this Privacy Notice and specific jurisdictional notices at its discretion. Notice of any amendment shall be posted on the Cumulus Coffee Site.