Privacy Policy

CFS COFFEE® IS CONCERNED ABOUT PRIVACY ISSUES AND WANTS YOU TO BE FAMILIAR WITH HOW WE COLLECT, USE AND DISCLOSE YOUR INFORMATION.

This privacy policy describes our practices in connection with information that we collect through websites operated by us from which you may be accessing this privacy policy (the “Websites”), through the software applications made available by us for use on or through computers and mobile devices (the “Apps”), through our social media pages that we control from which you may be accessing this privacy policy (collectively, our “Social Media Pages”), as well as through html-formatted email messages that we send to you that link to this privacy policy (collectively, including the Websites, the Apps and our Social Media Pages, the “Services”).

Please read this privacy policy carefully. By using the Services, you consent to our collection and use of your Personal Information (described below) as described in this privacy policy. Except as set forth in this privacy policy, your Personal Information will not be used for any other purpose without your consent. You may withdraw your consent to our processing of your personal information at any time. However, withdrawing consent may result in your inability to continue using the Services or some of their features.

Personal Information We May Collect
“Personal Information” is information about you that, alone or in combination with other information, can uniquely identify you as an individual. We may collect certain Personal Information from you when you visit the Websites or use the Services, including but not limited to:

Name
Postal address (including billing and shipping addresses)
Telephone number
Email address

We may use a third-party payment service to process payments made through the Services. If you wish to make a payment through the Services, your Personal Information may be collected by such third party and not by us and will be subject to the third party’s privacy policy, rather than this privacy policy. We have no control over, and are not responsible for, this third party’s collection, use and disclosure of your Personal Information.

If you submit any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this privacy policy.

How We May Collect Personal Information
We and our service providers may collect Personal Information in a variety of ways, including:

Through the Services: We may collect Personal Information through the Services, e.g., when you sign up for a newsletter or make a purchase.
Offline: We may collect Personal Information from you offline, such as when you visit our restaurants, place an order over the phone or contact us.
From other sources: We may receive your Personal Information from other sources, such as public databases; joint marketing partners; social media platforms; from people with whom you are friends or otherwise connected on social media platforms; and from other third parties.

How We May Use Personal Information
We may use your Personal Information:

To respond to your inquiries and fulfill your requests, such as to send you newsletters.
To send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies.
To complete and fulfill your purchase or sign you up for events, for example, to process your payments, have your order delivered to you, communicate with you regarding your purchase or reservation and provide you with related customer service.
To send you marketing communications that we believe may be of interest to you.
To allow you to participate in sweepstakes, contests and similar promotions and to administer these activities. Some of these activities have additional rules, which could contain additional information about how we use and disclose your Personal Information, so we suggest that you read these rules carefully.
For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

How Personal Information May Be Disclosed

Your Personal Information may be disclosed:

To our third-party service providers who provide services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing and other similar services.
To third-party sponsors of sweepstakes, contests and similar promotions.
To identify you to any guest you register for an event.
By you, on message boards, chat, profile pages and blogs and other services to which you are able to post information and materials. Please note that any information you post or disclose through these Services will become public information and may be available to users of the Services and to the general public. We urge you to be very careful when deciding to disclose your Personal Information, or any other information, on the Services.
To your friends associated with your social media account, to other website users and to your social media account provider, in connection with your social sharing activity, such as if you connect your social media account to your Services account or log into your Services account from your social media account. By connecting your Services account and your social media account you authorize us to share information with your social media account provider and you understand that the use of the information we share will be governed by the social media site’s privacy policy. If you do not want your Personal Information shared with other users or with your social media account provider, please do not connect your social media account with your Services account and do not participate in social sharing on the Services.
To a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

Other Information

“Other Information” is any information that does not reveal your specific identity or does not directly relate to an individual, such as:

Browser and device information, including device ids, advertising ids, and other persistent identifiers, such as your IP address. Your IP address is a number that is automatically assigned to the computer that you are using by your internet service provider (ISP).
Information collected through cookies, pixel tags and other technologies, such as the actions taken within and outside of the websites and apps and the date and time of your use of the websites and apps
Demographic information such as your gender or city and other information voluntarily provided by yo
Aggregated information.

How We May Collect Other Information
We and our third-party service providers may collect Other Information in a variety of ways, including:

Through your browser or device: certain information is collected by most browsers or automatically through your device, such as your media access control (mac) address, computer type (windows or macintosh), screen resolution, operating system name and version, device manufacturer and model, language, internet browser type and version and the name and version of the Services you are using. We use this information to ensure that the Services function properly.
Using cookies: cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other anonymous traffic data. We and our service providers use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience while using the Services. We can recognize your computer to assist your use of the Services. We also gather statistical information about the usage of the Services in order to continually improve the design and functionality, understand how the Services are used and to assist us with resolving questions regarding the Services. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies in online advertising to track responses to our advertisement

If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies or to be given the choice of declining or accepting the transfer to your computer of a cookie (or cookies) from a particular site. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If, however, you do not accept cookies, you may experience some inconvenience in your use of the Services. For example, we may not be able to recognize your computer and you may need to log in every time you visit the applicable Services. You also may not receive advertising or other offers from us that are relevant to your interests and needs.

Using pixel tags and other similar technologies: pixel tags (also known as web beacons and clear gifs) may be used in connection with some Services to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
IP address: An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services.
Physical location: we may collect the physical location of your device by, for example, using satellite, cell phone tower or wifi signals. We may use your device’s physical location to provide you with personalized location-based Services and content. We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you choose to deny such uses and/or sharing, we and/or our marketing partners may not be able to provide you with the applicable personalized Services and content.
From you: information such as your preferred means of communication is collected when you voluntarily provide it. Unless combined with Personal Information, it does not personally identify you.
By aggregating information: aggregated Personal Information does not personally identify you (for example, we may aggregate Personal Information to calculate the percentage of our users who have a particular telephone area code).

How We May Use and Disclose Other Information

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law.

If we are required to treat Other Information as Personal Information under applicable law, then we may use it as described in the “How We May Collect Other Information” section above, as well as for all the purposes for which we use and disclose Personal Information.

In some instances, we may combine Other Information with Personal Information (such as combining your name with your geographical location). If we do, we will treat the combined information as Personal Information for so long as it is combined.

Third Party Services
This privacy policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any site or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates.

Please note that we are not responsible for the collection, usage and disclosure policies and practices (including the data security practices) of other organizations, such as Facebook, Twitter, Apple, Google, Microsoft or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including any Personal Information you disclose to other organizations through or in connection with the Apps or our Social Media Pages.

Security
We seek to use reasonable organizational, technical and administrative measures to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us of the problem by contacting us in accordance with the “contacting us” section below.

Choices and Access
Your choices regarding our use of your Personal Information:

If you no longer wish to receive marketing-related emails from us, you may opt-out from such messages by following the instructions contained in each such email. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages, from which you cannot opt-out.

If you believe your Personal Information is being improperly used by us or any third party, please immediately notify us via email at paola@cfscoffee.com and include the word “security” in the subject line.

How you can access, change or suppress your Personal Information:

If you would like to review, correct, update, suppress, or delete the Personal Information that you have provided to us, you may contact us by email at paola@cfscoffee.com or write to the following address:

CFS COFFEE®,

188 Wilshire Blvd,
Casselberry, FL 32707, USA

In your request, please make clear what Personal Information you would like to have changed, whether you would like to have it suppressed from our database, or otherwise let us know what limitations you would like to put on our use of it. For your protection, we may only implement requests with respect to the Personal Information associated with the email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting such change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.

We do not honor Do Not Track Requests and signals.

EU Users’ Rights
The GDPR provides users located in the EU under its protection certain rights with respect to their Personal Information collected by us on the Websites. Accordingly, CFS Coffee recognizes and will comply with the GDPR and those rights, except as limited by applicable law. The rights under the GDPR include:

Right of Access: This includes the right to obtain from us your Personal Data and whether it is being processed, along with the purposes of the processing; categories of Personal Data concerned; recipients to whom your Personal Data has been disclosed; the period for which your Personal Data is being stored; and the right to lodge a complaint.
Right of Rectification: This includes the right to correct inaccurate Personal Data collected and/or stored by us.
Right of Erasure (“Right to be Forgotten”): This includes the right to have your Personal Data deleted. However, if applicable law requires us to comply with your request to delete information, fulfillment of your request may prevent you from using our services and may result in closing your account.
Right to Restriction of Processing: This includes the right to request restriction of how and why your Personal Data is used or processed by us.
Right to Data Portability: This includes the right to receive your Personal Data in a structure, readable format and the right to have your Personal Data transferred.
Right to Object: This includes the right to object to us processing your Personal Data for reasons such as direct marketing purposes and for scientific or historical research or statistical purposes.
Right to not be Subject to Automated Decision-Making: This includes the right to not be subject to a decision based solely on automated processing, including profiling, that could have a legal, or similarly significant, effect on you from being made solely based on automated processes.

Under the GDPR, the lawful basis for us processing your Personal Information for the uses described herein will typically be because you have provided your consent; it is necessary for our contractual relationship; the processing is required for us to comply with legal obligations; and/or the processing is in our legitimate interest on providing you with the Services.

California Users’ Rights
Under the CCPA, California users have the following rights:

Right to Know About Personal Information Collected, Disclosed, or Sold: You have the right to request that CFS Coffee disclose what Personal Information of yours it collects, uses, discloses, and sells over the past 12 months.
Right to Request Deletion of Personal Information: You have the right to request that CFS Coffee delete any of your Personal Information that we collected from you.
Right to Opt-Out of the Sale of Personal Information: CFS Coffee does not sell Personal Information.
Right to Non-Discrimination for Exercising CCPA Rights: CFS Coffee shall not discriminate against California Users for exercising their rights under the CCPA.

To exercise your rights under the CCPA – or have an authorized agent exercise your rights under the CCPA on your behalf – please submit either a “Request to Know Personal Information” or a “Request to Delete Personal Information” to CFS Coffee by contacting CFS Coffee at paola@cfscoffee.com. CFS Coffee will verify this request by ensuring that such request is from the registered email address and that the requestor can provide additional information as requested by us.

PURSUANT TO CALIFORNIA’S “SHINE THE LIGHT LAW” (CIVIL CODE SECTION 1798.83), A CALIFORNIA RESIDENT WHO HAS PROVIDED PERSONAL DATA TO A BUSINESS WITH WHOM HE/SHE HAS ESTABLISHED A BUSINESS RELATIONSHIP FOR PERSONAL, FAMILY, OR HOUSEHOLD PURPOSES (A “CALIFORNIA CUSTOMER”) MAY REQUEST INFORMATION ABOUT WHETHER THE BUSINESS HAS DISCLOSED PERSONAL INFORMATION TO ANY THIRD PARTIES FOR THE THIRD PARTIES’ DIRECT MARKETING PURPOSES. IN GENERAL, IF THE BUSINESS HAS MADE SUCH A DISCLOSURE OF PERSONAL DATA, UPON RECEIPT OF A REQUEST BY A CALIFORNIA CUSTOMER, THE BUSINESS IS REQUIRED TO PROVIDE A LIST OF ALL THIRD PARTIES TO WHOM PERSONAL DATA WAS DISCLOSED IN THE PRECEDING CALENDAR YEAR, AS WELL AS A LIST OF THE CATEGORIES OF PERSONAL DATA THAT WERE DISCLOSED. CALIFORNIA CUSTOMERS MAY REQUEST FURTHER INFORMATION ABOUT OUR COMPLIANCE WITH THIS LAW BY E-MAILING PAOLA@CFSCOFFEE.COM PLEASE NOTE THAT WE ARE REQUIRED TO RESPOND TO ONLY ONE REQUEST PER CALIFORNIA CUSTOMER EACH YEAR AND THAT WE ARE NOT REQUIRED TO RESPOND TO REQUESTS MADE BY MEANS OTHER THAN THROUGH THIS E-MAIL ADDRESS.

Retention Period
We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.

Last Updated: 2/20/2025

This Privacy Policy describes how personal information is collected, used, and disclosed when you download and use the CFS Coffee Mobile App (the “App”), and the choices and rights you have to protect your personal information collected via the App.

CFS Coffee (“Merchant”) is responsible for the personal information collected when you use the App. The App uses technology provided by Toast, Inc. (“Toast”). To learn more about Toast’s privacy practices, please visit Toast’s Privacy Statement at https://pos.toasttab.com/privacy.

Personal Information Collected Via the App

The App collects the following categories of personal information.

Contact information. You may submit your name, email, phone number, and address to the App.

• Orders and order history. The App collects and retains the orders you place via the App, including the items you order, date and time of the order, order amounts, delivery locations, tips, order frequency, favorite restaurant locations or menu items, and any preferences or selections you submit with your order.

• Payment information. You may input your payment card information, including your card number, security code, and expiration date, or provide other payment information (such as Apple Pay or Google Pay).

• Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can disable precise location at any time through your device settings.

• Rewards program and gift cards. If you participate in Merchant’s rewards program or any other reward program supported by Merchant or the App, the App collects information about your rewards program status[, including your points balance and redemptions. The App also collects information about any gift cards you receive or send, including the value of the card and balances.

• Device and usage information.

• The App automatically logs information about you, your mobile device, and your interaction over time with the App. This includes: device information, such as your device type, browser type, IP address, device identifiers, language settings, carrier, and general location information; and usage information, such as screens you viewed, how long you spent on a page, browsing history, and access times, and page clicks, page scrolls, and page element interactions.

• Push notification interactions. If you have enabled push notifications from the App, the App also collects information about your interactions with those notifications, including whether a notification was delivered to your device and whether you tapped on it.

• The App also send crash reports in the event of an error for analysis and troubleshooting purposes.

How Your Personal Information is Used

Merchant may use your personal information for the following purposes:

• To provide the App and any features you use. This includes authenticating your access to the App; administering your account; allowing you to place orders and remember your preferences; processing transactions; and providing any features that you use within the App, such as location-enabled features and access to loyalty program benefits.

• To personalize your experience in the App and provide recommendations. This includes personalizing the items you see displayed in the App and recommending restaurant locations and menu items that may interest you based on your past orders and preferences. The App may also send you notifications of locations or items that may interest you. You can control notifications in your device or App settings.

• Troubleshooting and App improvement. Your information may be used to analyze the performance of the App, identify and correct errors, and develop and improve App features and functionality. Your information may also be aggregated with other users’ information, or otherwise anonymized, to create statistics or for other lawful business purposes, including analytics, forecasting, and strategic planning.

Merchant may also use personal information collected through the App for the following purposes:

• To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;

• To send you marketing communications outside the App (including by email, text message or other channels) and to advertise to you and others with similar interests on third-party websites and platforms

• To measure the effectiveness of push notifications and other marketing communications. If you have enabled push notifications, Merchant may analyze whether and when you interact with a push notification (such as by tapping on it) and whether you subsequently placed an order within a defined time period following that interaction. This analysis is used to provide Merchant with aggregate and individual-level reporting on the performance of its marketing communications and to help Merchant understand which communications resonate with its customers; and

• For compliance and protection, including to enforce any Applicable terms and conditions, comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of the App, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

How Your Information Is Shared

Personal information collected via the App may be shared as follows:

• Sharing with Toast. Any information you provide via the App, or that Merchant inputs to the App, may be hosted and stored by Toast on Merchant’s behalf.

• Service providers. The App relies on other service providers that are needed to administer and support the App and its features, including hosting services, communications, data and cyber security services, payment processing services, identity verification, fraud detection, investigation and prevention services, and customer relationship management systems.

• Sharing initiated by Merchant. The App may share information with partners selected by Merchant, such as delivery services and loyalty programs offered by third parties. Merchant may also share information with advertising partners, including via pixels and similar technologies, to allow Merchant to advertise to you and others with similar interests on third-party websites and platforms.

• Authorities and others. Your personal information may be shared with law enforcement, government authorities, and private parties, where required by law or necessary or Appropriate to protect legal rights or the security or integrity of the App.

Your Privacy Choices

Within your App settings, you have the following choices regarding your personal information:

• Access, change your account information. You may access your personal information through your account on the App. You can also correct account information that is out of date or inaccurate.

• Delete your account. To delete your account, follow the instructions within the App settings page.

• Additional rights and choices. To disable third-party advertising pixels and similar technologies, visit the privacy page in your App settings. Merchant may offer additional choices and allow you to exercise any rights accorded to you under Applicable laws. For more information, please contact Merchant directly.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. The App does not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Changes to This Privacy Policy

This Privacy Policy may be modified at any time. You will be notified of any material changes to the Privacy Policy in accordance with Applicable laws.

For any questions about the privacy practices described in this Privacy Policy, please contact CFS Coffee at: paola@cfscoffee.com

California Addendum

This California Addendum supplements the Privacy Policy for CFS Coffee Mobile App and applies only to personal information collected via the App that relates to California residents and is regulated by the California Consumer Privacy Act (“CCPA”).

CCPA Categories of Personal Information

The App collects the following categories of personal information:

• Identifiers, such as name, email address, and IP address.

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Personal information categories listed in the California Customer Records Statute (e.g., name, contact details).

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Protected characteristics under California or federal law

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Commercial information, including but not limited to records of products or services purchased

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Professional or employment-related information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Biometric information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Internet or other electronic network activity information, including but not limited to browsing history and search history

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Geolocation data

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Audio, electronic, visual, thermal, olfactory, or similar information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Education records

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Inferences drawn from information to create a profile about your behavior, preferences, etc.

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement. To measure the effectiveness of push notifications and other marketing communications, including by analyzing notification interactions and subsequent order activity.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

Merchant may also use personal information collected through the App for the following purposes:

• To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;

• For compliance and protection, including to enforce any applicable terms and conditions, comply with legal obligations, defend against legal claims or disputes, protect the security and integrity of the App, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

Additional Disclosures of Personal Information

Merchant may also share personal information with third parties as follows:

• Sharing initiated by Merchant. The App may share information with partners selected by Merchant, such as delivery services and loyalty programs offered by third parties. Merchant may also share personal information with acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business.

• Authorities and others. Your personal information may be shared with law enforcement, government authorities, and private parties, where required by law or necessary or appropriate to protect legal rights or the security or integrity of the App.

Your Privacy Choices

The CCPA grants California residents the following rights:

• Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.

• Access, correction and deletion. You may also have the right to request access to your personal information, to correct personal information that is out of date or inaccurate, or to delete personal information that is no longer needed for a permitted purpose.

Please note that your ability to invoke the rights above are limited pursuant to the scope and limitations of the CCPA, including any available exceptions. For example, an access request can only be made twice within a 12-month period.

Sensitive Personal Information

The App may collect sensitive personal information as follows:

• Dietary and dining preferences. Your dietary and dining preferences may reveal sensitive personal information about you, such as your allergies, accessibility requirements, and religious beliefs. You can submit this information to the App to allow the Merchant to better serve your needs and preferences.

Right to Limit the Use of Sensitive Personal Information

The CCPA grants California residents the right to limit the use of sensitive personal information beyond certain permitted purposes. In general, your sensitive personal information is used only for the limited purposes of providing and personalizing the App for you.

Personal Information Retention

Your personal information is retained for as long as is necessary to allow you to access and use the App and for a reasonable time thereafter for the purposes described in the Privacy Policy. Your personal information will be deleted or destroyed when its continued retention is no longer reasonable necessary and proportionate in accordance with applicable laws.

US State Law Addendum

This US State Law Addendum supplements the Privacy Policy for CFS Coffee Mobile App and applies only to personal information collected via the App that relates to Virginia, Colorado, Connecticut, Texas, Montana, Oregon, and Utah residents and is regulated by applicable consumer privacy laws in such states (“US State Privacy Laws”).

Additional Rights Under US State Privacy Laws

Where applicable, US State Privacy Laws grant consumers the following rights:

• Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.

To make a request, please consult the “Contact Us” section of the Privacy Policy. You may be asked for specific information from you to confirm your identity.

Please note that your ability to invoke the rights above are limited pursuant to the scope and limitations of the US State Privacy Laws, including any available exceptions. If you are not satisfied with how your request was addressed, you may consult the “Contact Us” section of the Privacy Policy to appeal and submit a complaint.

Sensitive Personal Information

The App may collect and use sensitive personal information as follows:

• Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can withdraw your consent at any time by disabling precise location collection within your device settings.

• Dietary and dining preferences. If you choose to submit information about you dietary or dining preferences, you may reveal sensitive personal information about you, such as your allergies, accessibility requirements, and religious beliefs. By providing this information within the App, you consent to Merchant’s use of this information to better serve your needs and preferences. You can withdraw consent at any time by deleting such information within your profile in the App.

Please note that your withdrawal of consent will not affect use of your information before you withdrew your consent.

Personal Information Retention

Candidate and Recruitment Privacy Policy & SMS Terms and Conditions

Last Updated: September 2026

Data Controller: CFS Coffee

Privacy Contact: careers@cfscoffee.com

1. Introduction and Purpose

At CFS Coffee, we value and respect your privacy. This Privacy Policy describes how we collect, use, store, and protect the personal data of candidates who participate in our recruitment processes or who are contacted for future employment opportunities.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and Contact Data: Full name, phone number (used for calls and SMS text messaging), email address, residential address, or professional location.
Professional and Academic Data: Employment history, curriculum vitae (CV), cover letters, academic degrees, certifications, languages, and technical skills.
Public Professional Information: Data obtained from public professional profiles (such as LinkedIn or other employment networks) when we determine your profile aligns with our open positions.
Evaluation Information: Results of interviews, technical assessments, psychometric tests, or competency evaluations conducted during the recruitment process.
References: Information provided by former employers or professional references supplied by you.

3. Purpose of Data Processing

Your personal data will be processed exclusively for the following purposes:

Managing personnel recruitment processes to fill current job vacancies within the company.
Evaluating your suitability, qualifications, and professional experience for the position you applied for or for other similar roles within our organization.
Keeping you informed about the status of your candidacy, coordinating interviews, and sending notifications or updates through direct communications, including phone calls and text message (SMS) notifications sent to your provided mobile number.
Unless you indicate otherwise, retaining your profile in our talent pool for future hiring processes that may match your background.

4. Legal Basis for Processing & SMS Opt-In Compliance

The processing of your data is based on:

Explicit Consent: Granted when the candidate expressly authorizes CFS Coffee to communicate via SMS, whether verbally, in writing, electronically, or through another documented opt-in method.
Pre-contractual Measures: Necessary to evaluate your potential employment integration at your request and to maintain seamless communication.
Legitimate Interest: In the efficient management of our human resources processes and the sourcing of professional talent from public channels.

Important SMS Disclosure: Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates under any circumstances.

5. SMS Terms & Conditions

By providing your mobile phone number and opting in, you agree to receive recruitment-related SMS text messages from CFS Coffee regarding your job application status, interview scheduling, and hiring updates.

Types of Messages: Candidate notifications, interview reminders, process status updates, and recruitment inquiries.
Message Frequency: Frequency varies based on the status and activity of your recruitment process.
Cost: Standard message and data rates may apply depending on your mobile carrier and service plan.
Opt-Out / STOP Instruction: You can cancel the SMS service at any time. Simply text "STOP" to the number from which you received our message. Upon sending "STOP", we will send you an SMS reply to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.
Help / Support / INFO Instruction: If you are experiencing issues with the messaging program, you can reply with the keyword "HELP" for assistance, or contact us directly at careers@cfscoffee.com.

6. Data Retention

Active Candidacies: Your data will be retained for the duration of the recruitment process for which you were considered.
Talent Pool (Future Opportunities): If the recruitment process concludes without your hire but we consider your profile of future interest, we will retain your data for a maximum period of 1 to 2 years, unless you request earlier deletion.

7. Sharing Data with Third Parties

Your personal data is for internal use by the Human Resources team and hiring managers of the relevant departments. We do not sell, rent, or lease your personal data to third parties for commercial purposes.

We may share data solely with technology service providers, human resources management platforms, and communication gateways (such as ATS systems or SMS and messaging delivery tools) that act as data processors under strict confidentiality and security obligations. As noted above, mobile opt-in and consent data are strictly excluded from being shared with any third parties or affiliates.

8. Your Privacy Rights

As a candidate, you have the right at any time to exercise control over your personal information. You may request:

Access: To know what personal data of yours we are processing.
Rectification: To correct inaccurate or incomplete data.
Erasure (Right to be Forgotten): To request the deletion of your data from our database and recruitment processes.
Objection or Restriction: To object to the retention of your data for future vacancies or to revoke your consent to receive SMS communications at any time.

To exercise any of these rights, you may send a message at any time to careers@cfscoffee.com, indicating in the subject line the right you wish to exercise along with your full name.

9. Changes to this Privacy Policy

We may update this policy periodically to adapt it to regulatory or operational changes. Any relevant modifications will be communicated through our standard channels or by updating this document.

Use of Services by Minors
The Services are not directed to individuals under the age of thirteen (13), and we request that these individuals do not provide Personal Information through the Services. If a child under 13 submits Personal Information to us through the Services, and we learn that the Personal Information is the information of a child under 13, we will attempt to delete the information as soon as possible.

If you are a parent of a child under 13 years of age and you believe your child has provided us with Personal Information, please contact us at paola@cfscoffee.com and we will delete the information from our system.

Sensitive Information
We ask that you not send us, and that you not disclose to us, any sensitive Personal Information (e.g., social security numbers, credit card numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background or trade union membership) on or through the Services or otherwise.

Updates to This Privacy Policy
We may change this privacy policy from time to time. The “last updated” legend at the top of this page indicates when this privacy policy was last revised. Any changes to this privacy policy will become effective when we post the revised privacy policy on the Services. Your use of the Services following these changes means that you accept the revised privacy policy.

Last Updated: 2/20/2025

Personal Information Collected Via the App

The App collects the following categories of personal information.

Contact information. You may submit your name, email, phone number, and address to the App.

• Device and usage information.

• The App also send crash reports in the event of an error for analysis and troubleshooting purposes.

How Your Personal Information is Used

Merchant may use your personal information for the following purposes:

Merchant may also use personal information collected through the App for the following purposes:

• To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

How Your Information Is Shared

Personal information collected via the App may be shared as follows:

• Sharing with Toast. Any information you provide via the App, or that Merchant inputs to the App, may be hosted and stored by Toast on Merchant’s behalf.

Your Privacy Choices

Within your App settings, you have the following choices regarding your personal information:

• Access, change your account information. You may access your personal information through your account on the App. You can also correct account information that is out of date or inaccurate.

• Delete your account. To delete your account, follow the instructions within the App settings page.

Changes to This Privacy Policy

This Privacy Policy may be modified at any time. You will be notified of any material changes to the Privacy Policy in accordance with Applicable laws.

For any questions about the privacy practices described in this Privacy Policy, please contact CFS Coffee at: paola@cfscoffee.com

California Addendum

CCPA Categories of Personal Information

The App collects the following categories of personal information:

• Identifiers, such as name, email address, and IP address.

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Personal information categories listed in the California Customer Records Statute (e.g., name, contact details).

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Protected characteristics under California or federal law

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Commercial information, including but not limited to records of products or services purchased

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Professional or employment-related information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Biometric information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Internet or other electronic network activity information, including but not limited to browsing history and search history

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Geolocation data

• Collected: Yes.

• Primary Purposes of Processing: To provide the App and any features you use. To personalize your experience in the App and provide recommendations. Troubleshooting and App improvement.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

• Audio, electronic, visual, thermal, olfactory, or similar information

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Education records

• Collected: No.

• Primary Purposes of Processing: N/A

• Key Disclosures: N/A

• Can You Limit Sharing? N/A

• Inferences drawn from information to create a profile about your behavior, preferences, etc.

• Collected: Yes.

• Key Disclosures: Toast and other service providers.

• Can You Limit Sharing? No.

Merchant may also use personal information collected through the App for the following purposes:

• To analyze users’ selections and preferences in order to improve Merchant’s offerings, identify opportunities for growth, and conduct market research;

These uses outside the App are just examples and may not reflect all the ways Merchant uses personal information outside the App. To learn more, please contact Merchant directly.

Additional Disclosures of Personal Information

Merchant may also share personal information with third parties as follows:

• Sharing initiated by Merchant. The App may share information with partners selected by Merchant, such as delivery services and loyalty programs offered by third parties. Merchant may also share personal information with acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business.

Your Privacy Choices

The CCPA grants California residents the following rights:

• Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.

Sensitive Personal Information

The App may collect sensitive personal information as follows:

Right to Limit the Use of Sensitive Personal Information

Personal Information Retention

US State Law Addendum

Additional Rights Under US State Privacy Laws

Where applicable, US State Privacy Laws grant consumers the following rights:

• Information. You may have the right to obtain information about how your personal information is collected, used, and disclosed. This information is available within this Privacy Policy.

To make a request, please consult the “Contact Us” section of the Privacy Policy. You may be asked for specific information from you to confirm your identity.

Sensitive Personal Information

The App may collect and use sensitive personal information as follows:

• Precise location. If you choose to enable it, the App will collect your precise location information to provide you with certain location-enabled features, such as to display and alert you to restaurants nearby and provide live map views. You can withdraw your consent at any time by disabling precise location collection within your device settings.

Please note that your withdrawal of consent will not affect use of your information before you withdrew your consent.

Personal Information Retention

Candidate and Recruitment Privacy Policy & SMS Terms and Conditions

Last Updated: September 2026

Data Controller: CFS Coffee

Privacy Contact: careers@cfscoffee.com

1. Introduction and Purpose

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and Contact Data: Full name, phone number (used for calls and SMS text messaging), email address, residential address, or professional location.
Professional and Academic Data: Employment history, curriculum vitae (CV), cover letters, academic degrees, certifications, languages, and technical skills.
Public Professional Information: Data obtained from public professional profiles (such as LinkedIn or other employment networks) when we determine your profile aligns with our open positions.
Evaluation Information: Results of interviews, technical assessments, psychometric tests, or competency evaluations conducted during the recruitment process.
References: Information provided by former employers or professional references supplied by you.

3. Purpose of Data Processing

Your personal data will be processed exclusively for the following purposes:

Managing personnel recruitment processes to fill current job vacancies within the company.
Evaluating your suitability, qualifications, and professional experience for the position you applied for or for other similar roles within our organization.
Keeping you informed about the status of your candidacy, coordinating interviews, and sending notifications or updates through direct communications, including phone calls and text message (SMS) notifications sent to your provided mobile number.
Unless you indicate otherwise, retaining your profile in our talent pool for future hiring processes that may match your background.

4. Legal Basis for Processing & SMS Opt-In Compliance

The processing of your data is based on:

Explicit Consent: Granted when the candidate expressly authorizes CFS Coffee to communicate via SMS, whether verbally, in writing, electronically, or through another documented opt-in method.
Pre-contractual Measures: Necessary to evaluate your potential employment integration at your request and to maintain seamless communication.
Legitimate Interest: In the efficient management of our human resources processes and the sourcing of professional talent from public channels.

Important SMS Disclosure: Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates under any circumstances.

5. SMS Terms & Conditions

Types of Messages: Candidate notifications, interview reminders, process status updates, and recruitment inquiries.
Message Frequency: Frequency varies based on the status and activity of your recruitment process.
Cost: Standard message and data rates may apply depending on your mobile carrier and service plan.
Opt-Out / STOP Instruction: You can cancel the SMS service at any time. Simply text "STOP" to the number from which you received our message. Upon sending "STOP", we will send you an SMS reply to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.
Help / Support / INFO Instruction: If you are experiencing issues with the messaging program, you can reply with the keyword "HELP" for assistance, or contact us directly at careers@cfscoffee.com.

6. Data Retention

Active Candidacies: Your data will be retained for the duration of the recruitment process for which you were considered.
Talent Pool (Future Opportunities): If the recruitment process concludes without your hire but we consider your profile of future interest, we will retain your data for a maximum period of 1 to 2 years, unless you request earlier deletion.

7. Sharing Data with Third Parties

8. Your Privacy Rights

As a candidate, you have the right at any time to exercise control over your personal information. You may request:

Access: To know what personal data of yours we are processing.
Rectification: To correct inaccurate or incomplete data.
Erasure (Right to be Forgotten): To request the deletion of your data from our database and recruitment processes.
Objection or Restriction: To object to the retention of your data for future vacancies or to revoke your consent to receive SMS communications at any time.

To exercise any of these rights, you may send a message at any time to careers@cfscoffee.com, indicating in the subject line the right you wish to exercise along with your full name.

9. Changes to this Privacy Policy

We may update this policy periodically to adapt it to regulatory or operational changes. Any relevant modifications will be communicated through our standard channels or by updating this document.

Contacting Us
If you have any questions about this privacy policy, please contact us by email at paola@cfscoffee.com or at the following address:

CFS COFFEE®,

188 Wilshire Blvd,
Casselberry, FL 32707, USA

Because email communications are not always secure, please do not include sensitive information in your emails to us.

Privacy Policy

CFS COFFEE® IS CONCERNED ABOUT PRIVACY ISSUES AND WANTS YOU TO BE FAMILIAR WITH HOW WE COLLECT, USE AND DISCLOSE YOUR INFORMATION.

Name
Postal address (including billing and shipping addresses)
Telephone number
Email address

How We May Collect Personal Information
We and our service providers may collect Personal Information in a variety of ways, including:

Through the Services: We may collect Personal Information through the Services, e.g., when you sign up for a newsletter or make a purchase.
Offline: We may collect Personal Information from you offline, such as when you visit our restaurants, place an order over the phone or contact us.
From other sources: We may receive your Personal Information from other sources, such as public databases; joint marketing partners; social media platforms; from people with whom you are friends or otherwise connected on social media platforms; and from other third parties.

How We May Use Personal Information
We may use your Personal Information:

To respond to your inquiries and fulfill your requests, such as to send you newsletters.
To send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies.
To complete and fulfill your purchase or sign you up for events, for example, to process your payments, have your order delivered to you, communicate with you regarding your purchase or reservation and provide you with related customer service.
To send you marketing communications that we believe may be of interest to you.
To allow you to participate in sweepstakes, contests and similar promotions and to administer these activities. Some of these activities have additional rules, which could contain additional information about how we use and disclose your Personal Information, so we suggest that you read these rules carefully.
For our business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products, enhancing, improving or modifying our Services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

How Personal Information May Be Disclosed

Your Personal Information may be disclosed:

To our third-party service providers who provide services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure provision, customer service, email delivery, auditing and other similar services.
To third-party sponsors of sweepstakes, contests and similar promotions.
To identify you to any guest you register for an event.
By you, on message boards, chat, profile pages and blogs and other services to which you are able to post information and materials. Please note that any information you post or disclose through these Services will become public information and may be available to users of the Services and to the general public. We urge you to be very careful when deciding to disclose your Personal Information, or any other information, on the Services.
To your friends associated with your social media account, to other website users and to your social media account provider, in connection with your social sharing activity, such as if you connect your social media account to your Services account or log into your Services account from your social media account. By connecting your Services account and your social media account you authorize us to share information with your social media account provider and you understand that the use of the information we share will be governed by the social media site’s privacy policy. If you do not want your Personal Information shared with other users or with your social media account provider, please do not connect your social media account with your Services account and do not participate in social sharing on the Services.
To a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
As we believe to be necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.

Other Information

“Other Information” is any information that does not reveal your specific identity or does not directly relate to an individual, such as:

Browser and device information, including device ids, advertising ids, and other persistent identifiers, such as your IP address. Your IP address is a number that is automatically assigned to the computer that you are using by your internet service provider (ISP).
Information collected through cookies, pixel tags and other technologies, such as the actions taken within and outside of the websites and apps and the date and time of your use of the websites and apps
Demographic information such as your gender or city and other information voluntarily provided by yo
Aggregated information.

How We May Collect Other Information
We and our third-party service providers may collect Other Information in a variety of ways, including:

Through your browser or device: certain information is collected by most browsers or automatically through your device, such as your media access control (mac) address, computer type (windows or macintosh), screen resolution, operating system name and version, device manufacturer and model, language, internet browser type and version and the name and version of the Services you are using. We use this information to ensure that the Services function properly.
Using cookies: cookies are pieces of information stored directly on the computer that you are using. Cookies allow us to collect information such as browser type, time spent on the Services, pages visited, language preferences, and other anonymous traffic data. We and our service providers use the information for security purposes, to facilitate navigation, to display information more effectively, and to personalize your experience while using the Services. We can recognize your computer to assist your use of the Services. We also gather statistical information about the usage of the Services in order to continually improve the design and functionality, understand how the Services are used and to assist us with resolving questions regarding the Services. Cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Services. We may also use cookies in online advertising to track responses to our advertisement

Using pixel tags and other similar technologies: pixel tags (also known as web beacons and clear gifs) may be used in connection with some Services to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
IP address: An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels of the Services, helping diagnose server problems, and administering the Services.
Physical location: we may collect the physical location of your device by, for example, using satellite, cell phone tower or wifi signals. We may use your device’s physical location to provide you with personalized location-based Services and content. We may also share your device’s physical location, combined with information about what advertisements you viewed and other information we collect, with our marketing partners to enable them to provide you with more personalized content and to study the effectiveness of advertising campaigns. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you choose to deny such uses and/or sharing, we and/or our marketing partners may not be able to provide you with the applicable personalized Services and content.
From you: information such as your preferred means of communication is collected when you voluntarily provide it. Unless combined with Personal Information, it does not personally identify you.
By aggregating information: aggregated Personal Information does not personally identify you (for example, we may aggregate Personal Information to calculate the percentage of our users who have a particular telephone area code).

How We May Use and Disclose Other Information

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law.

Choices and Access
Your choices regarding our use of your Personal Information:

How you can access, change or suppress your Personal Information:

CFS COFFEE®,

188 Wilshire Blvd,
Casselberry, FL 32707, USA

We do not honor Do Not Track Requests and signals.

Right of Access: This includes the right to obtain from us your Personal Data and whether it is being processed, along with the purposes of the processing; categories of Personal Data concerned; recipients to whom your Personal Data has been disclosed; the period for which your Personal Data is being stored; and the right to lodge a complaint.
Right of Rectification: This includes the right to correct inaccurate Personal Data collected and/or stored by us.
Right of Erasure (“Right to be Forgotten”): This includes the right to have your Personal Data deleted. However, if applicable law requires us to comply with your request to delete information, fulfillment of your request may prevent you from using our services and may result in closing your account.
Right to Restriction of Processing: This includes the right to request restriction of how and why your Personal Data is used or processed by us.
Right to Data Portability: This includes the right to receive your Personal Data in a structure, readable format and the right to have your Personal Data transferred.
Right to Object: This includes the right to object to us processing your Personal Data for reasons such as direct marketing purposes and for scientific or historical research or statistical purposes.
Right to not be Subject to Automated Decision-Making: This includes the right to not be subject to a decision based solely on automated processing, including profiling, that could have a legal, or similarly significant, effect on you from being made solely based on automated processes.

California Users’ Rights
Under the CCPA, California users have the following rights:

Right to Know About Personal Information Collected, Disclosed, or Sold: You have the right to request that CFS Coffee disclose what Personal Information of yours it collects, uses, discloses, and sells over the past 12 months.
Right to Request Deletion of Personal Information: You have the right to request that CFS Coffee delete any of your Personal Information that we collected from you.
Right to Opt-Out of the Sale of Personal Information: CFS Coffee does not sell Personal Information.
Right to Non-Discrimination for Exercising CCPA Rights: CFS Coffee shall not discriminate against California Users for exercising their rights under the CCPA.

Contacting Us
If you have any questions about this privacy policy, please contact us by email at paola@cfscoffee.com or at the following address:

CFS COFFEE®,

188 Wilshire Blvd,
Casselberry, FL 32707, USA

Because email communications are not always secure, please do not include sensitive information in your emails to us.