Last updated: July 29, 2026

11th Hour Coffee understands that you care about privacy. We are committed to helping you understand your privacy rights and how we use information about our customers and site visitors. This Privacy Notice describes the types of information we collect, how we may use that information, to whom and under what circumstances we may disclose it, and how we protect it. We also explain how to contact us with questions about our privacy practices.

This Privacy Notice applies to information we collect on this website (11thhourcoffee.com), our mobile site, and our social media accounts (collectively, the "Sites"), as well as any personal information obtained when you call, email, visit our cafe locations in Santa Cruz, or otherwise communicate or interact with 11th Hour Coffee.

BY ACCESSING THE SITES ON ANY DEVICE, MAKING A PURCHASE FROM 11TH HOUR COFFEE, OR OTHERWISE INTERACTING WITH US, YOU AGREE TO THE TERMS OF THIS PRIVACY NOTICE. If you do not agree to this policy, please do not use the Sites.

WE SUGGEST YOU REVIEW THIS PRIVACY NOTICE PERIODICALLY, AS IT MAY BE UPDATED FROM TIME TO TIME. WE WILL POST THE CURRENT VERSION ON THE SITES.

1. Information we collect and how we use it

Below we explain what categories of personal information we have collected over the prior 12-month period, where we got it from, and with whom we have shared it.

Contact Information

Includes: Name, billing/shipping address, email address, phone number.

Source: Provided by you (optional, but some features may be limited without it).

Purpose: Communication, order fulfillment, promotional materials, account management, and customer service.

Recipients: Trusted service providers that help us operate our business.

Purchase and Order Information

Includes: Contact information, purchase details, delivery and payment information, and order communications.

Source: Provided by you.

Purpose: Order processing, shipping, returns, feedback collection, and personalized offers.

Recipients: Shopify and other fulfillment service providers.

Subscription Information

Includes: Subscription type, grind preference, frequency, shipment history, and skip/pause activity.

Source: Provided by you through the subscription sign-up and management portal.

Purpose: Managing your coffee subscription, communicating about upcoming shipments, and personalizing the subscription experience.

Recipients: Recharge (our subscription platform), ShipStation (our fulfillment provider), and Klaviyo (our email and SMS platform).

Payment Information

Includes: Cardholder name, card type, card number, expiration date, CVV, and billing address.

Source: From you and your card issuer.

Purpose: Payment verification and processing.

Recipients: Shopify and payment processors. All parties are bound by applicable legal and security standards including PCI-DSS.

Gift and Third-Party Recipient Information

Includes: Name, phone, email, and shipping address of gift recipients.

Source: Provided by you.

Purpose: Delivering gifts or communications on your behalf.

Recipients: ShipStation and other fulfillment service providers.

Social Media Information

Includes: Usage data, likes, comments, and other information made available through social media platforms.

Source: Social media platforms, based on your privacy settings on those platforms.

Purpose: Personalizing your experience and marketing.

Recipients: Service providers that help us manage social media and marketing.

Legal and Fraud Information

Includes: Fraud flags, payment issues, complaints, claims, and suspected criminal activity.

Source: You, law enforcement, fraud prevention agencies, and our legal advisors.

Purpose: Fraud prevention, legal compliance, and protection of our business and customers.

Recipients: Fraud protection services and law enforcement where required by law.

Preference Information

Includes: Marketing preferences, account settings, roast preferences, brew method preferences, and site interaction data.

Source: You, browser and device interactions, cookies, and survey and feedback responses.

Purpose: Personalizing your coffee recommendations, subscription experience, and marketing communications.

Recipients: Analytics and marketing service providers.

Communications

Includes: Customer service emails, chat messages, and feedback and check-in replies.

Source: From you.

Purpose: Customer support, feedback collection, and improving our service.

Recipients: Customer service technology providers, including Gorgias (our helpdesk platform).

In-Store Security

Includes: Security camera footage at cafe locations (if applicable). [PLACEHOLDER — confirm with Joel/Braydon before publishing.]

Source: Security camera systems.

Purpose: Safety, security, and incident investigation.

Recipients: Fraud protection services and law enforcement where required.

Device and Usage Information

Includes: IP address, browser type, device type, general geographic location, page views, clicks, and session duration.

Source: Your device and browser interactions with the Sites.

Purpose: Site functionality, analytics, and fraud prevention.

Recipients: Analytics providers (see Section 3 below).

When we collect certain personal information — such as your account login credentials, payment card information, or precise geolocation data — we are deemed to be collecting "sensitive" personal information under certain state privacy laws. 11th Hour Coffee does not use or disclose sensitive personal information for any purposes other than those described above and those permitted by applicable law.

2. Combined Information

We may combine information we collect about you with information we receive from other sources, such as your activity on our Sites or social media platforms, in order to provide a more personalized experience and improve our communications.

3. Social Media and User-Generated Content

Our website allows you to submit product reviews. Please use this feature responsibly. We monitor reviews to ensure only appropriate content is shared through our Sites. Please review our Terms and Conditions for additional information about your responsibilities when posting reviews.

We also maintain a presence on social media platforms. When you interact with us through social media — entering contests, sharing content, or using our social media integrations — we may receive information such as your user ID, profile picture, and similar information, depending on your privacy settings at those platforms. Your use of social media sites is primarily governed by the site operators' own privacy policies and terms of service.

4. Automated Collection and Use of Information

We receive or collect some information automatically when you visit our Sites or engage with other online content we provide. For example, we receive the IP address of the device you use to access our Sites, which may indicate your general geographic location. We also collect information using the following technologies:

Cookies

A cookie is a file saved to your computer or device that may be used to recognize returning visitors, maintain shopping cart state, collect usage information, remember preferences, and provide customized versions of our Sites. We use this information to evaluate web traffic, enhance communications, understand the effectiveness of our promotional campaigns, and improve our website and services. For more information on your choices regarding cookies, see "Your Choices" in Section 5 below.

Other Tracking Tools

Our Sites may use web beacons, pixels, JavaScript, or other electronic markers that help us and our partners understand how you interact with the Sites. We use this information to understand activity patterns, improve features, and customize how we present content — including advertising.

Microsoft Clarity

We use Microsoft Clarity to better understand how visitors use our Sites. Clarity uses cookies and similar technologies to collect data on user behavior, including session recordings, heatmaps, and interaction data. This helps us identify friction points and improve the experience. Information collected may include your device's IP address (processed and stored in a de-identified form), device screen size, browser information, and general geographic location. Microsoft Clarity is contractually restricted in how it may use data collected on our behalf. For more information, visit the Microsoft Privacy Statement at https://privacy.microsoft.com.

Google Analytics

We use Google Analytics to monitor activity and performance on our Sites. Google Analytics helps us understand how users engage with our Sites. Our Sites may automatically share certain information with Google in connection with these tools. For more information, please review "How Google uses data when you use our partners' sites or apps" at http://www.google.com/policies/privacy/partners. You may opt out using the Google Analytics Opt-out Browser Add-on.

Shopify

We use Shopify Inc. to power our online store. When you visit and place an order on our website, certain personal information (such as your name, billing and shipping address, payment information, email address, and phone number) may be shared with Shopify to process and fulfill your purchase. Shopify stores your data on a secure server behind a firewall and complies with applicable data protection regulations, including PCI-DSS. Shopify may collect, use, and process your information according to its own privacy policy, available at https://www.shopify.com/legal/privacy. You can directly control how Shopify uses your data through the Shopify privacy portal at https://privacy.shopify.com/en.

In providing its Network Intelligence services, Shopify may also share your information with other third parties in order to provide services to them. You may opt out of having your 11th Hour purchase information shared with Shopify for use in its Network Intelligence services by visiting: [YOUR PRIVACY CHOICES PAGE URL].

Interest-Based Advertising

11th Hour Coffee may in the future provide interest-based advertising about our products and services on other parties' websites. We may use third-party advertising companies that use tracking technologies to serve advertisements across the internet. These companies may collect information about your visits to the Sites and other websites and your interaction with our advertising and communications. When we run interest-based advertising, these ads may be personalized based on information collected about your visits to the Sites and elsewhere over time.

For more information about advertising and your choices concerning tracking tools and interest-based ads, visit http://www.networkadvertising.org/choices/ or http://www.aboutads.info/choices.

5. Your Choices and Your Privacy Rights

We offer you certain choices about the information we collect, how we use and share it, and how we communicate with you. To help protect your privacy, when you exercise these choices we may take reasonable steps to verify your identity.

Opt-Out Choices

If you do not wish to receive promotional communications from us, you can opt out by following the unsubscribe instructions in the messages you receive. Even if you opt out of promotional messages, we reserve the right to send you service-related communications such as order confirmations, shipping notifications, and subscription management emails.

You also have the following specific opt-out choices:

Cookies. Most browsers allow you to stop accepting new cookies, be notified when you receive a new cookie, and disable existing cookies. However, rejecting cookies may affect your experience and limit access to certain features of our Sites. Because we do not own or control browser tools, we cannot guarantee their effectiveness.

Opt-Out Preference Signals. We are working toward enabling Global Privacy Control (GPC) as an additional way to submit a request to opt out of the sale or sharing of your personal information through browsers and browser extensions that support such a signal. Until then, you can opt out of third-party cookies for personalized advertising through your cookie preferences on our website.

Mobile Devices. When you use our website on a mobile device, you may choose not to share your location with us by adjusting your device's location services settings. For instructions, please contact your plan provider or device manufacturer.

Google Analytics. To learn how Google Analytics collects and processes data, please visit http://www.google.com/policies/privacy/partners. You may opt out by using the Google Analytics Opt-out Browser Add-on.

6. Access, Correction, and Deletion

We respect your right to access, correct, and delete your personal information. You may access your personal information by signing into your account on our website. From there, you can update or correct your information directly.

You may also contact us to request that we delete or restrict access to your personal data. We may need to retain certain information for legally permitted purposes and will explain this to you if necessary. To request access, correction, or deletion, please contact us using the information in Section 10 below.

7. Your Privacy Choices

Depending on where you live, you may have the following rights with respect to your personal information under applicable state privacy law, including the California Consumer Privacy Act (CCPA):

• The right to request that we do not sell or share your personal information, and the right to opt out of the processing of your personal information for purposes of targeted advertising or profiling that produces legal or similarly significant effects. See: Do Not Sell or Share My Personal Information.
• The right to limit the use of your sensitive personal information.
• The right to correct inaccuracies in your personal information.
• The right to know what personal information we have collected, used, disclosed, and sold about you, including a request for a portable copy of that information.
• The right to request deletion of any personal information we have collected about you.

To submit a request to know, correct, or delete, please contact us at support@11thhourcoffee.com or by postal mail at the address listed in Section 10 below.

If you reside in California, you have the right to designate an authorized agent to make a request on your behalf. We may ask the authorized agent to provide proof of your permission and, in certain circumstances, may ask you to verify your identity or confirm the agent's authorization directly with us.

When you submit a privacy rights request, we will verify your identity by asking for information about your relationship with 11th Hour Coffee, such as the email address on file, a recent order number, or similar identifying information. We may also use a third-party verification provider. We will endeavor to honor all requests unless doing so conflicts with a lawful exemption under applicable law.

Your exercise of these rights will have no adverse effect on the price or quality of our goods or services.

8. Retention of Personal Information

We retain personal information where we have an ongoing legitimate business or legal need to do so. Our retention periods vary depending on the type of data, but we generally refer to the following criteria:

• Whether we have a legal or contractual need to retain the data.
• Whether the data is necessary to provide our products, services, or subscription program.
• Whether you have the ability to access and delete the data within your account.
• Whether you would reasonably expect us to retain the data until you remove it or close your account.

When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, because your information has been stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

9. Additional Disclosures

Children's Privacy

The 11th Hour Coffee Sites are not directed at children under the age of 13, and we do not knowingly solicit or collect personal information from children under 13 without prior verifiable parental consent. If we learn that a child under 13 has submitted personal information without parental consent, we will take all reasonable measures to delete such information from our systems and refrain from using it for any purpose (except as required to protect the safety of the child or others, as permitted by law). If you become aware of any personal information we have collected from a child under 13, please contact us at support@11thhourcoffee.com.

If you are a minor and have a registered account with us, you have the right to request removal of unwanted information that you have publicly posted on our Sites. To request removal, contact us at the address below. We will ensure that the information is no longer publicly available on our Sites, though it may not be completely removed from all of our systems.

11th Hour Coffee does not have actual knowledge of selling or sharing personal information of consumers under the age of 16.

Visitors from Outside the United States

The Sites are operated in the United States. If you are visiting from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries in accordance with this Privacy Notice. The data protection laws of the United States may not be as comprehensive as those in your country. By using the Sites and providing personal information to us, you consent to the transfer of your information to our facilities as described in this Privacy Notice.

Right to Appeal or Lodge a Complaint

We welcome your questions and concerns. Depending on where you live, you may have the right to appeal our decision regarding your privacy rights. To appeal any decision or raise a concern, please contact us as described in Section 10 below.

To the extent you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority in the country where you reside and/or in the United States. For more information, see https://www.ftc.gov/faq/consumer-protection/submit-consumer-complaint-ftc.

Do Not Track Disclosure

Do Not Track (DNT) is a privacy preference that users can set in some web browsers, allowing users to opt out of tracking by websites and online services. At this time, the World Wide Web Consortium (W3C) has not established universal standards for recognizable DNT signals. As a result, 11th Hour Coffee does not currently recognize DNT signals. For more information about your tracking choices, see Section 5 above.

Information Security

We take appropriate administrative, physical, and technical safeguards designed to protect your personal information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. Your 11th Hour Coffee account is protected by your login credentials, which you must keep secure and confidential. We use the HTTPS protocol in areas of the site where you are asked to submit information.

We endeavor to maintain accurate information and provide you with options to update it. You can log into your account and modify your information using your credentials. You may also request updates by contacting us as described below.

Links to Other Sites

We may provide links to other websites for your convenience and information. Because these sites are not owned, controlled, or operated by 11th Hour Coffee, we cannot control how information collected by those sites is used, shared, or secured. If you visit linked sites, we strongly suggest you review the privacy notices posted at those sites. We are not responsible for the content of linked sites, your use of them, or the information practices of their operators.

10. Contact Us

If you have any questions or concerns regarding this Privacy Notice or how we collect and use your personal information, you can contact us:

Email: support@11thhourcoffee.com

Phone: (831) 322-4599

By mail: 11th Hour Coffee · 1001 Center Street, Suite 1, Santa Cruz, CA 95060 · ATTN: Privacy Request

If we need to contact you in connection with your personal information, we may do so by email, telephone, or mail.

11. Updates to This Privacy Notice

As we modify our information collection or privacy practices, and as privacy laws evolve, it may be necessary to revise or update this Notice. We will always keep the current version posted on the Sites and will update the effective date to reflect when it was last revised. If we change the policy in a material and retroactive manner, we will provide appropriate notice. We will continue to protect your personal information in accordance with applicable law and as described in our current Privacy Notice.