Privacy Policy

We collect what we need to deliver coffee to you. We also use analytics and advertising measurement tools, but only if you agree to them — nothing loads until you accept, and ordering works exactly the same if you decline. We have never sold anyone's details. If you want your information removed, email us and we will remove it.

When you place an order: your name, email address, phone number, delivery address (street, barangay, city, province, postal code), any notes you add, the location pin you place on the map, what you ordered, the total, your chosen delivery time windows, and which payment method you picked.

When you use a voucher: your email address, so codes limited to one use per customer can be enforced.

When you use the chat: the messages you send, and a random identifier stored in a cookie so the conversation is still there if you reload the page. That identifier is not linked to your name or email unless you give them to us in the chat.

What we do not collect: we do not store card or wallet credentials — QR payments happen entirely inside your own banking app, and we only ever see the receipt you choose to send us.

With your agreement we use Google Analytics 4, Meta Pixel to understand which pages people actually use and to measure whether our ads reach anyone. These tools set their own cookies and can see the pages you visit on this site, your approximate location from your IP address, and your browser and device type.

They are also told when you add a bottle to your cart, when you reach checkout, and when you place an order — which bottles, how many, the amount, any voucher code, and the order number, so the same order is not counted twice. They are never sent your name, email, phone number or address.

Nothing loads until you say yes. The banner appears on your first visit; reject it, or simply ignore it, and none of these scripts are fetched, no cookie of theirs is set and nothing is sent to them. The site and checkout work identically either way — we do not withhold anything from people who say no.

Measurement and advertising are asked separately, so you can allow one and refuse the other — and refusing everything takes a single button, on the banner itself. We do not treat silence as a yes.

Your answer is kept in your own browser under mmc-consent. It never reaches us and identifies nobody. You can change it whenever you like: Cookie settings is in the footer of every page, and withdrawing is as easy as agreeing was.

These companies process what they collect under their own policies, and for advertising they may combine it with what they already know about you. We never send them your name, email, phone number or delivery address.

To take, price, deliver and confirm your order; to send you order confirmations and delivery updates; to answer your questions; to prevent voucher abuse; and to keep ordinary business records of sales.

We do not send marketing email. Every email we send relates to an order you actually placed.

Only the services we need to run the shop. Each one gets the minimum for its job:

• Vercel — hosts the website.
• Neon — hosts the database where orders are stored.
• Lalamove — our delivery partner. Receives your delivery address and map pin so a rider can find you, and to price the delivery.
• OpenStreetMap (Nominatim) — turns the address you type into map coordinates. Receives the address text only.
• Resend and Google (Gmail) — deliver our order emails. Receive your email address and the contents of that email.
• Anthropic — powers the chat assistant. Receives the text of chat messages when the assistant answers them. It is not used to train their models.
• Google Analytics 4, Meta Pixel — analytics and advertising measurement, only where you have allowed that category of cookie. Nothing is sent to them otherwise.
• Meta — separately, if you choose to message our Facebook Page. Anything you send there is handled under Meta's own policy, not this one.

Nobody on this list is permitted to use your details for their own marketing, and we have never sold or rented personal information to anyone.

Nothing is stored when you simply arrive. The full list — every name, what it does and how long it lasts — is in our Cookie Policy. In short, the ones we set ourselves are all functional:

• mmc-chat — keeps your chat conversation attached to your browser. Expires after a year.
• mmc_admin — only ever set for shop staff signing in to the back office. Never set for customers.
• Your cart is kept in your browser's own storage, not on our servers, until you place the order.
• mmc-consent — remembers which cookie categories you allowed, so you are asked once. Stays in your browser.

Order records are kept as long as we need them for business and tax records. Chat conversations are kept so we can follow up on what you asked. Ask us to delete either and we will, except where we are required to keep a record of a completed sale.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you may ask us to show you what we hold about you, correct anything wrong, delete or block it, object to how we use it, or give you a copy in a portable form. You can also complain to the National Privacy Commission.

To exercise any of these, email makemycoffee.cafe@gmail.com. We will respond as quickly as we can, and we will not charge you for it.

Data is transmitted over encrypted connections and the database is not publicly reachable. Access to order details is limited to shop staff. In the chat, looking up an order requires both the order number and the email address it was placed with, precisely so that knowing a number alone reveals nothing.

We are a small shop, not a bank. We have taken sensible precautions, but no website can promise perfect security, and we would rather say so than imply otherwise.

If we change how we handle your information, we will update this page and the date at the top. This policy was last changed on 7 October 2026.