Privacy policy
Last updated: 10 September 2026
This policy explains what personal data we collect when you use coffeemarketingpro.com, buy from us or write to us, why we collect it, who helps us handle it and what you can do about it. We have written it to be read, not to be skimmed past.
Who is responsible for your data
The data controller is Matteo Borea, a self-employed professional established in Spain, trading as Coffee Marketing Pro.
NIF: Z0145324S
Calle Italia, 25, 35006 Las Palmas de Gran Canaria, Las Palmas, Spain
Email: info@coffeemarketingpro.com
We have not appointed a data protection officer, because the law does not require one for an activity of this size. For anything about your data, write to the address above.
What we collect, why, and on what legal basis
When you buy
Your name, email address, billing address and country, what you ordered and what you paid. The checkout also records technical data such as your IP address and device, which is used to prevent fraud. Your payment is processed by Shopify Payments: we never see or store your full card details.
We use this data to take and fulfil your order, send you the files or organise the service you bought, issue the invoice, handle any refund and answer you about your order. The legal basis is the contract between us and, for invoices and accounting records, our legal obligations under Spanish tax and commercial law. The data marked as required at checkout is necessary to complete a purchase.
After a purchase you receive the messages the order needs (confirmation, delivery, updates to the file you bought) and one thank-you message from the founder. You do not receive marketing emails unless you have asked for them.
When you ask for the free file or subscribe to the newsletter
Your email address, the form you used and the date. If you ask for the free file, we send you the file and then a short series of emails on how to use it, one of which presents our paid framework. If you subscribe to the newsletter, we send you one email a week. The legal basis is your consent, which you can withdraw at any time with the unsubscribe link at the bottom of every email, or by writing to us. We keep your address for as long as you stay subscribed; after you unsubscribe we keep it only in the list of addresses we must not write to again.
When you book a call
Your name, email address, the time you choose and anything you tell us about your business. We use it to organise and hold the call, and the legal basis is the steps you ask us to take before a possible contract. If you become a customer, the rules of the section above apply; otherwise we keep this data only as long as we need it to follow up on the call.
When you write to us
Your email address and the content of your message. We use it to answer you, on the basis of our legitimate interest in replying to whoever contacts us, or of the steps you ask us to take before a contract.
We may use artificial intelligence tools to help us prepare replies. A person reads and approves every reply before it is sent. The provider we use, Anthropic (Claude), processes your message on our behalf and, under its commercial terms, does not use it to train its models. How we use AI in general is explained on the page AI transparency.
When we work for you
For services such as the Implementation Call or the management of an online store, we use the data needed to deliver the service we agreed on. The legal basis is the contract.
When you browse the website
Every visit involves technical data such as your IP address, browser and device, which the platform needs to show you the pages and keep the site secure. This is based on our legitimate interest in running a working, secure website.
Only if you accept them in the cookie banner, we also use:
- the statistics of the Shopify platform, to understand how the site is used;
- the Meta pixel, to measure the results of our advertising on Facebook and Instagram. For the collection and transmission of this data, Meta and we are joint controllers; Meta's own processing is governed by its privacy policy;
- our own reading measurement: how far down a page you scroll, how long you stay, what you click, which website and which campaign brought you here. It does not use cookies and does not record your IP address.
The legal basis is your consent, which you can change at any time. Details, names and durations are in our Cookie policy.
How long we keep it
We keep personal data only for as long as the purpose requires, as described in each section above. Invoices and the accounting records connected to them are kept for six years, as required by Article 30 of the Spanish Commercial Code.
Who helps us handle your data
We do not sell your data. We share it only with the providers who help us run the business, each bound by a contract to process it on our instructions:
- Shopify (Shopify International Limited, Ireland): the platform that runs the store, the checkout and Shopify Payments;
- ActiveCampaign: the service we use to send emails;
- Google: the calendar used to book calls;
- Meta: advertising measurement, only with your consent;
- Anthropic: artificial intelligence tools that help us prepare replies;
- Hostinger: the provider of our server in Germany, which receives the forms of this website and our reading measurement;
- our accountant, for tax and accounting obligations;
- public authorities, when the law requires it.
Transfers outside the European Economic Area
Some of these providers are based in, or use services located in, countries outside the European Economic Area, such as Canada and the United States. When data leaves the European Economic Area, the transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for companies certified under it, or the decision on Canada) or on the Standard Contractual Clauses approved by the Commission.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use or receive it in a portable format, and you can object to its use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time, without affecting what was done before. We do not make decisions about you based solely on automated processing.
To exercise these rights, write to info@coffeemarketingpro.com. We will answer within one month. If you think we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority of the country where you live; in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it).
Minors
Our products and services are meant for businesses and are not directed at minors.
Security
We protect your data with the technical and organisational measures of our providers and our own: restricted access, encrypted connections, and credentials kept separate from the rest of our systems. No system is perfectly secure, and if a breach ever affected your data we would tell you as the law requires.
Changes to this policy
If we change this policy, we publish the new version here with its date. If the change is important, we tell you by email when we can.