ST.ROAST
Privacy Policy.
How St. Roast collects, uses and protects your personal data.
Who we are
St. Roast is a small coffee roastery in Ponorogo, East Java, Indonesia. This policy explains what personal data we collect through stroastt.com, why, and what you can do about it. Questions: steventirto@stroastt.com or WhatsApp +62 811-3677-979.
What we collect
Details you give us: name, email, phone number, delivery address, and what you order or book (orders, subscriptions, events, brewing experience seats, wholesale requests). If you create an account we also keep your encrypted password. If you sign up for our newsletter, we keep your email address. We also record simple usage information such as which pages and products are viewed.
Why we use it
To process and deliver your order, confirm payment, answer your questions, send order and shipping emails, run subscriptions and events, prevent fraud, keep the shop secure, and improve our products. We send marketing email only to people who signed up for it and confirmed their email; every message has an unsubscribe link.
Reminder emails
If you are logged in and leave items in your cart, we may send you one reminder email about it. Placing the order stops it.
Who we share it with
Only what is needed: couriers (name, phone, address) to deliver your parcel; our payment provider for QRIS payments; a shipping-rate service to calculate delivery cost; our image hosting for product photos; our email provider to send emails; and, if switched on, a website analytics tool. Our team also receives internal notifications about new orders. We do not sell your personal data.
How long we keep it
Order and payment records are kept as long as needed for accounting and legal reasons. Other data is kept while your account is active or while we need it for the purpose above, then deleted or anonymised. Abandoned-cart records are deleted after 14 days.
Security
Passwords are stored in hashed form and we cannot read them. The website uses HTTPS, login attempts are limited, and administrator accounts can be protected with a second step. No system is perfectly secure, so please keep your password private and use a unique one.
Cookies
We use a session cookie to keep you logged in and to remember your cart. It is needed for the shop to work. If website analytics is switched on, it may set its own cookies to count visits; we do not use it to follow you across other websites.
Your rights
You can ask us to see, correct or delete the personal data we hold about you, or to stop marketing emails, at any time. Contact us on WhatsApp +62 811-3677-979 or steventirto@stroastt.com. Some order records must be kept for accounting, and we may need to confirm your identity first.
Children
Our website is meant for adults. If you are under 18, please ask a parent or guardian to order for you.
Other websites
Links to Instagram, TikTok, WhatsApp or Google Maps lead to services with their own privacy policies, which we do not control.
Changes
We may update this policy. The latest version is always on this page.
Questions? WhatsApp +62 811-3677-979 · steventirto@stroastt.com
About · Privacy · Terms · Shipping & Returns · FAQ