Legal
Privacy Policy
Plain language, no legalese we can avoid: here's exactly what we collect, why, and the rights you have over it.
Last updated: August 6, 2026
On This Page
Business Details
Volcano Spirit Cacao is operated by [Legal Business Name], registered at [Registered Business Address], [Country of Registration] (company/tax ID: [Registration Number]). Contact: hello@atitlanspiritcacao.com.
1. Who we are
This Privacy Policy explains how Volcano Spirit Cacao ("we", "us", "our") collects, uses, and protects personal data when you visit volcanospiritcacao.com (the "Site"), place an order, sign up for our newsletter, or otherwise get in touch with us. It applies wherever you're visiting from, and pays particular attention to the rights granted under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), since we welcome customers from both regions.
2. Data we collect
| Category | Examples | When it's collected |
|---|---|---|
| Contact details | Name, email address, phone number, mailing address | Checkout, contact form, newsletter signup |
| Order information | Products ordered, quantities, order notes | Checkout |
| Communications | Emails, Instagram DMs, form messages you send us | Whenever you contact us |
| Technical & usage data | IP address, browser type, pages visited, approximate location | Automatically, via cookies/analytics you've consented to (see our Cookie Policy) |
We do not collect or store payment card details on this Site. Checkout collects your shipping and contact information only; payment is arranged separately and directly with you once your order is confirmed.
3. How we use it
- To process and fulfil orders, including arranging shipping and payment
- To respond to questions, ceremony requests, and wholesale enquiries
- To send our newsletter, if and only if you've opted in, you can unsubscribe at any time via the link in every email
- To keep the Site secure and working properly
- To understand, in aggregate, which content resonates, only using analytics cookies you've consented to
- To comply with tax, accounting, and other legal obligations
4. Our legal basis for processing (GDPR)
- Contract, processing your order, shipping address, and contact details to fulfil a purchase
- Consent, sending marketing emails, and setting analytics/marketing cookies
- Legitimate interest, keeping the Site secure, preventing fraud, and improving what we offer
- Legal obligation, retaining invoices and order records for tax and accounting purposes
5. Cookies & tracking
We use a small number of strictly necessary cookies (e.g. to remember what's in your bag and your cookie preferences) and, only with your consent, analytics and marketing cookies. You choose which categories to allow via the cookie banner on your first visit, and can change your mind anytime using "Cookie Preferences" in the footer. Full details, including every cookie we currently set, are in our Cookie Policy.
6. Who we share data with
We don't sell your personal data. We share it only with service providers who help us run the Site and fulfil orders, under their own privacy and security obligations:
- Form processing, Formspree, Inc., to receive checkout, contact, and newsletter submissions by email
- Web hosting, our hosting/CDN provider, to serve the Site to your browser
- Shipping, the courier or postal service used to deliver your order, given only the details needed to ship it
- Government authorities, where required by law, such as tax reporting or a valid legal request
7. International data transfers
We are based in Guatemala and may use service providers based in other countries, including the United States and the European Union. Where we transfer personal data internationally, we rely on the service providers' own compliance mechanisms (such as Standard Contractual Clauses, where applicable) to protect it.
8. How long we keep data
We keep order and invoice records for as long as required by applicable tax and accounting law (typically several years). Newsletter contact details are kept until you unsubscribe. Contact form messages are kept only as long as needed to resolve your enquiry, unless a longer period is required to meet a legal obligation.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Request a portable copy of your data
- Withdraw consent at any time (this won't affect processing before you withdrew it)
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email us at hello@atitlanspiritcacao.com. We'll respond within the timeframe required by applicable law.
10. Children's privacy
This Site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we'll delete it.
11. Security
We use reasonable technical and organizational measures to protect your data, including encrypted (HTTPS) connections to the Site. No method of transmission or storage is 100% secure, but we work to keep your information safe and to only collect what we actually need.
12. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page. We encourage you to review it periodically.
13. Contact us
Questions about this policy or your data? Email hello@atitlanspiritcacao.com.