Personal data protection

Effective date: 25 May 2018

Last updated: 23 June 2025

Tintico ("we", "our" or "Tintico") operates tintico.coffee and related services (online store, customer account, coffee subscriptions, customer support).

This policy describes how we collect, use, retain and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

By using our website or services, you acknowledge that you have read this policy. For any questions about your data, contact us via our contact form.

1. When do we collect your personal data?

We collect your personal data when you interact with Tintico, including in the following situations:

Browsing tintico.coffee (cookies and trackers, subject to your consent where required by law);
Creating or using a customer account;
Placing a one-off order or subscribing to a coffee subscription;
Managing your deliveries, payments and returns;
Contacting us via our forms (contact, customer support, press, partnerships);
Taking part in marketing activities or newsletters, if you consent;
Exercising your rights regarding your personal data.

2. What personal data do we collect?

Depending on how you use our services, we may process the following categories of data:

Identification and contact data

First name, last name, email address, phone number;
Delivery and billing addresses.

Account and order data

Login credentials, order and subscription history;
Products purchased, subscription frequency, delivery preferences;
Exchanges with our customer support team.

Payment data

Information required to process payment (via our providers Stripe, PayPal or other methods offered). Tintico does not store your full bank card details.

Technical and browsing data

IP address, browser type, pages viewed, visit duration;
Session identifiers, cart and cookies (see section 10).

3. Do we collect data about minors?

Our services are intended for adults. We do not knowingly collect personal data about children under 16.

If you believe a minor has provided us with data, contact us via our contact form so we can delete it promptly.

4. When do we use your personal data?

We use your personal data for the following purposes, on the legal bases indicated:

Fulfilling your orders and subscriptions, managing deliveries and after-sales service (contract performance);
Creating and managing your customer account (contract performance);
Processing payments and preventing fraud (contract performance, legitimate interest);
Communicating about your orders, subscriptions or support requests (contract performance);
Improving our website, products and user experience (legitimate interest, consent for non-essential cookies);
Audience measurement and statistics via Google Analytics, if you consent (consent);
Sending Tintico offers or news, if you have consented (consent);
Complying with our legal and regulatory obligations (legal obligation).

5. When do we share your data with third parties?

Tintico does not sell your personal data. We may share it with recipients strictly necessary to provide our services:

Payment providers (Stripe, PayPal);
Carriers and logistics partners (including Colissimo / Sendcloud);
Website hosting and technical providers;
Audience analytics tools (Google Analytics), if you consent;
Administrative or judicial authorities when required by law.

These third parties act as processors or, where applicable, as separate controllers, in compliance with the GDPR and data protection agreements.

6. How long do we keep your personal data?

We retain your personal data only for as long as necessary for the purposes for which it was collected, including:

Account and order data: for the duration of the commercial relationship, then archived as required by law (accounting, disputes);
Subscription data: for the entire subscription period and until the file is definitively closed;
Contact and support data: for as long as needed to handle your request;
Cookies and trackers: depending on their purpose, from session duration up to 13 months maximum for consent-based cookies;
Marketing data: until you withdraw consent or unsubscribe.

7. Where do we store your personal data?

Your data is mainly hosted within the European Union or in countries recognised as providing an adequate level of protection.

When transfers outside the EU are necessary (for example via certain cloud or payment providers), we implement appropriate safeguards under the GDPR (standard contractual clauses, adequacy decisions or supplementary measures).

8. What are your rights?

Under the GDPR, you have the following rights regarding your personal data:

Right of access and rectification;
Right to erasure ("right to be forgotten") within the limits provided by law;
Right to restriction of processing;
Right to object, including to processing for direct marketing;
Right to data portability for data you have provided to us;
Right to withdraw consent at any time, without affecting the lawfulness of prior processing;
Right to define post-mortem instructions regarding your data (France).

To exercise your rights, send your request via our contact form stating the subject of your request and, if necessary, a copy of proof of identity. You may also lodge a complaint with your local supervisory authority.

9. What are your choices?

You can manage your cookie and communication preferences at any time:

For marketing emails, use the unsubscribe link in each message or contact us directly.

See our cookie policy and privacy policy. You can change your choices at any time via in the footer or on your next visit.

10. Cookies and trackers used on tintico.coffee

When you visit tintico.coffee, cookies or trackers may be placed on your device. Some are strictly necessary for the website to function; others require your prior consent.

Your choices are stored in the _tintico_cookie_consent cookie for up to 12 months.

Strictly necessary cookies (always active)

Session and authentication (_medusa_jwt, cart and cache identifiers): enable account login, cart retention and proper site operation;
Security and load balancing: ensure stable and secure browsing.

Functionality cookies (on consent)

Remembering your preferences (language, region, display) to personalise your experience.

Performance / analytics cookies (on consent)

Google Analytics (GA4): audience measurement, pages viewed, site performance. These cookies are only placed if you accept them via our consent banner.

Marketing cookies (on consent)

Cookies that may offer more relevant content or advertising on Tintico or other sites, only if you consent.

You can reject all non-essential cookies, customise your choices by category or accept all via the banner shown on your first visit. Your browser also lets you block or delete cookies; some site features may then be limited.

11. Can this policy be updated?

We may update this policy to reflect changes in our practices, services or legal requirements.

The last updated date appears at the top of this page. We encourage you to review it regularly. In case of material changes, we may inform you via a notice on the site or by email where required by law.

12. Data controller and contact

The data controller for your personal data is Tintico, operator of tintico.coffee.

For any questions about this policy or to exercise your rights, use our contact form or customer support.

Personal data protection policy