Privacy & Policy

This Privacy Policy describes how Crack Inc. Coffee Roasters ("we", "us", or "our") collects, uses, and shares information about you when you visit our website at crackinc.coffee, make a purchase, or interact with us. By using our site, you agree to this policy.

Information We Collect

We collect information you provide directly to us, information collected automatically, and information from third-party sources.

Account & Order Info: When you create an account or place an order, we collect your name, email address, billing and shipping address, phone number, and payment information (processed securely via Shopify Payments — we do not store full card details).
Communications: If you contact us via email, live chat, or social media, we collect the content of your messages and your contact details.
Newsletter Subscription: If you subscribe to our mailing list, we collect your email address.
Automatically Collected: When you browse our site, we automatically collect device type, browser type, IP address, referring URLs, pages visited, and time spent on pages.
Cookies: We use cookies and similar tracking technologies. See Section 4 for details.

How We Use Your Information

We use the information we collect to:

Process and fulfil your orders, including sending confirmation and shipping notifications
Manage your account and provide customer support
Send you marketing communications (only if you have opted in)
Improve our website, products, and services
Detect and prevent fraud and comply with legal obligations
Personalise your shopping experience
Conduct analytics to understand how our site is used

Sharing Your Information

We do not sell your personal data. We may share your information with:

Service Providers: Shopify (e-commerce platform), payment processors, shipping couriers (e.g. Pos Malaysia, J&T, DHL), and email marketing platforms — only as necessary to provide our services.
Legal Compliance: We may disclose information when required by law, regulation, or legal process, or to protect the rights and safety of Crack Inc. Coffee Roasters or others.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our site.

All third-party service providers are contractually required to handle your data securely and in accordance with applicable laws.

Cookies & Tracking Technologies

We use cookies to enhance your experience on our website. Cookies are small text files stored on your device. We use:

Essential Cookies: Required for the site to function — e.g. keeping items in your cart and maintaining your login session.
Analytics Cookies: Help us understand site traffic and user behaviour (e.g. Google Analytics).
Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (e.g. Facebook Pixel).

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. You may also opt out of analytics tracking via the Google Analytics Opt-out Browser Add-on.

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

Order records are retained for a minimum of 7 years for accounting and tax compliance purposes.
Account information is retained for as long as your account is active, or as needed to provide services.
Marketing data is retained until you unsubscribe or request deletion.

Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data, subject to legal retention requirements.
Opt-Out: Unsubscribe from marketing emails at any time using the "Unsubscribe" link in our emails.
Portability: Request your data in a structured, machine-readable format.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 11.

Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our website uses SSL/TLS encryption (HTTPS), and payment information is processed through Shopify's PCI-compliant infrastructure.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Third-Party Links

Our website may contain links to third-party websites (e.g. social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page and may notify you via email or a notice on our website.

Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

Main menu