Privacy policy
Last updated: Jul 09, 2026
Wandering Bear Coffee (“Wandering Bear”, “we”, “us” and “our”) operates https://wanderingbearcoffee.com/ (“Website”), to provide you, the customer, with a curated online shopping experience. In this Policy, the “Services” mean the Website and the related features and services we provide in connection with selling our products, including processing orders and payments, shipping and delivery, returns and exchanges, account features, customer support, and communications with you—whether you purchase directly from us or through our third-party retail partners. The Website is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy (“Policy”) describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services, when you purchase our products from a third-party retail partner, and when you otherwise communicate or interact with us, either online or offline.
Additional disclosures for residents of certain jurisdictions, including California, are provided in the relevant sections below.
Please read this Policy carefully to understand our practices regarding your personal information and your rights and choices regarding that information. This Policy may change from time to time. We will post any updates here and revise the “Last Updated” date. If we make material changes affecting how we collect, use, or disclose personal information, we will provide additional notice as required by law. Where required by law, we will obtain any required consent before applying those changes.
Relationship with Shopify
Our Website is powered by Shopify, which helps us provide the Services to you. When you access or use the Website or place an order through our Shopify-powered storefront, information you submit may be transmitted to and processed by Shopify and certain third parties that may be located in countries other than where you reside. If you wish to opt out of certain sharing of your personal information for targeted advertising purposes, please click on the “Do Not Sell or Share My Personal Information” link to make the desired selection through our cookie banner.
If you choose to use Shop Pay or Shop sign-in, those features are offered by Shopify directly to consumers, and Shopify may collect and process certain information directly in connection with those features in accordance with Shopify’s privacy materials.
In addition, to help protect, grow, and improve our business, we may use certain Shopify enhanced features. When those features are enabled, Shopify may process personal information about your interactions with our Services, Shopify, and other merchants to provide, develop, and improve analytics, product customization, advertising, and related services. In those circumstances, Shopify may be independently responsible for that processing and for responding to applicable rights requests relating to that processing.
To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.
Personal Information Sources
We may collect personal information from the following sources:
- Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information;
- Automatically through the Website including from your device when you visit our Website and use our Services, and through the use of cookies and similar technologies (read more about this in our Cookie Policy;
- From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
- From our partners or other third parties.
Personal Information We Collect or Process
When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, such that it cannot identify or be reasonably linked to you.
We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
- Identifiers and contact information, including your name, email address, postal address, billing address, shipping address, phone number, customer or account identifiers, and similar identifiers.
- Financial information including payment method, payment card type, billing details, transaction details, payment confirmation, subscription billing information, and other payment-related information. We do not store full payment card numbers; payment card processing is handled by our payment processors.
- Account information, including account identifiers, login status, membership status, preferences, saved selections, and settings.
- Membership and subscription information, including your membership tier, subscription status, renewal dates, billing cadence, and information relating to subscription changes, pauses, cancellations, refunds, and renewals.
- Transaction information including the items you view, put in your cart, add to your wish list, or purchase, refund or cancel and your past transactions.
- Communication information including the information you include in communications with us, for example, when sending a customer support inquiry, text messages, emails, and social medial posts, or when you engage with our customer surveys.
- Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
- Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services, such as pages viewed, links or buttons clicked, scroll depth, mouse movements, session interactions, referral URLs, browser and device information, and other information about how you interact with the Services, including through analytics, session replay, or heat mapping tools.
In the preceding 12 months, we have collected the categories of personal information listed above.
How We Use Your Personal Information
Depending on how you interact with us, we may use personal information for the following purposes:
- Provide, Tailor, and Improve the Services. We use your personal information to operate, maintain and improve the Services– for example, to process your payments; to fulfill and deliver your orders; to create, maintain and otherwise manage your account; to remember your preferences and interests; to send you service related messages (such as order updates and account notices); to facilitate purchases and refunds; to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases.
- Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing and promotional communications by email, text message or postal mail, and to display ads for our products or services on our Website and on third-party websites. These ads may be based on your activity on the Website, including items you view, add to your cart or purchase. See information about how to opt out of unwanted marketing communications in the “Managing Communication Preferences” section below.
- Security and Fraud Prevention. We use your personal information to help secure the Services and your account, authenticate users, to provide a secure checkout experience, and detect, investigate and respond to suspected fraudulent, illegal, unsafe, or malicious activity, including activity that may threaten public safety. If you choose to create an account, please keep your account login credentials confidential. We highly recommend that you do not share your username, password or other access information with others.
- Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide our Services to you and to maintain our business relationship with you.
- Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government authorities, to establish, exercise or defend legal claims; investigate, participate in, or respond to civil discovery, litigation, or other legal proceedings, and to enforce our Terms of Use and policies or investigate potential violations.
How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to our service providers and other third parties as described in this Policy. We do not disclose your personal information to third parties except as described here, with your direction or consent, or as required or permitted by law. Service providers and vendors we engage to help operate the Services may access personal information to perform services on our behalf and are required to protect it consistent with this Policy and applicable law, including under written agreements in most cases.
Disclosures of personal information by us to our service providers include the following
- To service providers (including Shopify) who perform services on our behalf (e.g. IT and security support, payment processing, data analytics, customer support, cloud storage, order fulfillment and shipping).
- To marketing and advertising partners to provide marketing services and show you ads on our Website and on third-party sites, including ads based on your online activity over time and across different websites or services. These partners will use your information in accordance with their own privacy notices. Depending on where you live, you may have a right to opt out of certain targeted advertising and sharing. You can exercise your rights to opt-out at our “Do Not Sell or Share My Personal Information” link and make the desired selection through our cookie banner.
- When you direct us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media features or login integrations that share information with the third party.
- For legal and business purposes, including in connection with a corporate transaction (such as a merger, acquisition, financing, reorganization, or bankruptcy), to comply with legal obligations or lawful requests (including to respond to subpoenas or court orders), to enforce our terms of service or policies, and to protect our Services, our rights, and the rights of our users and others.
In the past 12 months, our data disclosure practices have been consistent with the above representations.
Sale, Sharing, and Targeted Advertising
We do not sell personal information for money; however, certain U.S. privacy laws define “sell” and “share” broadly. Under these laws, “sharing” may include disclosing personal information for cross-context behavioral advertising (also known as “targeted advertising”), such as when information about your activity on our Website is used to show you ads on third-party sites.
In the preceding 12 months, we may have “shared” personal information for cross-context behavioral advertising/targeted advertising purposes, such as through the use of cookies, pixels, and similar technologies that allow our marketing and advertising partners to collect information about your interactions with our Website over time and across different websites or services. Read more about the technologies we use on the Website in our Cookie Policy.
You can opt out by clicking our “Do Not Sell or Share My Personal Information” link and make the desired selection through our cookie banner. We also recognize the Global Privacy Control (GPC) signal as described in the “Your Rights and Choices” section below.
Third Party Websites and Links
The Website may provide links to websites or other online platforms operated by third parties. If you follow a link to a site not affiliated with or controlled by us, you should review that site’s privacy and security policies and terms of use. We are not responsible for the privacy or security practices of third party sites or platforms, or for the content they provide.
Information you post in public or semi-public spaces, including on third-party social networking platforms, may be viewable by others and may be used or shared by those third parties and other users. Our inclusion of a link does not imply our endorsement of any third party site, platform or content, except as expressly stated on the Website.
Children's Data
The Website and Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
Security of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unencrypted or insecure channels to communicate sensitive or confidential information to us.
Retention of Your Information
We retain each category of personal information for as long as reasonably necessary for the disclosed purposes described in this Policy, or, if we cannot specify a precise retention period in advance, based on the criteria described below, including the nature of the information, the purpose of collection, legal and operational needs, and our ability to delete or de-identify the information.
How long we keep information depends on things like the type of information, why we collected it, how sensitive it is, our legal or operational needs, and whether we can delete or de-identify it.
In general:
· Contact information: We keep information like your name, mailing address, phone number, and email address for as long as we reasonably need it to process orders, communicate with you, provide support, maintain our relationship with you, and meet legal and recordkeeping requirements.
· Payment and financial information: We retain payment- and transaction-related information for as long as reasonably necessary to process transactions, manage subscriptions, detect and prevent fraud, handle refunds, disputes, and chargebacks, maintain financial records, and comply with legal obligations. Payment card information, including full payment card numbers, is handled by our payment processors, such as Shopify/Shop Pay, and is not stored by us.
· Account information: We retain information associated with your account, such as your username, account preferences, settings, and credential-related information, for as long as reasonably necessary to maintain your account, provide requested features and services, remember your settings, keep our Services secure, prevent fraud, and meet legal or operational requirements. Passwords are handled by our account platform provider; we do not have access to or view your password and can only send or trigger a password reset link.
· Transaction information: We keep information about your purchases, returns, and similar transaction history for as long as reasonably necessary to complete transactions, provide customer service, manage returns or warranties, maintain our business records, improve our operations, and comply with legal, tax, accounting, and audit requirements.
· Communications: We keep records of communications, such as customer service messages, feedback, and other correspondence, for as long as reasonably necessary to respond to you, address concerns, improve our services, train support personnel, maintain business records, and comply with legal obligations.
· Device and usage information: We keep information such as IP address, browser type, device identifiers, and information about how you use our services for as long as reasonably necessary to operate, secure, maintain, personalize, and improve our services; analyze performance; troubleshoot issues; detect and prevent fraud or abuse; and comply with legal obligations.
When we no longer reasonably need personal information for these purposes, we will delete it or de-identify it, unless the law allows or requires us to keep it longer.
Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know. You may have a right to request access to personal information that we hold about you.
- Right to Delete. You may have a right to request that we delete personal information we maintain about you.
- Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
- Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
- Right to Opt out of Sale or Sharing for Targeted Advertising. You may have a right to opt out of the "sale" or "sharing" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out at our “Do Not Sell or Share My Personal Information” link and make the desired selection through our cookie banner.
Please note that if you visit our Website with the GPC opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the Website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about GPC, you can visit https://globalprivacycontrol.org/. Other than the GPC, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
Exercising Your Rights.
You may exercise any of these rights by contacting us using the contact details provided in the “Contact” section below. To learn more about how Shopify processes personal information and how to exercise rights with respect to information Shopify processes in its own capacity, you can visit Shopify’s Consumer Privacy Policy and Privacy Portal.
In order to process your deletion and/or access request, we are permitted by law to collect certain information about you to verify your identity. If, however, we cannot verify your identity from the information already maintained by us, we may request additional information from you, which shall only be used for the purposes of verifying your identity, and for security or fraud-prevention purposes, such as a passport or driver’s license.
Under the laws of your state, you may have the right to use an authorized agent to submit a request on your behalf if you provide the authorized agent written permission signed by you. We may require you to verify your identity directly with us and confirm that you authorized the agent to act on your behalf.
We will make every effort to respond to your request within 45 days from when you contacted us. If you have a complex request, the law may permit us to take longer to respond. We will still contact you within 45 days from when you contacted us to let you know we need more time.
If we decline to take action on a request that you have submitted, we will inform you of our reasons for doing so, and provide instructions for how to appeal the decision. Depending on your state of residence you may have the right to appeal within a reasonable period of time after you have received our decision. If you have this appeal right, within 45-60 days, depending on the state, of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If we deny your appeal, we will provide you with a method for contacting your state attorney general’s office to submit a complaint.
Right to Non-Discrimination.
You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights as set forth in this Policy.
California “Shine the Light” Disclosure.
California residents may request certain information regarding our disclosure of personal information to third parties for those third parties’ direct marketing purposes during the prior calendar year. To make such a request, please contact us using the information in the “Contact” section below. If reaching out by email, please include “Shine the Light Request” in the subject line of the request.
Managing Communication Preferences.
With your consent where required by law, we may send you promotional emails, text messages, or other marketing communications. You may opt out of promotional emails at any time by using the unsubscribe link in our emails. You may opt out of promotional text messages by replying STOP or following the instructions provided in the message. Message and data rates may apply. If you opt out, we may still send you non-promotional communications, such as messages about your account, orders, transactions, or our ongoing business relationship with you.
International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact
Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, email us at privacy@wanderingbearcoffee.com or submit a form on our website: Get in Touch.
