Privacy policy

 

Privacy Policy

 

Last updated: September 23, 2025

Cafe Mijito (referred to as “we,” “us,” or “our”) operates this online store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the “Services”).

We are powered by Shopify, which enables us to provide our Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction on our site or otherwise communicate with us.

Please read this Privacy Policy carefully. By using our Services, you agree that you have read and understood how your information is collected, used, and disclosed as described in this policy.

 

Personal Information We Collect and Process

 

When we use the term "personal information," we are referring to any information that can identify you or another person. This does not include information that has been anonymized.

Depending on how you interact with our Services, where you live, and as permitted by law, we may collect or process the following types of personal information:

  • Contact Details: Your name, address, billing address, shipping address, phone number, and email address.

  • Financial Information: Credit card, debit card, and financial account numbers, payment card information, and other payment details.

  • Account Information: Your username, password, security questions, preferences, and settings.

  • Transaction Information: Details about the items you view, add to your cart or wishlist, purchase, return, exchange, or cancel.

  • Communications: Information you include when you contact us, for example, for customer support.

  • Device Information: Information about your device, browser, network, IP address, and other unique identifiers.

  • Usage Information: Information about how and when you interact with our Services.

 

How We Collect Your Personal Information

 

We collect personal information from the following sources:

  • Directly from you: When you create an account, use our Services, communicate with us, or otherwise provide us with your information.

  • Automatically through the Services: From your device when you visit our website, through the use of cookies, and similar technologies.

  • From our service providers: When we use third-party services that collect or process your personal information on our behalf.

  • From our partners or other third parties.

 

How We Use Your Personal Information

 

We use your personal information for the following purposes:

  • To Provide and Improve Our Services: We use your information to fulfill our contract with you, process payments, ship orders, manage returns and exchanges, manage your account, remember your preferences, and provide you with a customized shopping experience.

  • For Marketing and Advertising: We use your information to send you marketing, advertising, and promotional communications by email, text message, or postal mail. We may also show you online advertisements based on your activity on our Services, such as items you’ve previously purchased or added to your cart.

  • For Security and Fraud Prevention: We use your information to authenticate your account, ensure secure payments, and detect, investigate, or prevent fraudulent, illegal, or malicious activity.

  • To Communicate with You: We use your information to provide customer support and to respond to your inquiries.

  • For Legal Reasons: We use your information to comply with applicable laws, respond to legal requests, or to enforce our terms and policies.

 

How We Disclose Personal Information

 

In certain circumstances, we may disclose your personal information to third parties for legitimate business purposes. These circumstances include:

  • With Shopify and Other Service Providers: We share your information with third-party vendors who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, and shipping.

  • With Business and Marketing Partners: We may share information with partners to provide marketing services and advertise to you. For example, Shopify supports personalized advertising based on your online activity with different merchants and websites. These partners will use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to opt out of this type of advertising.

  • When You Consent: When you direct or request us to share certain information with third parties, such as through your use of social media widgets.

  • For Business and Legal Purposes: In connection with a business transaction (like a merger), to comply with legal obligations (like responding to subpoenas), to enforce our policies, and to protect our rights and the rights of our users.

 

Relationship with Shopify

 

Our Services are hosted by Shopify. When you access and use our Services, Shopify collects and processes your personal information to provide and improve its services. Information you submit to us will be transmitted to and shared with Shopify and third parties, which may be located in countries outside of where you live.

Shopify also uses your personal information to provide enhanced features to help our business grow. In these cases, Shopify is responsible for processing your personal data, including handling requests you make to exercise your rights.

To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers. You can also exercise certain rights related to data processed by Shopify through their Privacy Portal at https://privacy.shopify.com/en.

 

International Transfers

 

Please be aware that your personal information may be transferred, stored, and processed outside of your country of residence. If we transfer your data out of the European Economic Area (EEA) or the United Kingdom, we rely on recognized transfer mechanisms like the European Commission’s Standard Contractual Clauses (SCCs) to ensure your data remains protected.

 

Data Security and Retention

 

While no security measure is completely foolproof, we take reasonable steps to protect your personal information. Any information you send us may not be secure while in transit, so we recommend you do not use insecure channels for sensitive data.

We retain your personal information for as long as necessary to maintain your account, provide you with our Services, comply with legal obligations, and resolve disputes.

 

Your Rights and Choices

 

Under the General Data Protection Regulation (GDPR), you have certain rights regarding your personal information. These rights are not absolute and may be subject to certain limitations.

  • Right to Access: You have the right to request a copy of the personal information we hold about you.

  • Right to Rectification: You can ask us to correct any inaccurate or incomplete personal information we have about you.

  • Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal information in certain circumstances.

  • Right to Restrict Processing: You can ask us to restrict the processing of your data for specific purposes.

  • Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.

  • Right to Object: You have the right to object to the processing of your personal information for certain purposes, including direct marketing.

  • Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

You can exercise these rights by contacting us using the details below. We will not discriminate against you for exercising your rights. We may need to verify your identity before we can process your request.

 

Complaints

 

If you have a complaint about how we handle your personal information, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. For the EEA, a list of these authorities can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

 

Changes to this Privacy Policy

 

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post any changes on our website and update the "Last updated" date.

 

Contact Us

 

For any questions about our privacy practices, this policy, or to exercise your rights, please contact us:

  • Email: julian@mijitocoffee.com

  • Address: Hardenbergstraße 12, 31141 Hildesheim, Germany

For the purposes of applicable data protection laws, we are the data controller of your personal information.