Privacy Policy
Last updated: 27 August 2026
Effective version: 2026-08-notice-v1
Autumn Brew Coffee respects your privacy.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use the Autumn Brew Coffee website, customer account, loyalty programme, ordering services, or related digital services.
1. Who Is Responsible for Your Data
Autumn Brew Coffee is a sole proprietorship based in Mizoram, India.
For the purposes of this Privacy Policy, “Autumn Brew,” “we,” “us,” or “our” refers to the Autumn Brew Coffee proprietorship.
Autumn Brew is responsible for determining how personal data collected through our services is used.
Website: autumnbrewcoffee.com
Privacy enquiries may be sent to: privacy@autumnbrewcoffee.com or support@autumnbrewcoffee.com.
2. Information We May Collect
The information collected depends on how you use Autumn Brew services.
Account Information
We may collect:
- name;
- mobile number;
- email address;
- customer code;
- account identifiers;
- account preferences; and
- authentication information.
If you use Google sign-in, we retain the Google subject identifier, verified email address returned by Google, display name, and link timestamp. We do not store Google authorization codes, ID tokens, access tokens, state, nonce, PKCE verifier, or the Google client secret.
Purchase Information
When you make purchases, we may process information including:
- order history;
- receipt information;
- products purchased;
- transaction amount;
- date and time;
- store or fulfilment location;
- transaction identifiers; and
- refund or cancellation information.
Loyalty Information
If you participate in Autumn Brew's loyalty programme, we may process information relating to:
- Autumn Beans earned;
- Autumn Beans redeemed;
- qualifying transactions;
- customer visits;
- milestones;
- rewards;
- coupons;
- coffee discovery activities;
- challenges;
- prediction activities;
- reward redemption; and
- other loyalty activity.
Delivery Information
Where delivery is requested, we may collect:
- recipient name;
- mobile number;
- delivery address;
- delivery instructions; and
- information reasonably necessary to complete delivery.
Payment Information
Where payments are processed by an external payment provider, Autumn Brew may receive limited information such as:
- payment status;
- amount;
- transaction reference;
- payment-method category; and
- refund status.
We do not ordinarily need to store complete debit-card or credit-card numbers when payment information is handled directly by the payment provider.
Communications
If you contact Autumn Brew, we may process enquiries, messages, customer-support conversations, feedback, complaints, order-related communication, and other correspondence across the website, email, SMS, WhatsApp, Instagram, or other authorised channels.
Technical Information
Certain technical information may be collected when you use our website, including IP address, browser type, device type, operating system, pages visited, referring page, date and time, diagnostic information, and website activity.
3. Why We Use Personal Data
We may use personal data to:
- create and manage customer accounts;
- authenticate users and send OTPs;
- process purchases and maintain order and receipt history;
- provide pickup, delivery, or shipping;
- operate the Autumn Brew loyalty programme, calculate and award Autumn Beans, and track milestones;
- issue rewards and coupons and process redemptions;
- synchronise eligible purchases with customer accounts;
- route candidate Google, email, phone, or point-of-sale matches through staff review before records are merged or corrected;
- process refunds and provide customer support;
- detect fraud or abuse and prevent duplicate accounts or rewards;
- secure our website and systems, and troubleshoot technical problems;
- improve our website, analyze service usage, and elevate customer experience;
- maintain accounting, tax, and regulatory records; and
- comply with applicable law and protect legitimate business interests.
4. Loyalty and Transaction Linking
Autumn Brew may link qualifying purchase information to a customer's Autumn Brew account to provide transaction history, Autumn Beans, customer milestones, rewards, visit tracking, and personalised loyalty features.
Where Autumn Brew uses a third-party point-of-sale system, information may be exchanged between the point-of-sale system and Autumn Brew's systems to identify eligible customers and transactions. Only information reasonably required for this functionality is processed.
5. Promotional Communications
Where appropriate consent has been provided or where otherwise permitted by law, Autumn Brew may send information about coffee releases, bakery products, new menu items, promotions, rewards, customer benefits, events, and other updates.
Customers may opt out of promotional communications at any time using available unsubscribe or opt-out mechanisms.
Operational communications (such as OTPs, security alerts, purchase confirmations, and account notifications) are separate from marketing communications and will continue to be sent when necessary to provide requested services.
6. Consent
Where we rely on your consent to process personal data, you may withdraw that consent. Withdrawal does not affect processing already lawfully carried out before consent was withdrawn.
If certain personal data is necessary to provide a requested service, withdrawing consent may mean that the relevant service can no longer be provided.
7. Cookies
Autumn Brew's website may use cookies and similar technologies to maintain login sessions, remember preferences, protect customer accounts, secure the website, measure website usage, diagnose technical problems, and improve performance.
Essential cookies may be required for certain features to function. Where legally required, consent will be obtained before using non-essential tracking technologies.
8. Analytics and Monitoring
Autumn Brew may use analytics, performance-monitoring, or error-monitoring services to process technical information such as device type, browser type, approximate geographic region, pages viewed, website interactions, technical errors, performance information, and IP address.
9. Sharing of Information
Autumn Brew does not sell your personal data.
We may disclose limited personal data to service providers where reasonably necessary to operate our business, including website-hosting providers, cloud infrastructure providers, payment processors, point-of-sale providers, SMS/OTP providers, email providers, messaging providers, analytics services, monitoring services, delivery and logistics providers, customer-support providers, and professional advisers.
We may also disclose information where required by law, by a valid legal order, to investigate fraud, to protect customer or business security, to enforce our legal rights, or as part of a legitimate business transfer.
10. Third-Party Integrations
Autumn Brew's website may communicate with third-party platforms (such as point-of-sale systems) used to operate our business. Third-party providers may also process information independently under their own privacy policies.
11. Data Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected or where retention is required or permitted by law.
Certain invoices, receipts, accounting records, tax records, payment records, fraud-prevention records, and transaction records may need to be retained even after a customer account is closed. When personal data is no longer required, we securely delete, anonymise, or dispose of it.
12. Security
Autumn Brew uses reasonable technical and organisational measures intended to protect personal data, including authenticated customer access, OTP verification, encrypted website connections, access restrictions, secure hosting, database access controls, system monitoring, backups, and security practices.
Customers should protect their mobile devices, email accounts, registered phone numbers, OTPs, and authentication credentials.
13. Personal Data Breaches
If a personal-data breach occurs, Autumn Brew will assess the incident and take appropriate steps in accordance with applicable law. Where legally required, relevant individuals and authorities will be notified.
14. Your Privacy Rights
Subject to applicable law, you may be entitled to:
- obtain information about how your personal data is processed;
- request correction of inaccurate data or completion of incomplete data;
- request updating of your information;
- request deletion of eligible personal data;
- withdraw consent where processing depends on consent;
- raise a grievance about how your personal data is handled; and
- exercise other rights provided under applicable data-protection law.
We may need to verify your identity before acting on certain requests.
15. Account and Data Deletion
Where available, you may request deletion of your Autumn Brew account and eligible associated personal data through your profile settings or by contacting us.
Some transaction records may need to be retained after account deletion where required for taxation, accounting, fraud prevention, regulatory compliance, or dispute resolution.
Deleting an account may result in the forfeiture of unused Autumn Beans, loyalty history, milestones, coupons, and unredeemed rewards.
16. Correcting Your Information
If the information associated with your account is incorrect, you may request that Autumn Brew correct or update it. We may verify the request before changing information that affects account ownership or security.
17. Privacy Grievances
If you have a concern regarding your personal data, please contact:
Autumn Brew Coffee
Privacy Contact: privacy@autumnbrewcoffee.com
Mizoram, India
Website: autumnbrewcoffee.com
Please provide enough information for us to investigate your concern. Do not send unnecessary confidential identifiers such as Aadhaar numbers, PAN numbers, passwords, or payment-card details.
18. Children
Autumn Brew's general coffee-shop and website services are not specifically directed toward children. Where personal data relating to a child is processed, we will take the steps required under applicable law, including obtaining appropriate parental or guardian consent where required.
19. External Websites
Our website may contain links to external websites or services. Autumn Brew does not control the independent privacy practices of third parties, and customers should review their privacy policies where appropriate.
20. Cross-Border Processing
Some technology providers may operate infrastructure outside Mizoram or outside India. Where personal data is processed internationally, Autumn Brew will seek to use providers and arrangements consistent with applicable Indian data-protection requirements.
21. Changes to This Privacy Policy
We may update this Privacy Policy as our services, technology, loyalty programme, legal obligations, or business practices change. The current version will be published on this page together with its last-updated date.
22. Contact
Email: privacy@autumnbrewcoffee.com or support@autumnbrewcoffee.com
Website: autumnbrewcoffee.com