Privacy Policy
Last updated
This policy explains how HA8 ehf. (“we”) handles personal data on www.coffeeandtreats.com.
Who is responsible
HA8 ehf., Kirkjuvegur 37, Iceland. Email: hello@coffeeandtreats.com.
What we collect and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Contact form: name, email address, subject and message | To reply to you | Our legitimate interest in answering messages | Until the conversation ends, then deleted within 12 months |
| Usage statistics through Google Analytics 4: pages viewed, approximate location, device and browser | To understand which content is useful | Your consent where required (EEA, UK, Switzerland); legitimate interest elsewhere | As set in Google Analytics → Admin → Data retention (2 or 14 months) |
| Advertising data through Google AdSense, when ads are shown | To show and measure ads that pay for the site | Your consent for personalised ads where required | Set by Google |
| Server logs kept by our host: IP address, date, page requested, browser | Security and troubleshooting | Our legitimate interest in running a secure website | A limited period set by our host |
We do not sell your personal data and we do not ask for an account or payment details.
Consent in Europe
Visitors from the EEA, the UK and Switzerland see a consent message from Google (a Google-certified consent tool) before analytics or advertising cookies are used. Until you choose, Google Analytics runs without cookies and sends only anonymous signals; ads, if shown, are non-personalised. You can change your choice at any time with the Privacy and cookie settings link at the bottom of every page.
Affiliate links
Some links go to Amazon and are marked as sponsored. When you click one, Amazon may set its own cookies on its website to credit us with a purchase. We receive a commission, never your name or order details. Amazon’s privacy notice applies on Amazon’s sites.
Who receives data
- Google (Ireland/USA): Analytics, AdSense and the consent tool.
- Amazon (when you click an affiliate link): on its own websites, as an independent controller.
- hosting.com: our web host, which stores the website, server logs and contact-form email.
Some of these companies process data outside the EEA under the safeguards the GDPR provides, such as the EU–US Data Privacy Framework or standard contractual clauses.
Your rights
You can ask to access, correct or delete your personal data, object to or restrict its use, and withdraw consent at any time. Write to hello@coffeeandtreats.com. You can also complain to a data protection authority; in Iceland that is Persónuvernd (www.personuvernd.is).
Changes
We update this page when our practices change and show the date of the last update.