Café deVolcán

Legal & Privacy

Legal notice and privacy information for Café de Volcán.

This page explains how Café de Volcán and Grupo Valturás Internacional SRL present the website, collect and use information, and describe available privacy choices for U.S. visitors.

Privacy Notice

We collect and use personal information to operate the site, respond to requests, manage customer relationships, and support commerce and loyalty activity.

Depending on how you interact with Café de Volcán, we may collect identifiers and contact information such as name, email address, telephone number, city, state, and other customer-provided details. We may also collect referral and attribution information, marketing and campaign context, browser and device information, request and anti-abuse metadata, purchase or loyalty history, wallet or stored- value activity, prepaid card or gift card activity, merchant-provided installment or BNPL history, customer-service interactions, and other information reasonably tied to the operation of the website and brand relationship.

That information may be used to operate the website, process loyalty membership, account, wallet, stored-value, prepaid card, gift card, referral, and commerce requests, verify email ownership, deliver transactional and lifecycle communications, attribute referrals, operate loyalty programs, administer rewards points and merchant-provided installment or BNPL features, protect against fraud or abuse, improve customer experience, understand performance, and comply with legal or record-keeping obligations.

Categories of information we may process

  • Identifiers and contact details.
  • Location details such as city, state, or similar customer-provided geography.
  • Commercial, loyalty, referral, wallet, stored-value, card, and installment activity.
  • Internet or network activity, device signals, and technical event data.
  • Communications content and customer-service history.
  • Inference, segmentation, or audience data derived from customer interactions.
  • Sensitive information only where reasonably necessary and permitted by law.

How information may be disclosed

We may disclose information to service providers, contractors, and operational platforms that support hosting, data storage, communications delivery, loyalty, referral, wallet, stored-value, card, installment, analytics, advertising, fraud prevention, and customer operations. We do not operate this site as a public list brokerage or third-party data resale service.

We may use advertising, cross-context targeting, audience measurement, and similar marketing technologies that constitute a sale, sharing, or targeted advertising event under applicable law. Where required, we rely on the site's privacy choices controls and applicable opt-out mechanisms.

Retention

We retain personal information for as long as reasonably necessary to operate the site, maintain customer and loyalty history, honor privacy choices, support accounting and referral records, comply with law, resolve disputes, and prevent fraud or abuse.

SMS / RCS privacy

When a visitor opts into mobile messaging, we may process the provided phone number, consent timestamp, related form context, and messaging-delivery metadata to send transactional Founder’s Club/loyalty confirmations and account updates, prevent abuse, and maintain compliance records.

Mobile messaging data may be disclosed to communications and infrastructure providers that support message delivery, verification, fraud controls, and customer support. We do not use this transactional messaging consent path as a blanket consent for promotional SMS marketing.

Notice at Collection

When we collect personal information through the website, we do so for defined operational and commercial purposes.

At or before the point of collection, Café de Volcán may collect identifiers, contact details, form-submission data, referral context, campaign parameters, request metadata, device and usage information, and any other information you choose to provide through the site.

We use these categories to operate the website, create or update customer and prospect records, manage commerce and loyalty journeys, process referrals and rewards relationships, administer wallet, stored-value, prepaid card, gift card, and merchant-provided installment features, send lifecycle communications, understand performance, and maintain security and fraud controls.

If we sell or share personal information or use it for targeted advertising in a way that triggers a formal opt-out right, Café de Volcán will provide a clear privacy choices path and honor applicable opt-out signals.

For Founder’s Club/loyalty mobile messaging, the website also collects a separate SMS / RCS consent acknowledgment at the point where the phone number is submitted. That disclosure is used only for transactional confirmations and account updates tied to the submitted number.

California

California residents may have rights to know, delete, correct, and opt out.

California residents may have the right to request access to categories and specific pieces of personal information, request deletion, request correction, request a portable copy of information where applicable, opt out of sale or sharing, and limit the use and disclosure of sensitive personal information where that right applies.

California law also requires a notice at collection and, if relevant to the business model, a clear route for exercising opt-out choices. Café de Volcán does not operate the public site as a data broker, but it may use advertising, audience-building, analytics, personalization, and targeted advertising technologies in ways that create privacy rights under applicable law. Where those rights apply, we provide the notices and controls required by law.

Where those rights apply, Café de Volcán provides an explicit Do Not Sell or Share My Personal Information path so visitors can exercise that opt-out choice clearly.

California residents may also use an authorized agent where permitted by law, and they have the right not to receive discriminatory treatment for exercising privacy rights.

Other U.S. States

Residents of other U.S. states may have similar privacy rights depending on applicable law.

Depending on your state of residence, you may have rights to access, correct, delete, or obtain a copy of personal information, and rights to opt out of targeted advertising, sale, certain profiling activity, or other covered uses. Some states also provide an appeal process when a request is denied.

Café de Volcán aims to provide a consistent privacy experience across the U.S., including clear notices, preference controls, and request channels where state law requires them.

Your Privacy Choices

Site visitors can manage category-based preferences through the website’s privacy banner and controls.

Café de Volcán presents a bottom-screen privacy preferences banner. Essential functionality remains on, while optional categories such as analytics, personalization, and marketing remain off unless chosen by the visitor.

If your browser sends a Global Privacy Control signal, the site treats that as a signal to keep non-essential categories off unless you later choose otherwise through the site controls.

To reopen the preferences controls at any time, use Privacy Choices or review the cookie notice.