Privacy Policy

The data controller is BEAN LUXE S.R.L., Società a responsabilità limitata, with registered office at Frazione Molezzano 65, 50039 Vicchio (FI), Italy. PEC: beanluxesrl@pec.it.

This Privacy Policy applies to the Bean Luxe public website, contact and newsletter features where enabled, Bean Luxe Compass consumer accounts, authentication, cloud synchronisation, taste-discovery functions, account-gated coffee discovery, private Favorites and Journal, product feedback, partner or roaster inquiries and related communications.

Depending on the service used, Bean Luxe may process:

• technical navigation and security data, such as server logs, browser or device information, timestamps and security events;
• contact and communication data, including name, email, organization and message content when voluntarily submitted;
• Compass account and authentication data, including the account email, authentication identifier and authentication metadata;
• Compass profile data supplied by the user, such as name, surname, country, optional city, preferred language and privacy or marketing preferences;
• Compass taste-discovery and cloud state, including Taste Profile, quiz responses, favorite-coffee state and private Journal entries;
• business, partner and roaster information voluntarily submitted to Bean Luxe;
• newsletter and marketing data where the user has subscribed;
• aggregate or privacy-aware analytics data where analytics are enabled and a legal basis or consent is required, including limited interaction, locale, device and performance information;
• cookie and tracking data as described in the Cookie Policy.

Bean Luxe does not intentionally request special categories of personal data through Compass or the website. Users should not place health, biometric, political, religious, sexual-life or other sensitive personal information in free-text fields such as the private Journal unless strictly necessary for a request they deliberately make to Bean Luxe.

• providing, maintaining and securing the website and Compass;
• creating, authenticating and managing Compass consumer accounts;
• saving and synchronising user-requested Compass state across supported devices;
• providing taste guidance, account-gated coffee matching and discovery, Favorites and private Journal functions;
• responding to contact, partner, roaster, event or service requests;
• sending newsletters or marketing communications only where an appropriate consent or other legal basis applies;
• measuring service performance and product usage where analytics are enabled, without using Compass product analytics for advertising profiling or remarketing;
• complying with legal obligations and protecting Bean Luxe, its users and services against abuse or security incidents.

Depending on the processing activity, Bean Luxe relies on performance of a contract or pre-contractual measures requested by the user, legitimate interests for service operation, security and improvement, legal obligations, and consent where required for optional marketing or non-essential analytics and tracking.

• Compass account and active cloud-synchronised consumer state are kept while the account is active and are deleted when the consumer account is successfully deleted.
• Provider backups, disaster-recovery copies and security logs may retain deleted data transiently for their normal limited retention cycles; such copies are not restored as active Compass consumer state except where required for disaster recovery or legal compliance.
• Contact requests are normally retained up to 12 months after the last interaction unless a continuing relationship or legal need applies.
• Business, partnership, roaster, course or event inquiries may be retained up to 24 months after the last relevant interaction.
• Newsletter data are retained until unsubscribe or withdrawal, subject to limited suppression records where needed.
• Technical and security logs are retained for limited periods according to provider and security needs.
• Analytics data, where collected, follow the retention periods stated in the Cookie Policy or the applicable analytics configuration.
• Legal, accounting or contractual records may be retained for the periods required by applicable law.

A user can delete a consumer account directly in Compass or follow the instructions on the Compass account-deletion page. Information outside the Compass consumer account may remain only where a separate legal basis applies.

Personal data may be processed by providers used to operate the relevant service, including:

• Supabase for Compass authentication, database/cloud state and related backend infrastructure;
• Vercel and other hosting, deployment, CDN or performance providers for the public platform;
• email, communication, newsletter or CRM providers where those services are enabled;
• Google and other analytics providers where the relevant website analytics are enabled with the required consent;
• Cloudflare Turnstile Privacy Addendum for anti-spam verification;
• professional advisers and public authorities where required by law.

Catalog-translation services are used for coffee and editorial catalog content. Consumer Journal free text and authentication secrets are not intended inputs to catalog translation.

Processors are selected and used according to applicable data-protection requirements.

Some providers may process data outside the European Economic Area. Where required, Bean Luxe relies on applicable safeguards such as adequacy decisions, standard contractual clauses or equivalent lawful transfer mechanisms.

Users may exercise applicable GDPR rights including access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Requests can be sent to beanluxesrl@pec.it. Users also have the right to lodge a complaint with the competent data-protection authority.

Compass recommendations are informational taste guidance and do not produce legal or similarly significant effects. Bean Luxe does not use Compass recommendations for advertising profiling or automated decisions with legal or similarly significant effects.

Where Compass product analytics are enabled, event payloads are designed to exclude direct identifiers such as email, name, user ID, authentication tokens, precise location and free text. Analytics availability may differ by platform or release and must not interfere with the core Compass experience.

Bean Luxe services are not specifically directed to children. Minors should not submit personal data without appropriate parental or guardian involvement where required by law.

Bean Luxe may update this Privacy Policy to reflect legal, technical or service changes. The current Cookie Policy is available at /cookies.

Last updated: 2026-09-09