Privacy Policy

The data controller is BEAN LUXE S.R.L., Società a responsabilità limitata, with registered office at Frazione Molezzano 65, 50039 Vicchio (FI), Italy. PEC: beanluxesrl@pec.it.

This Privacy Policy applies to the Bean Luxe public website, public pages, contact requests, Compass private validation or early access requests, future dynamic services where enabled, partner, roaster, course and event inquiries, and communications submitted to Bean Luxe through available channels.

Future features may require updates before activation, including product feedback forms, newsletter tools, account areas, partner submissions, event or course inquiries and embedded third-party services.

Depending on the features enabled and on what users submit, Bean Luxe may process:

• Technical navigation and security data, such as IP address, server logs, browser and device data, timestamps, requested resources and security events.
• Contact form data, such as name, email, company or organization where provided, reason for contact, message content and technical submission metadata linked to the request.
• Business, partner and roaster data, such as company name, website, social channels, professional role and product or service information submitted voluntarily.
• Compass validation data, such as email, name, feedback, taste preference answers or product feedback, only if users submit them.
• Account data, if future login is enabled, such as account identifiers, authentication metadata and profile information.
• Newsletter or marketing data, if enabled, such as email address, consent record and subscription preferences.
• Event or course inquiry data, if enabled.
• Payment or billing data only if future paid services are introduced, and only through payment or accounting providers.
• Communications exchanged with Bean Luxe.
• Aggregate analytics data from Vercel Web Analytics, such as page views, referrers, device/browser information and approximate location data.
• Cookie and tracking data as described in the Cookie Policy.

Bean Luxe does not intentionally request special categories of personal data through this website. Users should not include sensitive information in free-text messages unless it is strictly necessary for their request.

The active contact form is designed for professional and informational inquiries. Users should submit only the information needed for Bean Luxe to evaluate and answer the request.

• Delivering, maintaining and securing the website.
• Responding to requests submitted by users.
• Operating the website contact form and manually reviewing inbound inquiries.
• Managing professional, commercial, partnership, roaster, course or event inquiries.
• Managing Compass private validation or early access requests where enabled.
• Collecting product feedback if users voluntarily submit it.
• Creating and managing accounts if future account features are enabled.
• Sending newsletters or marketing communications only with consent, if enabled.
• Understanding aggregate website usage, improving content and monitoring website performance through privacy-friendly analytics.
• Complying with legal, tax, accounting or administrative obligations.
• Protecting rights and preventing fraud, abuse or security incidents.

Depending on the processing activity, Bean Luxe relies on one or more of the following GDPR legal bases:

• performance of a contract or pre-contractual measures requested by the user;
• legitimate interest for website operation, security, business communications and service improvement, where balanced against user rights and expectations;
• legal obligation, including tax, accounting, administrative or authority requests;
• consent for newsletter, marketing communications and non-essential cookies or tracking where required;
• explicit consent if special category data are ever requested. Bean Luxe does not intentionally request such data through the website.

Contact form submissions are processed to answer the request, review fit and protect the website from spam or automated misuse.

• Contact requests: up to 12 months after the last interaction unless a relationship follows.
• Business, partnership, roaster, course or event inquiries: up to 24 months after the last relevant interaction.
• Compass validation or early access data: for the duration of the validation and up to 24 months after its end, unless consent is withdrawn or longer retention is justified.
• Newsletter data: until unsubscribe or withdrawal, with suppression records kept as needed.
• Account data: while the account is active and for a reasonable period after closure, unless legal retention applies.
• Technical logs: according to provider and security needs, normally for limited periods.
• Legal, accounting or contract data: according to applicable legal retention periods.
• Vercel Web Analytics data: according to provider settings and the Cookie Policy.

Contact requests may be retained for up to 12 months after the last interaction unless a business relationship follows or legal obligations require longer retention.

Personal data may be shared, where applicable, with:

• hosting, CDN and deployment providers;
• email and communication providers;
• anti-spam and form security providers;
• form management tools if enabled;
• database or authentication providers if enabled;
• Vercel, for hosting and privacy-friendly aggregate website analytics;
• newsletter or CRM providers if enabled;
• payment and accounting providers if future paid services are enabled;
• professional advisors, legal consultants and accounting consultants;
• public authorities where legally required.

Processors are selected and used according to applicable data protection requirements.

Some providers may process personal data outside the European Economic Area. Where required, Bean Luxe will use appropriate safeguards such as adequacy decisions, standard contractual clauses or equivalent mechanisms provided by applicable data protection law.

Technical data necessary for website delivery and security may be processed automatically. Contact or inquiry data are necessary to respond to a request. Optional information submitted in messages, feedback, roaster or partner material is provided voluntarily; if some information is missing, Bean Luxe may be unable to evaluate or respond fully.

The contact form currently asks for name, email, company or organization where relevant, reason for contact, message content and privacy confirmation. Anti-spam verification is required to complete submission.

Users may exercise their rights under the GDPR, where applicable, including access, rectification, erasure, restriction, objection, portability, withdrawal of consent and the right to lodge a complaint with the Italian Data Protection Authority.

Requests can be sent to beanluxesrl@pec.it. Users may also contact the Italian Data Protection Authority through its official website.

The website does not currently perform automated decision-making with legal or similarly significant effects. Compass recommendations or previews, where available, are informational product guidance only and do not produce legal or similarly significant effects.

Marketing profiling will not be used unless explicitly introduced with appropriate notice and consent where required.

Vercel Web Analytics is used for aggregate website usage measurement, content improvement and performance monitoring. It is not used for advertising profiling or remarketing.

The contact form also uses an anti-spam/security verification service to protect the website from automated misuse. This protection is not used for advertising profiling.

This website and Bean Luxe professional services are not specifically directed to children. Users who are minors should not submit personal data without appropriate parental or guardian involvement where required by law.

Bean Luxe may update this Privacy Policy to reflect legal, technical or service changes. Future features may require updates before activation. The current Cookie Policy is available at /cookies.

Last updated: July 5, 2026