Ethiopia Coffee by Ethiopian Brew Co.®

Privacy & Data Protection (KVKK)

Last updated: June 22, 2026

Ethiopian Brew Co. ("we", the "Company") processes your personal data as the data controller under Türkiye's Personal Data Protection Law (KVKK, no. 6698). We aim to keep things simple, honest and transparent.

Data we collect

  • Identity & contact: name, email, phone (for WhatsApp).
  • Transactional: order/request history, invoice details. There is no online payment; card data is never stored.
  • Preferences (opt-in): flavor profile, brew preferences, dietary restrictions.
  • Technical: short-lived IP (security), anonymous device/browser info.
  • Marketing permissions (opt-in): email/SMS/WhatsApp/notification consents.

We do not collect special-category data such as health, religion, political views, or biometric/genetic data.

Purposes

  • Receiving and responding to order and reservation requests.
  • Providing membership and communication services.
  • Meeting legal obligations (invoicing, tax).
  • Security and fraud prevention.

Legal bases

  • Performance of a contract (membership, request process).
  • Legal obligation (tax/invoicing).
  • Legitimate interest (security, fraud prevention).
  • Explicit consent (marketing and opt-in preferences).

Order requests & WhatsApp

The name/phone (and optional note) collected in the order-request form are processed on the basis of a pre-contractual step and/or legitimate interest. As there is no online payment, no card data is collected.

Your request is sent to us via WhatsApp through a wa.me link from your own device. WhatsApp/Meta is a third party; when you use this channel your data reaches Meta's infrastructure. The message is initiated by you; we state this clearly for transparency.

Third parties we share with

Where the service requires it, data may be shared with: Paraşüt (e-invoicing, legal), Menülüx (POS), Resend (email), Cloudflare (CDN/security), Sentry (error monitoring; no personal data), future payment (iyzico/PayTR) and courier providers, and WhatsApp/Meta as the order channel.

International transfers: Cloudflare (US/EU), Resend (US), Sentry (US/EU), Hetzner (EU — Germany/Finland). Transfers are made in line with KVKK.

Retention

  • Member profile data, order notes: deleted promptly on request (< 30 days).
  • Order history: 5–10 years per tax law (personal details anonymized).
  • E-invoices: 10 years (legal).
  • Cookie preference: 12 months. Anonymous analytics: 24 months. Audit log: 7 years.

Your rights (KVKK Art. 11)

You have the right to learn whether your data is processed, request information, learn the purpose, have data corrected or erased, learn the third parties data is shared with, and object to automated decisions/profiling.

Send requests to [email protected]. Requests are answered within 30 days, free of charge.

Cookies

We use a cookieless approach limited to what the site needs to function; there are no tracking or marketing cookies. See the Cookie Policy.