1. Types of Information We Collect

The following provides examples of the type of information that we collect from you and how we use that information.

Context	Types of Data	Primary Purpose for Collection and Use of Data
Account/Membership Registration & Administration	We collect your name, contact information, professional role, birthdate, gender (optional), other demographic information, and login credentials when you create an account.  We also collect information relating to the actions that you perform while logged into your account.	We have a legitimate interest in providing account-related functionalities to our Members. We have a legitimate interest in contacting our Members and communicating with them concerning normal business administration such as events, Membership services, and billing.
Commercial Information	We collect basic identifying information such as your name, billing address, shipping address, email address, phone number, and payment information such as your credit card number (via our third-party payment processor) when you place an order with us. We also collect certain commercial information regarding the products or services you have purchased, returned, exchanged, or considered, and your preferences, as well as your government-issued identifier in connection with return transactions.	We have a legitimate interest in fulfilling our contract with you for the provision of products or services, and to provide you receipts and order updates, send notifications to you related to your account, purchases, returns, and exchanges.
SCA Education Programs	We collect the name, contact information, and professional background information of individuals who register for our educational programs, and credentials or recognition activity.	We have a legitimate interest in administering our educational programs, courses, credentialing, and certification programs and performing our contract with you.
Events & Webinars	We collect the name, job title, company name, and contact information, of individuals who register for our events, conferences, and webinars as participants, co-sponsors, or volunteers. We may also collect information about your participation, including questions asked, polls answered, and interactions with the webinar content. With your permission, we may use your image in any photographs, videotape, motion picture or any other media taken by official SCA photographers and videographers at our events.	We have a legitimate interest in providing forums and hosting events for our Members and other interested parties, and promoting our events. We also have a legitimate interest in verifying your identity for in-person events.
Supplier Relationship Management	We collect certain contact and related business information about you (name, email address, professional contact information) when you or your organization provides us with certain products or services. We also use such information to administer and maintain our relationship with your organization. In some instances, we may collect certain background or screening information to the extent needed and in accordance with applicable law.	We have a legitimate interest in administering our relationship with our suppliers and performing our contract with your organization.
Cookies and First Party tracking	We use cookies and clear GIFs. “Cookies” are small pieces of information that a website sends to a computer’s hard drive while a web site is viewed. See our Cookie List for more information.	We have a legitimate interest in making our website operate efficiently.
Cookies and Third Party Tracking	We participate in behavior-based advertising, this means that a third party uses technology (e.g., a cookie, pixel, or tag) to collect information about your use of our website so that they can provide advertising about products and services tailored to your interests on our website, or on other websites. See our Cookie Preference Manager for more information.	Where required by law, we base the use of non-essential third party cookies upon consent.
Demographic Information	We collect Personal Data, such as your age or location.	We have a legitimate interest in understanding our Members and providing tailored services.
Distance Information	When you use one of our mobile applications we collect your location from the GPS, Wi-Fi, and/or cellular technology in your device to determine your location and your distance from an event.	WWe have a legitimate interest in understanding our Members and event registrants and providing tailored services. In some contexts our use is also based upon your consent to provide us with geolocation information.
Email Interconnectivity	If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains and make purchases.	We have a legitimate interest in understanding how you interact with our communications to you.
Employment	If you apply for a job posting, or become an employee, we collect information necessary to process your application or to retain you as an employee. This may include, among other things, your Social Security Number. Providing this information is required for employment.	We use information about current employees to perform our contract of employment, or the anticipation of a contract of employment with you. In some contexts, we are also required by law to collect information about our employees. We also have a legitimate interest in using your information to have efficient staffing and work force operations.
Feedback/Support	If you provide us feedback or contact us for support we will collect your name and e-mail address, as well as any other content that you send to us, in order to reply.	We have a legitimate interest in receiving, and acting upon, your feedback or issues.
Newsletter/Mailing List	When you sign up for one of our mailing lists we collect your email address or postal address.	We share information about our products and services with individuals that consent to receive such information. We also have a legitimate interest in sharing information about our products or services.
Mobile Devices	We collect information from your mobile device such as unique identifying information broadcast from your device when visiting our website.	We have a legitimate interest in identifying unique visitors, and in understanding how users interact with us on their mobile devices.
Partner Promotion	We collect information that you provide as part of a co-branded promotion with another company.	We have a legitimate interest in fulfilling our promotions.
Surveys	We collect information that you provide as part of a co-branded promotion with another company.	We have a legitimate interest in fulfilling our promotions.
Partner Promotion	We collect information that you provide as part of a co-branded promotion with another company.	We have a legitimate interest in fulfilling our promotions.
Sweepstakes or Contests	When you participate in a sweepstakes or contest we collect information about you which includes contact information to notify you if you are selected.	We have a legitimate interest in operating the sweepstakes. In some contexts, we are also required by law to collect information about those that enter into our sweepstakes, and we have a legitimate interest in complying with those laws.
Website Interactions	We use technology to monitor how you interact with our website. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors.	We have a legitimate interest in monitoring our networks and the visitors to our websites, understanding how you interact with our websites to better improve them, and to understand your preferences and interests in order to select offerings that you might find most useful. We also have a legitimate interest in detecting and preventing fraud.

2. Use and Processing of Your Information

In addition to the purposes and uses described above, we use information in the following ways:

• To identify you when you visit our websites.
• To provide products and services.
• To improve our services and Member offerings.
• To administer our Membership platform, educational programs, and related services.
• To conduct analytics.
• To respond to inquiries related to support, employment opportunities, or other requests.
• To send marketing and promotional materials including information relating to our products, services, or promotions, or those of our business partners.
• For internal administrative purposes, as well as to manage our relationships.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you register for a membership, we may collect your information to perform our contract with you, but we also collect your information as we have a legitimate interest in maintaining your information after the transaction is complete so that we can quickly and easily respond to any questions about your membership. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

3. Legal Basis for Processing Your Personal Data

• Consent: Where you have consented to the use including if you request information from us, if you provided us with your details for marketing purposes or if you agree to take part in and provide us with information as part of your participation in our Membership, among other uses you may consent to, we rely on your consent to process your Personal Data.
• Contract: Where necessary to enter into or perform our contract with you or in order to take steps at your request prior to entering into a contract with you, we process your Personal Data for the purpose of fulfilling a contract with you.
• Legal Obligations: We process your Personal Data where we need to use it to comply with our legal obligations.
• Legitimate Interest: We process your Personal Data where we use it to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights (including to keep our records updated, to maintain product safety, to study how our Members interact with us or use our products/services, to develop our business, to inform our marketing strategy, to follow up on a survey response or enquiry, to recruit new employees, for equal opportunity monitoring and reporting, for running our business, for administration and IT services, network security, to prevent fraud, and in the context of a business reorganization or group restructuring exercise).

The provision of your Personal Data is partly a statutory requirement and partly a contractual obligation. Please contact us if you need details about the legal basis we rely on to process your Personal Data.

4. Cookies & Related Technologies

In accordance with applicable law, we may use cookies, web beacons or other tracking technologies (collectively, “cookies”) on our websites. A cookie is a small amount of data that is transferred to visitors’ web browsers and/or stored on your device as you are browsing; they are processed and stored by your web browser. We may use the following types of cookies on our websites:

Cookie Type	Description
Advertising Cookies	Advertising cookies may be placed by us or third parties to enable third-party ad networks to recognize a unique cookie on your computer or mobile device. The information that is collected and disclosed by these types of cookies may also be linked to the device identifier of the device you are using to allow us to keep track of all the websites you have visited that are associated with the ad network. This information may be used for the purpose of targeting advertisements on our website and third-party sites based on those interests.
Analytics Cookies	Analytics cookies allow us to understand more about how many visitors we have to our website, how many times they visit us, and how many times a user viewed specific pages within our website.
Essential Cookies	These are cookies that our website needs in order to function, and that enable you to move around and use the website and features. Without these essential cookies, the website will not perform as smoothly for you as we would like it to, and we may not be able to provide the website or certain services or features you request. Examples of where these cookies are used include: to determine when you are signed in, to determine when your account has been inactive, and for other troubleshooting and security purposes.

Where required by law, we obtain your consent for analytics and behavioral advertising cookies. Please note that you can opt-out of certain cookies at any time via our Cookie Preference Manager. If you disable cookies, your ability to use some features of the website may be limited. Any choices concerning cookies are browser and/or device specific. If you clear your cookies from your browser on any of your devices, your choices will need to be reset.

5. Sharing of Information

In addition to the specific situations discussed elsewhere in this Policy, we disclose information in the following situations:

• Affiliates and Acquisitions. We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.
• Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
• Other Disclosures without Your Consent. We may disclose information in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also share your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third party intermediary.
• Public. Some of our websites may provide the opportunity to post comments, or reviews, in a public forum. If you decide to submit information on these pages, that information may be publicly available.
• Partner Promotions, Webinars & Events. We may offer contests, sweepstakes, or other promotions with third party partners. If you attend one of our co-sponsored events, or decide to enter a contest, sweepstakes, or promotion that is sponsored by a third party partner the information that you provide will be shared with us and with them. Their use of your information is not governed by this privacy policy.  We may share your information with third-party service providers who assist us in delivering webinars and related services.
• Service Providers. We may share your information with service providers. Among other things service providers may help us to administer our websites and mobile applications, conduct surveys, provide technical support, process payments, and assist in the fulfillment of orders.
• De-identified Personal Data. We may disclose or use aggregated or de-identified data for any lawful purpose. De-identified information is generally not considered to be Personal Data under applicable laws.

6. Your Choices

Where available to you in accordance with applicable data protection law, you can make the following choices regarding your Personal Data:

• Access To Your Personal Data. You may request access to your Personal Data by contacting us at the address described below. If required by law, upon request, we will grant you reasonable access to the Personal Data that we have about you.
• Changes To Your Personal Data. We rely on you to update and correct your Personal Data. Most of our websites allow you to modify or delete your account profile. If our website does not permit you to update or correct certain information, you contact us at the address described below in order to request that your information by modified. Note that we may keep historical information in our backup files as permitted by law.
• Deletion Of Your Personal Data. Typically, we retain your Personal Data for the period necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. You may, however, request information about how long we keep a specific type of information, or request that we delete your Personal Data by contacting us at the address described below. If required by law we will grant a request to delete information, but you should note that in many situations we must keep your Personal Data to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
• Objection to Certain Processing. You may object to our use or disclosure of your Personal Data by contacting us at the address described below.
• Online Tracking. An opt-out preference signal is a signal that is sent by a platform, technology or mechanism on your behalf that communicates your choice to opt-out of the sharing for targeted advertisements or sale of your Personal Data. You can learn more about implementing opt-out preference signals by visiting, https://globalprivacycontrol.org/, or by exploring other developing technologies and services that offer this tool. We treat opt-out preference signals as valid requests to opt-out of targeted advertising.
• Promotional Emails. You may choose to provide us with your email address for the purpose of allowing us to send free newsletters, surveys, offers, and other promotional materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive. If you decide not to receive promotional emails, we may still send you Member and service related communications.
• Promotional Mailings. If at any time you do not want to receive offers and/or circulars from us you can remove yourself from our mailing lists by emailing us (our contact information is below) with "NO SNAIL MAIL" in the subject line along with your name, address and zip code. Please note that our mailings are prepared in advance of their being sent. Although we will remove your name from our mailing list after receiving your request, you may still receive mailings from us that had been initiated prior to your name being removed.
• Promotional Text Messages. If you receive a text message from us that contains promotional information you can opt-out of receiving future text messages by replying “STOP.”
• Revocation Of Consent. If you revoke your consent for the processing of Personal Data then we may no longer be able to provide you services. In some cases, we may limit or deny your request to revoke consent if the law permits or requires us to do so, or if we are unable to adequately verify your identity. You may revoke consent to processing (where such processing is based upon consent) by contacting us at the address described below.

Please address written requests and questions about your rights to privacy@sca.coffee. Note that, as required by law, we will require you to prove your identity. You will not have to pay a fee to access your Personal Data (or to exercise the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

7. How We Protect Personal Data

No method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your Personal Data from unauthorized access, use, or disclosure, we cannot guarantee the security of your Personal Data. In the event that we are required by law to inform you of a breach to your Personal Data we may notify you electronically, in writing, or by telephone, if permitted to do so by law. Some of our websites permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

8. How Long Do We Keep Your Personal Data

We will retain your Personal Data only for as long as it is necessary to fulfill the above-mentioned purposes, or as required to comply with applicable legal requirements. As for recruitment and pre-employment screening activities, we may need to keep the Personal Data longer because of a legal action, or an investigation involving SCA.

9. Other Important Information

The following additional information relates to our privacy practices:

• Transmission Of Information to Other Countries. As a multi-national company we transmit information between and among our affiliates. As a result, your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country. In order to provide adequate protection for the transfer of your Personal Data, we rely on the EU Standard Contractual Clauses and similar mechanisms to facilitate the transfer of content that contains Personal Data from the European Economic Arena (“EEA”) and the United Kingdom (UK), to jurisdictions not considered to provide adequate protection to Personal Data by the EEA and the UK, including the United States, where necessary and as required. If you have questions about such mechanisms you can contact us using the contact information below.
• Third Party Applications/Websites. Our websites may contain links and references to other websites administered by unaffiliated third parties. This Privacy Policy does not apply to such third party websites. When you click a link to visit a third party website, you will be subject to that website's privacy practices. We encourage you to familiarize yourself with the privacy and security practices of any linked third party websites before providing any Personal Data on those websites.
• Social Media Platforms and Networks. If you interact with us on social media or use features such as plugins, widgets, or and other tools made available by social media platforms or networks (including Meta, Instagram, Facebook, X, Google, LinkedIn, YouTube, WeChat, and Pinterest) in connection with our websites or mobile applications, we collect information that you disclose to us, or that the social media platforms disclose to us. For more information about the privacy practices of those social media platforms, please review the privacy policies and settings of the social media platforms and networks that you use.
• Changes To This Privacy Policy. We may change our privacy policy and practices over time. To the extent that our policy changes in a material way, the policy that was in place at the time that you submitted Personal Data to us will generally govern that information unless we receive your consent to the new privacy policy. Our privacy policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.
• Children. This website is not intended for or directed at children under the age of 18, or other relevant age of minority where you are located. In addition, we do not knowingly collect Personal Data from children under the age of 18. If you learn that your child has provided us with Personal Data without your consent and he/she is under the age of 18, please alert us at the contact information provided above. We will take prompt steps to remove the Personal Data from our systems.
• California Shine the Light. If you are a California resident, California law permits you to request certain details about how your Personal Data is disclosed to third parties for third parties’ direct marketing purposes. We do not disclose your Personal Data to third parties for their direct marketing purposes unless you elect that we do so. To make such a request, please send an email to privacy@sca.coffee, or write us at:
  
  California Shine the Light Request
  Specialty Coffee Association
  505 Technology Drive, Suite 340
  Irvine, California, 92618
  

10. Contact Us

If you have any questions, comments, or complaints concerning our privacy practices please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

Email: privacy@sca.coffee

Specialty Coffee Association
505 Technology Drive, Suite 340
Irvine, California, 92618
United States

If you are not satisfied with our response, you may have a right to lodge a complaint with your local supervisory authority.