Privacy · Opt-out
Do not sell or share my personal information.
Submit a request to opt out of the “sale” or “sharing” of your personal information (CCPA / CPRA), to object to processing for targeted advertising, or to exercise a GDPR / UK GDPR right (access, deletion, correction, portability, restriction). We respond to verifiable requests within 30 days (45 days under CCPA, extendable once with notice).
How to send a request
We don’t use a third-party intake form. Email keeps the request between us.
- Email info@roaststation.com from the address you use with us (list, account, or order).
- Subject line: PRIVACY REQUEST.
- In the body, say which right(s) you want: opt-out of sale/sharing, access, deletion, correction, portability, restriction, or objection.
- If you are sending the request as an authorized agent, attach written authorization signed by the data subject.
Browser-level opt-outs we honor
- Global Privacy Control (GPC): if your browser sends the Sec-GPC header, we treat it as an opt-out of sale/sharing for that browser. If the signal can be matched to your account, we apply it there too.
- Do Not Track (DNT): if your browser sends a DNT header, we don’t load analytics or advertising scripts.
- Cookie banner — Essentials Only: that button prevents Google Analytics and Google AdSense from loading on later views.
What counts as a verifiable request
For most requests we need to confirm the email on file. For deletion of account data we may also ask you to confirm the last four digits of the payment method on file, or other information that proves you are the account holder. We won’t ask for sensitive identifiers we don’t already have.