Your Privacy Rights
Do not sell or share my personal information.
Submit a request below to opt out of the "sale" or "sharing" of your personal information (CCPA / CPRA), to object to processing for targeted advertising, or to exercise any GDPR / UK GDPR right (access, deletion, correction, portability, restriction). We respond to verifiable requests within 30 days (45 days under CCPA, extendable once with notice).
How to send a request
We don't use a third-party intake form because we don't want your request collected by another vendor. Email is simpler and keeps the request between us:
- Email info@roaststation.com from the email address you use with us (newsletter subscriber, account holder, or order recipient).
- Subject line:
PRIVACY REQUEST. - In the body, tell us which right(s) you want to exercise: opt-out of sale/sharing, access, deletion, correction, portability, restriction, or objection. You can include multiple.
- If you're sending the request on behalf of someone else (authorized agent), attach written authorization signed by the data subject.
Browser-level opt-outs we honor
- Global Privacy Control (GPC): if your browser sends the Sec-GPC header, we treat it as an opt-out of sale/sharing for that browser. If the signal can be matched to your account, we apply it there too.
- Do Not Track (DNT):if your browser sends a DNT header, we don't load analytics or advertising scripts at all.
- Cookie banner — Essentials Only: clicking the “Essentials Only” button at the bottom of the page prevents Google Analytics and Google AdSense from loading on subsequent page views.
What counts as a verifiable request
For most requests we'll need to confirm the email address on file. For deletion of account data we may also ask you to confirm the last four digits of the payment method on file or other information that proves you are the account holder. We won't ask for sensitive identifiers we don't already have.