Privacy Policy

Mocca Malabar Coffee ("we", "us", "our") respects your privacy and is committed to protecting the personal data of visitors to this website and of our business contacts. This Privacy Policy explains what personal data we collect, why, and how it is handled. It is written to comply with the Swiss Federal Act on Data Protection (FADP), as revised and in force since 1 September 2023, and its implementing ordinance (Data Protection Ordinance, DPO). Where we process personal data of individuals located in the European Union or United Kingdom, we also aim to align with the principles of the GDPR / UK GDPR.

1. Who is responsible

Controller: Mocca Malabar Coffee
Location: Basel, Switzerland
Email: moccamalabar@gmail.com
Phone: +41 79 000 00 00

For any question about this policy or about your personal data, please contact us using the details above.

2. What personal data we collect

We collect personal data only when you actively provide it to us, specifically:

• Contact form data: name, company/roastery name, email address, approximate order volume, and any message content you submit via our contact form.
• Direct correspondence: information you share with us by email or phone, such as sourcing preferences, shipping destinations, and business details.
• Technical / usage data: limited technical information such as browser type, device type, pages visited, and approximate location (derived from IP address), collected via cookies and similar technologies where enabled. See our Cookie Policy for details.

We do not knowingly collect sensitive personal data (e.g. health, religious, or political information) and our website is not directed at children.

3. Why we process your data (purposes and legal basis)

• Responding to enquiries: to answer your questions, provide samples, quotes, and sourcing information (based on your consent / pre-contractual measures).
• Business relationship: to manage contracts, orders, shipping, and invoicing with wholesale partners (based on contract performance).
• Website operation and security: to keep the site functioning correctly and securely (based on our legitimate interest).
• Legal compliance: where required by Swiss law, e.g. accounting and export/customs recordkeeping.

4. Sharing of personal data

We do not sell personal data. We may share personal data with:

• Service providers who support our operations (e.g. email provider, hosting provider, logistics and shipping partners), acting under our instructions.
• Customs, tax, or other authorities where legally required.
• Professional advisors (e.g. accountant, legal counsel) bound by confidentiality.

5. International data transfers

As we work with roasters and service providers outside Switzerland, personal data may be transferred abroad, including to countries that may not provide a level of data protection equivalent to Switzerland. Where this occurs, we take reasonable steps to ensure an adequate level of protection, for example through standard contractual clauses or by relying on the recipient country's adequacy status, as recognised under Swiss data protection law.

6. Data retention

We retain personal data only for as long as necessary for the purposes described above, typically for the duration of our business relationship plus any period required by Swiss law (e.g. commercial and accounting records are generally kept for 10 years). Enquiry data that does not lead to a business relationship is deleted or anonymised within a reasonable period.

7. Your rights

Under the Swiss FADP (and GDPR, where applicable), you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate data;
• Request deletion of your data, subject to legal retention obligations;
• Object to certain processing, or request restriction of processing;
• Request a copy of your data in a portable format, where applicable;
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at moccamalabar@gmail.com. If you believe your data has been processed unlawfully, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page indicates when it was last revised.

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. We recommend having it reviewed by a qualified Swiss data protection lawyer before relying on it for full legal compliance.