My Primavera Account

Privacy statement

This statement explains what personal data we process when you use My Primavera Account (account.primavera.coffee), why, and what your rights are. Last updated: 11 November 2026.

Who we are

The portal is run by Primavera Coffee B.V., Krelis Louwenstraat 1, Ruimte D03, 1055 KA Amsterdam, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 82345163. Primavera Coffee B.V. is the controller for the personal data described here. Customers of our sister companies, Primavera Coffee LLC (United States) and Third Wave Coffee Source (United Kingdom), use the same portal; the company you buy from also uses your data to serve you.

Questions or requests about your data: info@primavera.coffee.

What we process

• Account and company details: company and legal name, contact name, email addresses, phone number, invoicing, delivery and sample addresses, VAT number, Instagram handle, and the delivery and sample preferences you give us. You can see and update most of these under My Information.
• Login details: the email address you log in with, one-time login codes (kept for 10 minutes), a session cookie, and the date and time of your last login.
• Orders and samples: your reservations, order requests (including the email and phone number you enter), releases and invoice status, samples sent to you, and the feedback and comments you give on them.
• Newsletter: whether you chose to subscribe, and your email address if you did.
• Technical data: like every website, our hosting provider receives your IP address and browser details when you load a page, to deliver it and protect the service against abuse.

Why, and on what legal basis

• To run your account and our business with you (performance of a contract, art. 6(1)(b) GDPR): logging you in, showing your coffees, orders, invoices and samples, handling order requests and sample feedback, and emailing you about them.
• To keep records we are required to keep (legal obligation, art. 6(1)(c)): invoices and order records for tax purposes, and traceability records under EU rules such as the deforestation regulation.
• To keep the portal secure and improve it (legitimate interest, art. 6(1)(f)): login limits, security logs, recording when an account was last used, and counting page views without cookies (see below).
• To send our newsletter and offer list (consent, art. 6(1)(a)): only if you tick the box. You can unsubscribe at any time in the portal or with the link in every email.

Cookies and analytics

The portal sets one cookie: a session cookie that keeps you logged in for up to 7 days. It is strictly necessary, so it needs no consent. We do not use advertising or tracking cookies.

We count page views with Cloudflare Web Analytics, which works without cookies and does not identify you.

Because the portal doesn’t track you across other sites, it doesn’t respond differently to browser “Do Not Track” signals.

Who we share it with

We don’t sell your data. We use these service providers, who process data on our behalf under a data processing agreement:

• Airtable: our customer and order database, where the portal reads and stores your data.
• Cloudflare: hosting of the portal, login sessions, and cookieless page statistics.
• Resend: sending emails from the portal, such as login codes and confirmations.
• Mailchimp (Intuit): our newsletter, only if you subscribe.
• Google Workspace: our team’s email, where notifications about your orders and samples arrive.
• Xero: our accounting system; invoice links in the portal open there.

When you sign up, we may check your VAT number with the European Commission’s VIES service. We also share data with couriers and warehouses where needed to deliver your coffee and samples.

Several of these providers are based in, or use servers in, the United States. Where personal data leaves the European Economic Area, we rely on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s standard contractual clauses.

How long we keep it

• Login codes: 10 minutes. Login sessions: up to 7 days, or until you log out.
• Account and company details: for as long as we do business together, and up to 2 years after your last order or sample, unless you ask us to delete them sooner.
• Invoices and order records: 7 years, as required by Dutch tax law.
• Newsletter: until you unsubscribe.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to how we use it, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Email info@primavera.coffee and we’ll respond within one month. Much of your data you can also view and correct yourself under My Information.

If you’re unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the supervisory authority where you live (in the UK, the ICO).

Security

The portal has no passwords: you log in with a one-time code sent to your email address. All traffic is encrypted, the session cookie can’t be read by scripts, and access to our database is limited to the people and systems that need it.

Changes

We update this statement when the portal changes. The date at the top shows the latest version.