Privacy policy

This English text is a courtesy translation. The Spanish version is the legal text and prevails. Spanish version

Last updated: October 2026.

Who is the data controller

• Data controller (responsable del tratamiento): THE COFFEE PROJECT OF 69 SL, single-member limited company (sociedad limitada unipersonal), tax ID (NIF) B19853563.
• Address: Avenida Virgen del Carmen, 2, 3.º A, 03188 Torrevieja (La Mata), Alicante, España.
• Registration details: Alicante Commercial Registry (Registro Mercantil de Alicante), sheet (hoja) A-192887.
• Trade name: Madrid Specialty Coffee.
• Contact: WhatsApp and phone +34 665 74 74 63, or the contact form. For privacy matters, write “Privacidad” (privacy) at the start of your message.

Rules we apply

Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR; in Spanish RGPD), Organic Law 3/2018 (Ley Orgánica, LOPDGDD) and Law 34/2002 (LSSI-CE).

What data we use, what for and for how long

Enquiries and quotes

• Data: name, email, phone (if you give it) and your message, through the contact form or WhatsApp.
• What for: to reply to you and, if you ask, to prepare a quote for you.
• Why we can: your consent when you write to us and, if you ask for a quote, the steps prior to a contract.
• How long: as long as needed to deal with your enquiry. After that, we keep the data blocked (bloqueados) for as long as liabilities may arise.

Purchases in the shop

• Data: name, email, phone, delivery address, products bought and amount. If you ask for an invoice, your tax details.
• What for: to take payment, prepare and send your order, deal with incidents and issue the invoice.
• Why we can: it is necessary to perform the purchase contract.
• How long: while the relationship lasts and afterwards for the periods required by commercial and tax rules (as a general rule, six years).

Card payment

• You pay on Stripe's page. We do not see or store your card number.
• Stripe tells us whether the payment has been made, as well as your name, email, phone and address.
• To prevent fraud, Stripe may use data as an independent controller (responsable independiente). See Stripe's privacy policy.
• Stripe may use automated anti-fraud systems that, in some cases, reject a payment. If you think it is a mistake, write to us.

Withdrawal, returns and complaints

• Data: the data you give us in the withdrawal form or in your complaint (name, email, order number, products and notes).
• What for: to handle your return, the refund or your complaint.
• Why we can: to perform the contract and to meet our legal consumer obligations.
• How long: the legal retention periods.

Newsletter (only if you subscribe)

• Data: your email.
• What for: to send you news from Madrid Specialty Coffee.
• Why we can: your consent, which is not ticked in advance. You can withdraw it at any time.
• How long: until you unsubscribe.

Security and operation of the website

• Data: technical server data, such as the IP address, the date and the page visited.
• What for: to keep the website secure and detect abuse.
• Why we can: our legitimate interest (interés legítimo) in protecting the site.
• How long: the short period applied by the hosting provider.

We do not use your data for third-party advertising and we do not sell it.

Who else receives your data

• Stripe Payments Europe, Ltd.: processes the payment.
• Netlify, Inc.: hosts the website and receives the forms.
• WhatsApp (Meta): only if you write to us on WhatsApp.
• Transport companies: receive your name, address and phone to deliver your order.
• Tax advisers and accountants: for invoicing and tax obligations.
• Public administrations and authorities: when the law requires us to.

Transfers outside the European Union

Some providers, such as Netlify, Stripe or Meta, may process data outside the European Economic Area. In those cases we require appropriate safeguards, such as the European Commission's standard contractual clauses (cláusulas contractuales tipo) or the EU–US Data Privacy Framework, depending on each provider.

External resources on the website

The fonts and the animation libraries are loaded from our own server. The website does not request resources from third parties to display, except when you go to Stripe to pay or open a link to WhatsApp.

The cart is stored in your own browser and is not sent to our servers until you pay. More information in the cookie policy.

Your rights

• You can ask us for access to your data, its rectification or erasure, to restrict or object to its use, and to receive it in a format you can reuse (portability) (derechos de acceso, rectificación, supresión, limitación, oposición y portabilidad).
• You can withdraw your consent whenever you like. This does not affect what we did before.
• To exercise them, use the contact form with the text “Privacidad” or write to us on WhatsApp at +34 665 74 74 63. State your name and what you are asking for. We may ask you to confirm who you are.
• We reply within one month.
• If you are not satisfied, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.

Minors

This website is not aimed at children under 14. If you think a minor has given us their data, write to us and we will delete it.

Changes to this policy

We may update this policy. The version in force is the one published on this page.