Privacy Policy

Effective September 8, 2026

This policy explains what Soko Fresh Foods collects when you use this site, why, and what you can ask us to do about it. It is written to be read rather than to be survived.

Who we are

Soko Fresh Foods operates this site and is the business responsible for the personal information described here. You can reach us at hello@sokofreshfoods.com, or by post at 5073 Rowan Drive, San Ramon, CA 94582.

Our online store runs on Shopify. When you buy something, part of that transaction happens on Shopify’s systems rather than ours, and Shopify’s own privacy policy applies to it alongside this one.

What we collect

We collect only what a small coffee business needs to sell coffee and answer messages. We do not run advertising or analytics on this site, and there is no tracking pixel on any page.

Order detailsName, shipping and billing address, email, phone number and what you bought. Collected at checkout so we can take payment and send you coffee.
Payment detailsHandled entirely by Shopify and its payment processors. Card numbers are never sent to this website and we never see or store them.
Your cartA single cookie holding an anonymous cart identifier, so your bag survives a page reload. It holds no name, email or card data.
Messages you send usWhatever you type into the contact or event enquiry forms — typically name, email, phone, and the details of your event. Used to reply to you and, for events, to quote.
Newsletter signupYour email address, if you choose to give it, so we can tell you when a lot lists.
Technical logsStandard server records such as IP address, browser type and the pages requested. Generated automatically by our hosting provider and used for security and diagnosing faults.

How we use it

We use the information above to:

  • process and ship your order, and contact you about it
  • answer your messages and quote for events
  • send the newsletter, if you asked for it
  • keep the site working, secure and free of fraud
  • meet our tax, accounting and other legal obligations

We do not use your information to build a profile of you, and we do not make automated decisions about you.

Cookies

This site sets one cookie of its own: an identifier for your shopping cart. It is strictly necessary — without it the site cannot remember what you put in your bag — and it carries no personal information.

Shopify sets its own cookies during checkout, which are necessary for the order and for fraud prevention. We do not set advertising, analytics or social media cookies anywhere on this site, which is why you are not being asked to accept any.

Who we share it with

We do not sell your personal information, and we do not share it for anyone else’s advertising. We pass it to service providers only where they need it to do a job for us:

  • Shopify, which runs our store, checkout and order records
  • payment processors, which take the payment
  • shipping carriers, which need your address to deliver
  • Shopify, which sends the newsletter
  • our hosting provider, which serves the site

We may also disclose information where the law requires it, or to protect our rights, safety or property.

How long we keep it

Order records are kept for as long as tax and accounting rules require, which is generally seven years. Messages are kept while they are useful for answering you and then deleted. Newsletter addresses are kept until you unsubscribe.

Your rights

Whatever jurisdiction you are in, you can ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Write to hello@sokofreshfoods.com and we will respond within the time the law allows, and sooner in practice.

You can unsubscribe from the newsletter using the link in any email we send. That does not affect emails about an order you have placed, which we need to send you.

We will not treat you differently for exercising any of these rights.

California residents

If you live in California, the CCPA as amended gives you the right to know what personal information we collect and why, to request a copy of it, to have it corrected or deleted, and to opt out of its sale or sharing.

We do not sell or share personal information as those terms are defined in that law, so there is nothing here for you to opt out of. To exercise any of the other rights, write to hello@sokofreshfoods.com. We may need to verify who you are before we act, and you may use an authorised agent.

Children

This site is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, write to hello@sokofreshfoods.com and we will delete it.

Security

The site is served over HTTPS, and payments and order records sit with Shopify, which maintains PCI DSS compliance for the payment side. No method of transmission or storage is perfectly secure, and we will not claim otherwise.

Changes to this policy

If we change how we handle personal information we will update this page and move the effective date at the top. Where the change is significant we will say so more visibly than that.

Contact us

Questions about this policy, or about anything we hold: hello@sokofreshfoods.com, or Soko Fresh Foods, 5073 Rowan Drive, San Ramon, CA 94582.

PLACEHOLDER CONTENT — This deployment cannot honour 2 claims the policy makes: RESEND_API_KEY is unset, so the contact and events forms return an error rather than sending (lib/mail.ts). SHOPIFY_ADMIN_ACCESS_TOKEN is unset, so newsletter signups are not recorded against a Shopify customer (lib/subscribe.ts). A lawyer has not signed this off yet — set LEGAL_REVIEW_DONE in lib/legal.ts once one has.