Privacy Policy

Black Rifle Coffee Company’s Privacy Policy describes how personal information is handled when customers visit its website, purchase products, create accounts, use online features, communicate with customer service, or otherwise interact with its digital services. The policy explains the types of information that may be collected, the purposes for processing that information, the circumstances in which it may be shared, and the choices that may be available to individuals under applicable privacy laws. The company uses Shopify to support parts of its online store and related services, meaning certain information may also be processed through Shopify’s technology and service infrastructure.

Personal information generally refers to information that can identify an individual or reasonably be connected with a particular person. Information that has been sufficiently anonymized or de-identified so that it can no longer reasonably be associated with an individual is generally treated differently from identifiable personal information. The information collected may vary depending on how a customer uses the website, which services are accessed, and the privacy requirements that apply in the customer’s location.

Customers may provide information directly when they register for an account, place an order, complete a form, contact customer support, submit feedback, or participate in other activities. This information may include names, email addresses, telephone numbers, billing details, shipping information, account credentials, preferences, and other information necessary to provide requested services. Transaction-related records may also include details about products viewed, purchased, returned, exchanged, canceled, saved, or added to a cart or wishlist.

Payment information may be processed as part of completing transactions. Depending on the payment method used, this may involve payment card information, financial account details, transaction records, payment confirmations, or other information associated with a purchase. Customers should take reasonable steps to protect account credentials and should avoid sharing passwords or other login information with unauthorized individuals.

Technical and usage information may also be collected automatically when customers interact with the website. This can include information about the browser, device, operating system, network connection, IP address, identifiers, and other technical characteristics. The company may also collect information about how visitors navigate the website, which pages or features they use, and how they interact with available services.

Cookies and comparable technologies may be used to support website functionality, understand usage patterns, remember preferences, improve performance, and support marketing activities. These technologies can help the company recognize returning visitors, maintain shopping functionality, analyze interactions, and provide features that are more relevant to customer interests. Depending on the customer’s jurisdiction, certain controls may be available for managing these technologies or limiting particular forms of data use.

Personal information may be processed for a variety of operational purposes. These purposes can include completing purchases, processing payments, fulfilling orders, coordinating shipping, handling returns and exchanges, maintaining accounts, sending transaction notifications, providing customer support, and improving the overall shopping experience. Information may also help the company understand customer preferences and develop recommendations or personalized features.

Marketing is another potential use of customer information. Depending on applicable law and the choices available to customers, promotional communications may be delivered through email, text messages, postal mail, online advertising, or similar channels. Advertising and promotional content may take account of previous purchases, browsing behavior, products placed in shopping carts, interactions with the website, and other permitted information.

The company may also use information for security and fraud prevention. Processing may help authenticate accounts, identify suspicious transactions, investigate potentially harmful activity, prevent unlawful behavior, protect website systems, and maintain a safer environment for customers. These measures are intended to reduce risks involving unauthorized access, fraud, abuse, or other security concerns.

Customer information can be used when responding to questions, requests, complaints, and support inquiries. Communications with customer service may contain information voluntarily provided by customers concerning orders, accounts, products, subscriptions, or other matters. Such information can help representatives understand a customer’s situation and provide appropriate assistance.

Information may be shared with service providers when necessary to operate the business and provide requested services. These organizations can include Shopify, payment processors, technology vendors, analytics providers, cloud service companies, fulfillment partners, shipping providers, customer support providers, and other contractors supporting business operations. Depending on the service involved, these providers may process information on behalf of the company or according to their own applicable privacy practices.

Advertising and personalization partners may also receive certain information where permitted. Some advertising services can involve information about online activity across different websites, merchants, or digital environments. Depending on local law, customers may have the ability to limit certain forms of targeted advertising or control how information is used for advertising purposes through available privacy settings.

Information may also be disclosed when customers request or authorize a particular disclosure. For example, customers may choose to use social media tools, account integrations, third-party services, or other features that require information to be transmitted outside the company’s systems. Information may also be shared within affiliated businesses or related corporate entities when necessary for legitimate business purposes.

Business transactions can create additional circumstances in which personal information may be transferred. If the company becomes involved in a merger, acquisition, restructuring, financing, bankruptcy, reorganization, or sale of assets, information associated with the affected business operations may be transferred as part of that transaction. Disclosure may also occur when required by law, legal proceedings, subpoenas, court orders, regulatory requirements, or other valid governmental requests.

Shopify plays a significant role in supporting the company’s online commerce environment. Information submitted through the website may be transmitted to Shopify and other technology providers involved in operating the store. Shopify may independently process information relating to customers’ interactions with its services, merchants, and technology. Because these providers may operate in different countries, information can sometimes be transferred internationally.

Customers should understand that third-party websites and services may have their own privacy practices. The company’s website may contain links to external websites, applications, social platforms, or other services that are operated independently. Once customers leave the company’s digital environment, the privacy policies, security procedures, and terms of those third parties may apply. Information posted through public or semi-public platforms may also become visible to other users and may be handled according to the rules of those platforms.

The company’s services are not intended for children. The policy states that the company does not knowingly collect personal information from children below the applicable age of majority. Parents or guardians who believe that a child has submitted information may contact the company to request appropriate action, including deletion where applicable. The company also states that, as of the policy’s effective date, it does not have actual knowledge that it sells or shares personal information belonging to individuals under sixteen in circumstances covered by applicable privacy laws.

Security measures are used to protect personal information, although no online system can be guaranteed to be completely secure. Information transmitted over the internet may face risks while moving between systems. Customers should therefore avoid sending confidential information through unsecured channels and should take appropriate precautions when managing account credentials and other sensitive details.

Information is retained for periods determined by business and legal requirements. Retention considerations may include maintaining customer accounts, providing requested services, completing transactions, resolving disputes, meeting regulatory obligations, enforcing agreements, and protecting business interests. Once information is no longer required for applicable purposes, it may be deleted, anonymized, or otherwise handled according to the company’s retention practices and legal obligations.

Privacy rights can differ depending on where a customer lives. Where applicable, individuals may be able to request access to personal information, seek correction of inaccurate information, request deletion, obtain a copy of certain information, or request data portability. Some jurisdictions may also provide rights concerning targeted advertising, the sale or sharing of personal information, or other specific processing activities.

Customers can manage certain promotional communications through unsubscribe options included in marketing messages. Opting out of promotional communications does not necessarily stop service-related messages. The company may still need to contact customers about orders, transactions, accounts, security matters, or other important non-promotional issues.

Some privacy requests may require identity verification before they can be completed. Where legally permitted, customers may also authorize another individual to submit a request on their behalf, although additional verification or documentation may be necessary. The company states that customers will not be treated unfairly for exercising privacy rights that are available under applicable law.

Individuals who have concerns about how their information has been handled may contact the company to raise a privacy issue or submit a complaint. Depending on the applicable jurisdiction, customers may also have the right to appeal certain decisions or contact a relevant privacy or data protection authority.

Personal information may be stored or processed in countries other than the customer’s country of residence. When information originating from regions such as the European Economic Area or the United Kingdom is transferred internationally, appropriate legal safeguards may be used when required. These safeguards can include recognized contractual mechanisms or other lawful transfer arrangements.

The Privacy Policy may change as the company’s operations, technology, services, legal obligations, or privacy practices evolve. Updated versions are published through the website, with the applicable revision or effective date changed when appropriate. Additional notification may be provided when required by law.

Customers who have questions about privacy practices, personal information, or available privacy rights can contact the company using the customer support information provided in the policy. Privacy-related requests should contain enough information for the company to understand the issue and process the request, while customers should avoid unnecessarily submitting confidential or sensitive information through ordinary communications.