Privacy Policy

Crema and Coffee ("we," "us," or "our") operates this website and related online services for our coffee brand, Training Academy, cafe, corporate solutions, product catalog, and roastery waitlist based in Dhaka, Bangladesh.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, create a student account, submit forms, or otherwise interact with our services.

By using our website, you agree to the practices described in this policy. If you do not agree, please do not use our services.

We collect information that you provide directly, that is generated through your use of our services, and that is necessary to operate the site securely.

When you register for a student account, we may collect your full name, date of birth, gender, profession, mobile number, optional email address, and a password (stored securely by our authentication provider, not in plain text).

If you sign in with a mobile number only, we may associate your account with an internal authentication email used solely for login purposes.

When you enable email verification or email-based two-factor authentication, we process your email address and send one-time verification codes to that address.

Enrollment in courses and issuance of certificates are linked to your account and may include your name, course details, completion status, and certificate verification codes.

Corporate quote requests: full name, mobile number, company or organization name, type of service requested, and your message.

Roastery waitlist: full name and mobile number.

We do not require an email address for these forms unless you choose to provide one elsewhere on the site.

When you use our website, our servers and hosting infrastructure may log technical information such as IP address, browser type, device type, pages visited, and timestamps. This helps us maintain security and troubleshoot issues.

We do not currently use third-party advertising or analytics cookies on this website.

We use personal information to provide and improve our services, including:

Operating student accounts, course enrollments, certificates, and the student dashboard;

Responding to corporate quote requests and roastery waitlist sign-ups;

Sending transactional emails such as verification codes, login security codes, and internal notifications about form submissions;

Protecting our website, users, and systems from fraud, abuse, and unauthorized access;

Complying with applicable laws and legitimate business record-keeping requirements.

Our website uses cookies and similar storage technologies that are necessary for the site to function:

Authentication session cookies managed by our database and authentication provider (Supabase) to keep you signed in to student and admin areas;

Short-lived cookies used to confirm email-based two-factor authentication after sign-in (student_2fa_verified for students; admin_2fa_verified for administrators).

We do not use cookies for targeted advertising. You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using account features.

We do not sell your personal information. We may share information only as needed to run our services:

Infrastructure and database hosting (self-hosted Supabase on our servers) to store accounts, profiles, enrollments, forms, and certificates;

Email delivery (Gmail SMTP via Nodemailer) to send verification codes, security codes, and operational notifications;

Embedded maps (Google Maps) when you view location content on our site—Google may collect data according to its own policies.

Fonts are loaded via Google Fonts through our hosting setup; Google may receive technical request data.

We may also disclose information if required by law, court order, or to protect the rights, safety, or property of Crema and Coffee, our users, or others.

We retain personal information for as long as your account is active or as needed to provide services you request.

Quote requests, waitlist entries, and business correspondence may be kept for a reasonable period for follow-up, administration, and legal or accounting purposes.

Certificate and enrollment records may be retained to support verification and our training records.

We may delete or anonymize information when it is no longer needed, subject to any legal obligations to retain records.

We use reasonable administrative, technical, and organizational measures to protect personal information, including access controls, secure hosting, and industry-standard authentication practices.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Depending on applicable law, you may request access to, correction of, or deletion of personal information we hold about you.

Students can update certain profile details and security settings (such as email verification and two-factor authentication) through the student dashboard where those features are available.

To make a privacy-related request, contact us using the phone number or WhatsApp listed in the Contact section below. We may need to verify your identity before processing requests.

Our Training Academy may be used by individuals under 18 with appropriate consent. If you are under 18, you should use our student services only with the knowledge and consent of a parent or legal guardian.

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected such information, please contact us so we can take appropriate steps.

We are based in Bangladesh and process personal information primarily on infrastructure located in or controlled by us (including self-hosted services on our servers).

If you access our website from outside Bangladesh, you understand that your information may be processed in Bangladesh.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised.

Continued use of the website after changes are posted constitutes acceptance of the updated policy, to the extent permitted by law.

For privacy questions or requests regarding your personal information, contact Crema and Coffee:

Address: H#31, R#10, Nikunja 2, Khilkhet, Dhaka 1229, Bangladesh

Phone: 01794943494

WhatsApp: available via the contact link on our website

For terms governing use of the website, see our Terms of Service.