Privacy Policy

Last updated: May 10, 2026

1. Who we are

KAWASILI is the export division of Shamba Kahawa, headquartered in Kayanza, Burundi. We process and export specialty green coffee to international roasters. Contact: info@kawasili.com.

2. Data we collect

Inquiry data: name, company, country, email, message, volume — when you submit a contact, sample, quote or partnership form.
Newsletter: email address and source page when you subscribe to crop updates.
Technical data: hashed IP address (for spam protection), browser user agent, page visited.
Analytics (with consent): anonymized page views via Google Analytics, only after you accept cookies.

3. How we use your data

Reply to your inquiry and provide samples, quotes or commercial information.
Send harvest and crop updates if you subscribed to the newsletter.
Detect and prevent spam, abuse and fraudulent submissions.
Improve our website and content based on aggregated analytics.

4. Legal basis (GDPR)

We process your data on the basis of (a) your consent (newsletter, analytics cookies), (b) legitimate interest (responding to a B2B inquiry, security), and (c) contract performance when you become a customer.

5. Sharing & sub-processors

We do not sell your personal data. We share it only with vetted sub-processors:

Lovable Cloud (database & hosting) — EU/US
Google reCAPTCHA (spam protection) — US
Google Analytics (with consent) — US
Our SMTP email provider for transactional notifications

6. Retention

Lead inquiries: up to 5 years for commercial follow-up, then deleted.
Newsletter subscribers: until you unsubscribe.
Rate-limit logs (hashed IPs): 7 days.
Audit logs: 12 months.

7. Your rights

Under GDPR, CCPA and similar laws you have the right to:

Access the personal data we hold about you.
Correct or delete it.
Restrict or object to processing.
Receive a portable copy of your data.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email our privacy team at privacy@kawasili.com (or info@kawasili.com). We respond within 30 days.

Requesting account & data deletion

To delete your personal data, send an email to privacy@kawasili.com from the address associated with your inquiry, with the subject line "Data deletion request". Include any company or reference details that help us locate your records. We will:

Acknowledge your request within 5 business days.
Verify your identity (we may ask one follow-up question).
Permanently delete your inquiry, newsletter and account data within 30 days.
Confirm completion by email. Some records may be retained where required by law (e.g. tax, anti-fraud).

8. Cookies

We use a small number of essential cookies to operate the site, plus optional analytics cookies that load only after you accept them via the cookie banner. You can change your choice anytime by clearing site data.

9. International transfers

Some of our sub-processors are located in the United States. Where applicable, transfers are covered by the EU Standard Contractual Clauses or equivalent safeguards.

10. Updates

We may update this policy. The "Last updated" date above always reflects the current version.