last updated 13 July 2026
We're a coffee shop, not a data company. We collect the least we can get away with, we use it to make you a drink and to call your name, and we don't sell it to anybody. That's the whole policy — the rest is detail.
What we collect
When you order as a guest: your name and phone number — so we can call out your order — plus what you ordered and any note you added.
When you create an account: your email address, a password (stored encrypted; we never see it), and the same name and phone number. We also record when you agreed to our terms, and whether you ticked the box for news and offers.
When you pay by card: nothing. Your card details go straight to Square, our payment processor, and never touch our servers. We only ever see that a payment succeeded.
Automatically: basic technical information your browser sends, and — at signup only — your IP address. We use that solely to spot someone creating a pile of fake accounts to farm the store credit. We don't use it to track you around the internet.
What we do with it
- Make your drink and give it to the right person.
- Show you your order history, if you have an account.
- Keep track of your points, and stop people abusing the scheme.
- Contact you if there's a problem with an order.
- Send you news and offers — only if you specifically asked us to.
That's it. There is no sixth thing.
What we don't do
- We don't sell your data. Not to anyone, not ever, not for any price.
- We don't share it with advertisers or data brokers.
- We don't run advertising trackers or third-party ad pixels on this site.
- We don't email you marketing unless you ticked the box. Order updates aren't marketing.
Who else touches it
Three companies help us run the shop, and each sees only what it needs to:
- Supabase — stores our accounts and orders (the database).
- Square — processes card payments and runs the register. Square handles your card details under its own privacy policy; we never receive them.
- Netlify — serves the website itself.
None of them is allowed to use your information for their own purposes.
How long we keep it
Order records: as long as we need them for our accounts and tax, which is generally a few years. Account details: until you ask us to delete them. Marketing preferences: until you change them.
Your rights
You can ask us, at any time, to:
- tell you what we hold about you
- correct anything that's wrong
- delete your account and personal details
- send you a copy of your data
- stop emailing you
Email hello@kinespresso.com and we'll sort it out. We won't make you jump through hoops, and we won't treat you differently for asking. If you're a Virginia resident, you also have rights under the Virginia Consumer Data Protection Act, and you may appeal if we turn a request down.
Cookies
We use one cookie, and it's the one that keeps you signed in. We don't use advertising or tracking cookies. Your basket is stored in your own browser, on your own device — it never leaves it until you place the order.
Children
The site isn't for children under 13, and we don't knowingly collect their information. If you think we have, tell us and we'll delete it.
Changes
If we change this policy we'll update the date at the top, and we'll tell you properly if the change is a significant one.
Kin Espresso Bar · 145 Church St NW, Vienna, VA 22180, USA · hello@kinespresso.com · See also our terms of service.