Privacy Policy
Grit & Growth Coffee Consulting Effective Date: August 10, 2026 Last Updated: August 10, 2026
Grit & Growth Coffee Consulting is a d/b/a of Arthur Shalagin Consulting Inc. ("Grit & Growth," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit gritandgrowth.coffee (the "Site"), contact us, request samples, place an order, receive outreach from us, or communicate with us by email, phone, or text message.
This policy also serves as our Notice at Collection under California law.
By using the Site or providing information to us, you agree to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide Directly
This includes your name, business or company name, job title, email address, mailing address, shipping address, and phone number. It also includes information you submit when you request a sample, ask for pricing, place an order, subscribe to updates, or otherwise contact us.
1.2 Transaction Information
When you place an order, we collect billing and shipping details, order contents, and payment confirmation records. Payment card and bank account details are collected and processed by our payment processor, not by us. We do not store full payment card numbers or bank account numbers on our systems.
1.3 Communications
We retain email correspondence, text messages, call notes, meeting notes, and other records of our communications with you for business and recordkeeping purposes.
1.4 Information Collected Automatically
When you visit the Site, we may collect your IP address, browser type, device type, operating system, referring URL, pages viewed, and the dates and times of your visits. This information is collected through server logs, cookies, and similar technologies.
1.5 Information We Obtain From Other Sources
We are a business-to-business green coffee importer, and we identify potential customers through commercial research. We may collect business contact information about individuals from sources other than the individual, including:
- Publicly available business websites, including company staff, contact, and wholesale pages
- Publicly available business directories and trade association listings
- Publicly available social media and professional networking profiles
- Third-party business contact data and sales intelligence providers
- Trade shows, industry events, and cupping sessions
- Referrals from mutual business contacts
The information we obtain this way is business contact information: name, job title, employer, business email address, business phone number, business address, and publicly stated information about the employer's coffee sourcing, offerings, and operations. We store this information in our customer relationship and prospect management systems and use it to determine whether our green coffee offerings are a potential fit and to contact you about them.
If you received an unsolicited business communication from us and want to know what information we hold about you, where we obtained it, or want it deleted, contact us using the details in Section 15. We will honor the request.
2. How We Use Information
We use the information we collect to:
- Respond to inquiries, sample requests, and pricing questions
- Process, fulfill, and ship orders
- Coordinate logistics with our warehouse, freight, and customs partners
- Send transactional messages such as order confirmations, shipment notices, sample tracking, and invoices
- Send business communications about lot availability, harvest updates, and offerings, where you have not opted out
- Identify and contact prospective business customers
- Maintain business records, including accounting, tax, and customs documentation
- Operate, maintain, secure, and improve the Site
- Comply with legal, regulatory, and contractual obligations
3. Text Messaging and Mobile Information
If you provide your mobile number and consent to receive text messages from us, we may send messages related to samples, orders, shipments, and other business communications. Message and data rates may apply. Message frequency varies. You may opt out at any time by replying STOP. Reply HELP for assistance.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. How We Share Information
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
We disclose information only to the following categories of recipients:
Service providers and processors. Vendors who perform services on our behalf, including payment processing, website hosting, email and productivity services, email marketing delivery, customer relationship and prospect management software, accounting software, and analytics. These providers may access information only as needed to perform their services for us and are contractually restricted from using it for their own purposes.
Supply chain and fulfillment partners. To fulfill orders and coordinate shipments, we disclose business name, contact name, shipping address, phone number, and order details to warehouse operators, parcel and freight carriers, freight forwarders, and customs brokers.
Professional advisors. Our accountants, attorneys, insurers, and similar advisors, under obligations of confidentiality.
Legal and compliance. We may disclose information when required by law, subpoena, court order, customs or import regulation, or other legal process, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of others.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.
As stated in Section 3, mobile information and text messaging opt-in data and consent are excluded from all sharing categories and are not shared with any third parties.
5. Cookies, Analytics, and Tracking Signals
The Site may use cookies and similar technologies to remember your preferences, maintain session state, and understand how visitors use the Site. We may use third-party analytics services, including hosting-provider analytics and Google Analytics, that collect information about your use of the Site through these technologies.
Most browsers allow you to refuse or delete cookies through your browser settings. Disabling cookies may affect the functionality of parts of the Site.
Do Not Track. We do not currently respond to browser "Do Not Track" signals.
Global Privacy Control. We recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out request from California residents and residents of other states that recognize universal opt-out mechanisms. If your browser transmits a GPC signal, we treat it as a request to opt out of any sale or sharing of your personal information.
6. Payment Processing
Orders placed through the Site are processed by Stripe, a third-party payment processor. Your payment information is submitted directly to Stripe and is subject to Stripe's own privacy policy and security practices. We receive only confirmation of the transaction and limited details such as the last four digits of a card or an ACH confirmation reference.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, maintain business and financial records, resolve disputes, and comply with legal obligations. Our general retention criteria:
| Category | Retention period |
|---|---|
| Prospect and business contact information | Until you request deletion, or until we determine there is no ongoing business interest, whichever comes first |
| Inquiry and sample request records | Up to 3 years after the last interaction |
| Customer order, invoice, and payment records | At least 7 years, consistent with tax and accounting requirements |
| Import, customs, and entry records | At least 5 years from the date of entry, as required by U.S. customs regulations |
| Text messaging consent and opt-out records | For the life of the messaging program plus 4 years |
| Email and communication records | Up to 7 years |
| Website server logs and analytics data | Up to 26 months |
Where a longer retention period is required by law, that period controls.
8. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect the information we collect, including access controls, encrypted transmission, and multi-factor authentication on business systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Choices
Email. You may unsubscribe from marketing emails at any time using the unsubscribe link in those messages or by contacting us directly. We may still send you transactional messages related to orders and shipments.
Text messages. You may opt out at any time by replying STOP to any message.
Outreach. If you received business outreach from us and do not want to be contacted again, reply to the message or contact us using the details in Section 15. We will suppress your information from further outreach.
10. California Privacy Rights
This section applies to California residents and supplements the rest of this policy. It is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
Note that California law covers personal information collected in a business-to-business context. If you are a California resident whose business contact information we hold, the rights below apply to you.
10.1 Categories of Personal Information
In the preceding 12 months we have collected the following categories:
| CCPA category | Collected | Examples | Sources |
|---|---|---|---|
| Identifiers | Yes | Name, business address, business email, business phone, IP address | You, your employer's public website, business directories, data providers |
| Customer records information | Yes | Name, address, telephone number, payment confirmation records | You |
| Commercial information | Yes | Products considered or purchased, sample requests, order history | You, our records |
| Internet or network activity | Yes | Pages viewed, referring URL, interaction with our emails | Automatically, via cookies and analytics |
| Geolocation data | Coarse only | Approximate location inferred from IP address | Automatically |
| Professional or employment information | Yes | Job title, employer, role, purchasing responsibility | You, public sources, data providers |
| Inferences | Limited | Assessment of whether our coffee is a likely fit for your business | Derived from the above |
We do not collect sensitive personal information as defined by the CCPA, and we do not collect biometric data, precise geolocation, education records, or protected classification characteristics.
10.2 Sale and Sharing
We have not sold personal information and have not shared personal information for cross-context behavioral advertising in the preceding 12 months. We do not sell or share the personal information of consumers under 16 years of age.
10.3 Your Rights
California residents have the right to:
- Know what personal information we have collected, the categories of sources, the business purpose for collecting it, and the categories of third parties to whom we disclosed it
- Access a copy of the specific pieces of personal information we hold about you
- Delete personal information we have collected about you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (we do not sell or share, but you may still submit the request)
- Limit the use of sensitive personal information (we do not collect it)
- Non-discrimination for exercising any of these rights
10.4 How to Submit a Request
Submit requests by email to the address in Section 15, with "California Privacy Request" in the subject line, or by mail to the address in Section 15.
We will acknowledge receipt within 10 business days and respond within 45 days. If we need more time, we will notify you and may take up to an additional 45 days.
Verification. We will verify your identity before fulfilling an access, deletion, or correction request. For business contacts, we typically verify by confirming control of the email address or phone number associated with the information we hold, and may request additional information to match against our records.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. We will require written proof of the agent's authorization and may require you to verify your own identity directly with us.
11. Other U.S. State Privacy Rights
Residents of states with comprehensive consumer privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, Rhode Island, and Florida, may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale of personal information, and certain profiling.
We do not engage in targeted advertising, sale of personal information, or profiling that produces legal or similarly significant effects.
To exercise these rights, contact us using the details in Section 15. If we deny your request, you may appeal by replying to our denial with "Appeal" in the subject line. We will respond to an appeal within 45 days and, if the appeal is denied, will provide information on how to contact your state attorney general.
12. Visitors From the European Economic Area and United Kingdom
We are a United States business and our operations are directed to the U.S. market. We do not target the EEA or UK. If you are located in the EEA or UK and choose to contact us or use the Site, the following applies.
Controller. Arthur Shalagin Consulting Inc., d/b/a Grit & Growth Coffee Consulting, at the address in Section 15, is the controller of your personal data.
Legal bases. We process personal data on the following bases: performance of a contract or steps taken at your request prior to entering a contract (orders, sample requests, quotes); our legitimate interests in operating and marketing a business-to-business enterprise (business outreach, Site operation, security, analytics); compliance with legal obligations (tax, customs, accounting); and your consent, where required, which you may withdraw at any time.
International transfers. Personal data is transferred to and stored in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum with our service providers.
Your rights. You have rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests, including objection to direct marketing at any time. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office if you are in the UK.
Automated decision-making. We do not make decisions producing legal or similarly significant effects based solely on automated processing, and we do not engage in profiling for that purpose.
13. Children's and Minors' Privacy
The Site is a business-to-business site intended for use by adults acting in a commercial capacity. It is not directed to children, and we do not knowingly market to, solicit information from, or collect personal information from children or minors.
13.1 Children Under 13 (COPPA)
Consistent with the federal Children's Online Privacy Protection Act (COPPA), 15 U.S.C. sections 6501 through 6506, and the FTC's COPPA Rule at 16 C.F.R. Part 312, we do not knowingly collect, use, or disclose personal information from children under 13 years of age.
If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.
If you are a parent or legal guardian and believe your child under 13 has provided us with personal information, contact us using the details in Section 15. We will verify your request, delete the information, and confirm the deletion to you. You may also request to review any personal information we have collected from your child and direct us to stop any further collection or use of it.
13.2 Minors Under 16 (California)
We do not sell or share the personal information of consumers under 16 years of age, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Cal. Civ. Code section 1798.100 and following.
We have no actual knowledge of selling or sharing the personal information of any consumer under 16 years of age. Consistent with Section 4 of this policy, we do not sell personal information of any consumer, of any age.
13.3 Minors Under 18 (California Eraser Law)
Under California Business and Professions Code section 22581, California residents under 18 who are registered users of a site may request removal of content or information they have publicly posted on that site.
The Site does not currently offer user registration or public posting. If a California resident under 18 has submitted content or information to us through a form, email, or text message, they may request its removal by contacting us using the details in Section 15, and we will remove it from public display where applicable. Removal may not be complete or comprehensive, and the information may remain in our backup or archival records, or in records we are required by law to retain.
13.4 Reporting
If you believe a child or minor has provided us with personal information, contact us immediately at the address or email in Section 15 with the subject line "Minor Privacy Request." We will respond within the timeframes required by applicable law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. Material changes will be posted on this page. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.
15. Contact Us
Questions, requests, or concerns about this Privacy Policy or our handling of your information:
Grit & Growth Coffee Consulting a d/b/a of Arthur Shalagin Consulting Inc. 1068 SW 147 Terrace, Mailbox 8 Pembroke Pines, FL 33027 United States
Email: arthur@gritandgrowth.coffee Web: gritandgrowth.coffee
For privacy requests, include the relevant subject line noted in the section that applies to your request.