Privacy policy

Last updated: 2 November 2026

Maukafe is operated by Maukafe, with registered or operating address in Colombia. Website: https://www.maukafe.com. Contact: hola@maukafe.com.

This Privacy Policy explains what personal data Maukafe processes, why, for how long and which rights you can exercise. It is written for the product that exists today: a Colombian specialty-coffee site, Mauka Commerce, a box stored in the browser, waitlists and the Maukafe Club. It does not describe user accounts, a payment gateway, live shipping or behavioural advertising, because those services are not in this version.

Processing is governed, as applicable, by Colombia’s Law 1581 of 2012 and Decree 1377 of 2013 (habeas data) and, when the visitor is in the European Union or Spain, by Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and, for cookies, Law 34/2002 (LSSI-CE). Colombian consumer law (Law 1480 of 2011) also applies to consumer sales when a purchase exists.

1. Controller

The controller is the operator named at the start of this document. Requests for habeas data, access, rectification, update, erasure, objection, portability or withdrawal of consent are handled at hola@maukafe.com. We will reply within a reasonable time and, where Colombian law applies, within the legal habeas-data terms.

2. Whose data

• Site visitors: anyone who browses maukafe.com or an equivalent domain, without creating an account.
• Anyone who packs a box: products and quantities stored in this browser.
• Anyone who joins a list or the Club: email address and, if you type it, the form origin (Club, Academy or Barista at home).

Maukafe does not ask for an ID document, a shipping address or card data in this version. If we later open web checkout, we will update this policy before asking for those details.

3. Data we process

3.1 Browsing and language

Approximate visitor country (for example from the content-delivery network) to choose language: Spanish in Spain and Latin America; English everywhere else. Language is not stored in a persistent cookie. We may also see minimal server logs (time, path, user agent) for security and to serve the site.

3.2 Box and cookie preference

Your browser may store mauka-cart (the box) and mauka-cookie-consent (your cookie choice). Those pieces live on your device. We do not use them to identify you to third parties.

3.3 Waitlists and Club

If you leave your email, we use it only to tell you about what you asked for: Club harvests and notes, the Academy or Barista at home. You can ask us to take you off that list at any time by writing to hola@maukafe.com. Today the form confirms on screen; if real email sending is still being built, we will still treat the data for the same purpose when the notice exists.

3.4 Analytics

Only if you give permission and a meter is configured (for example Google Analytics). Then we may see aggregated visits, pages viewed and approximate country. We do not run personalised ads or sell audiences. See the Cookie Policy.

4. Purposes and legal bases

• Legitimate interest / requested service: show the site, remember the box, keep it safe and reply if you write to us.
• Consent: waitlists, Maukafe Club and non-essential cookies. You can withdraw it at any time.
• Legal obligation: meet competent authority requests and keep what Colombian or European law requires when a transaction exists.

Maukafe does not sell personal data, does not build advertising profiles and does not pass your email to other brands so they can write to you.

5. Processors and transfers

The site may be hosted on infrastructure providers (for example Vercel or an equivalent host). Those processors handle data only to provide the service, under their own security measures. If the server is outside Colombia or the EEA, the transfer relies on standard contractual clauses or another recognised safeguard where GDPR applies.

6. Retention

• Box and cookie consent: until you clear them in the browser or the notice version changes.
• Waitlist and Club emails: while the list exists or until you ask to leave.
• Security logs: the minimum time needed to detect abuse.

7. Your rights

Depending on your country, you may request access, rectification, update, erasure, proof of authorisation, objection, restriction, portability and not to be subject to an automated decision. In Colombia you may also complain to the Superintendence of Industry and Commerce. In the European Union, to your national supervisory authority. Write to hola@maukafe.com with the subject “Personal data”. We will ask for the minimum needed to confirm you are the holder.

8. Children

The site is not directed at people under 18. We do not seek to collect children’s data. If you think a minor left us an email, write to us and we will delete it.

9. Security

We use HTTPS and reasonable practices for a site of this size. No medium is infallible. If an incident affects your data, we will tell you when the law requires it.

10. Changes

If the product changes (for example if we open payments, shipping or accounts), we will update this policy and the date at the top. If the change is material, we will note it on the site.

Also read our Terms and conditions, Privacy Policy and Cookie Policy.