What we collect, and what we don't.

Who we are

This Privacy Policy describes how Ultimate Brew, LLC ("The Ultimate Brew", "we", "us") collects, uses and shares information when you visit theultimatebrew.com (the "Site"), join our email or text list, or otherwise interact with us. Our mailing address is 8 The Green, STE B, Dover, Kent County, DE 19901, United States. Questions about this policy can be sent to hello@theultimatebrew.com.

What we collect

We collect only what the Site needs to do the few things it does:

• Contact details you give us. Your email address and, if you choose, your mobile number, when you join the list to hear about the next batch, online availability and where to find the coffee.
• Store finder input. A ZIP code or your device location, if you use the store finder. We open Google Maps with that ZIP code, or with your device's coordinates if you choose to use your location, to show nearby Sprouts Farmers Market stores; Google receives it under its own privacy policy. If you type a ZIP code, we keep it in our own site statistics (not linked to your visitor code) to see where people look for the coffee. We never store your device location.
• Technical and usage data. If you accept cookies, we may collect the pages you view, how you scroll and interact, your approximate location from your IP address, browser and device type, and referring site, through analytics tools described below. If you decline, these tools are not loaded. Whether or not you accept, we keep our own cookie-free site statistics, which include your country and, in the US, your approximate state and city, described under "Cookies and analytics".
• Where your visit came from. When you join our list, we record which link or ad brought you to the Site on that visit: its campaign tags, the first page you visited, and which ad platform the link came from (Google, Meta, TikTok or Microsoft). If you have accepted cookies and your browser does not send Global Privacy Control, we also keep the ad click ID in that link with your sign-up. We save the campaign tags on your Klaviyo profile, unless you came from one of our emails.
• Communications. Anything you send us by email or text, including replies such as STOP or HELP.
• Brand library. If we invite you to our brand library for partners and press, or you ask for access, we keep your name, email address and company, a record of when you sign in (with the country and type of browser you sign in from) and of what you download, only to manage your access to the library. Signing in sets one cookie that keeps you signed in for 30 days after your last visit, and never more than 90 days after you sign in; it is needed for the library to work and is not used for analytics or advertising.

How we use it

• To send the updates you asked for: the next drop, when we are available online and where we will be next.
• To run the text program if you opted in, including confirmation, help and opt-out messages.
• To understand how the Site is used and to improve it.
• To measure which ads, posts and emails lead people to join our list, and to improve our advertising.
• To keep the Site secure, prevent abuse and comply with law.

We do not sell coffee through this Site today, so we collect no payment information here. If that changes, this policy will be updated first.

Text messages (SMS)

If you give us your mobile number and tick the consent box, you agree to receive recurring automated marketing text messages from The Ultimate Brew at that number. Consent is not a condition of any purchase. Message frequency varies; we expect no more than 4 messages per month. Message and data rates may apply. Reply STOP to cancel at any time and HELP for help, or contact us at hello@theultimatebrew.com. Carriers are not liable for delayed or undelivered messages. Our text program is operated through Klaviyo. We will not share your mobile information or text-message consent with third parties or affiliates for marketing or promotional purposes.

Cookies and analytics

The Site sets no analytics or advertising cookies until you accept them in the cookie notice. Your choice is stored in your browser for 12 months and can be changed any time through the "Your privacy choices" link in the footer. When you accept, we may load Google Analytics (GA4), the Meta Pixel, and Microsoft Clarity, which set cookies and collect the usage data described above. When you accept, Meta and Google also receive an event when you view a coffee's page, search for a store (Meta never receives the ZIP code) and join our list (never your email address or phone number). Meta receives none of this if your browser sends Global Privacy Control. Separately, whether or not you accept cookies, we keep our own site statistics: page views, each step of our sign-up forms (seen, started, submitted), which parts of a page are clicked, how far down the page visitors scroll, how quickly each page loads for you and your connection type (such as 4G), and the ZIP code typed into our store finder (never your precise location), along with the page, any campaign tags in the link you followed, the device type (phone or computer), the referring website, your country and, for visits from the US, your approximate state and city. Our hosting provider works out the country, state and city from your IP address when you visit; we keep only those names, never the IP address, a ZIP code from it or your precise location. To tell visits apart without cookies, our server combines your IP address and your browser's user-agent string with a random key that is used for one day only (US Eastern time), and keeps just the short scrambled code that results. The IP address itself is never stored. The key is deleted from our database when the day ends (our database provider's automatic backups can keep deleted data for up to 30 days), and a new key is used each day, so codes from different days can't be linked to each other. The code is attached only to page views and to how far each page was scrolled, not to clicks, page-speed measurements, sign-up steps or store-finder searches, and our statistics never include your name, email or phone number. These statistics store nothing in your browser, with one exception: for the length of your visit (until 30 minutes pass without a page view, or you close the tab), your browser's session storage keeps the campaign tags and ad platform of the link you arrived through, and the ad click ID only if you accepted cookies and your browser does not send Global Privacy Control. It is sent to us only if you join our list. We also use Cloudflare Web Analytics, a cookie-free service from our hosting provider that counts page views and measures loading speed for all visitors. Google's consent settings start as "denied" and are only updated after you accept. The Site also uses your browser's local storage, which stays on your device, to remember your cookie choice (for 12 months), when our sign-up pop-up was last shown to you (so it stays away for 14 days), whether you have signed up through any of our forms (so the pop-up doesn't appear again), and your best score in the bean game. None of these local storage items is sent to us or used for tracking.

Who we share it with

We share personal information only with service providers who process it on our instructions:

• Klaviyo (email and SMS delivery and list management).
• Google Analytics (GA4), the Meta Pixel, and Microsoft Clarity (session recordings and heatmaps), only if you have accepted cookies.
• Hosting and infrastructure providers that serve the Site (Cloudflare), including Cloudflare Web Analytics, which sets no cookies.
• Google (Google Maps) receives the ZIP code or location you enter in the store finder when it opens the map of nearby Sprouts Farmers Market stores. If you choose to sign in to the brand library with Google, Google tells us your name and email address.
• Resend (delivery of brand library sign-in codes and invitations), which receives your email address to send them.

Our team also uses Anthropic (Claude), an AI service, to analyze how the Site is doing. It receives only combined statistics, such as visits per page, sign-up totals and which campaigns brought visitors. It never receives your name, email address, phone number, IP address or anything else that identifies you.

We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply. We do not sell personal information for money. If you accept cookies, Meta and Google receive information about your visit to measure and improve our ads. Under California and some other state laws this may count as “sharing” for cross-context behavioral advertising or as “targeted advertising.” You can opt out by declining cookies, by changing your choice under “Your privacy choices,” or with a browser that sends Global Privacy Control.

Your choices and rights

• Unsubscribe from email using the link in any message, and from texts by replying STOP.
• Cookies: decline in the notice, or change your choice under "Your privacy choices" in the footer.
• Access, correction and deletion: email hello@theultimatebrew.com and we will respond within 45 days.
• California residents have the right to know what personal information we collect, use and disclose, to request deletion or correction, to opt out of sale or sharing (see “Who we share it with” for how to opt out), and not to be discriminated against for exercising these rights. Requests can be made at hello@theultimatebrew.com. We will verify your identity by matching the details you provide against our records. You may use an authorized agent with written permission.
• Other US states (including Colorado, Connecticut, Virginia, Texas, Oregon and others with privacy laws) give similar rights; the same contact applies.
• Global Privacy Control: if your browser sends this signal, we treat it as an opt-out. We don't show the cookie notice, load nothing that sets a cookie, and never load the Meta Pixel for your visits, even if you later accept cookies, and we never keep the ad click ID from the link you followed.

How long we keep it

We keep your contact details until you unsubscribe or ask us to delete them, plus a short period to honor suppression lists so you are not contacted again. Analytics data, including store-finder ZIP codes, is retained for 14 months and then deleted automatically. Brand library sign-in and download records, and answered access requests, are deleted after 14 months; a declined access request after 90 days. Your device location from the store finder is never stored. Ad click IDs kept with a sign-up are deleted after 90 days. Campaign tags on a sign-up follow the 14-month rule for analytics data. Tags on a Klaviyo profile stay until you unsubscribe or ask us to delete them.

Security

We use reputable providers, encrypted connections (HTTPS) and access controls to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Site is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact hello@theultimatebrew.com and we will delete it.

Visitors outside the United States

The Site is operated from the United States and intended for US visitors. If you access it from elsewhere, your information will be processed in the United States, where privacy laws may differ from those in your country.

Changes to this policy

We may update this policy from time to time. The effective date at the top will change, and for material changes we will notify list members by email or text. Continued use of the Site after a change means you accept the updated policy.

Contact us

Ultimate Brew, LLC
8 The Green, STE B
Dover, Kent County, DE 19901
United States
hello@theultimatebrew.com