Privacy policy

Last updated: May 28, 2026

Who We Are

This Privacy Policy (“Policy”) describes how GroveCommerce / Coffee Capsules Inc. and our affiliated brands (including, for example, Gourmesso and Glorybrew) (“GroveCommerce,” “Coffee Capsules Inc.,” “Gourmesso,” “we,” “us,” or “our”) collect, use, disclose, and otherwise process personal information in connection with our websites, mobile applications, physical products, and other online and offline services (collectively, the “Services”).

Coffee Capsules, Inc. (d/b/a Gourmesso) is a Florida C‑Corp and specialized e‑tailer in multiple categories (Food & Beverage, Supplements, Pet Supplements, Household Goods, and other product categories), operating multiple websites (for example: www.gourmesso.com, www.glorybrew.com) and selling through multiple marketplaces such as Amazon, Walmart, eBay, and other channels.

This Policy is incorporated by reference into the Coffee Capsules, Inc. Terms and Conditions (the “Terms”). By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

If you wish to object to the collection, processing, or use of your data in accordance with this Privacy Policy, you can contact us using the information in the “Contact Us” section below.

Scope of this Policy

This Policy applies to personal information we process in the course of operating our own websites and apps, as well as when we sell and advertise our products through third‑party platforms and marketplaces (such as Amazon, Walmart, eBay, TikTok, Meta (Facebook and Instagram), Google, Reddit, and other channels).

It does not cover personal information processed solely by those platforms in their capacity as independent businesses; their own privacy policies govern their processing.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined in this section. The following definitions shall have the same meaning whether they appear in singular or plural.

Definitions

  • Account means a unique account created for you to access our Services or parts of our Services.

  • Affiliate means an entity that controls, is controlled by, or is under common control with a party.

  • Application means the software program provided by the Company, such as “Gourmesso,” “Gourmesso USA,” or similar apps.

  • Business has the meaning given in applicable U.S. state privacy laws (such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”)) and refers to the Company as the legal entity that determines the purposes and means of processing consumers’ personal information.

  • Company (also “GroveCommerce,” “Coffee Capsules Inc.,” “Gourmesso,” “we,” “us,” or “our”) refers to GroveCommerce / Coffee Capsules Inc., located at 66 West Flagler Street – Suite 900, Miami, FL 33130, USA.

  • Consumer means a natural person who is a resident of a U.S. state whose privacy laws may apply, including California residents under CCPA/CPRA and residents of other states with similar privacy laws.

  • Cookies are small files placed on your device that store certain information about your interactions with our Services.

  • Country refers to the United States.

  • Device means any device that can access the Service such as a computer, cellphone, or tablet.

  • Do Not Track (DNT) is a browser setting signaling a user’s preference regarding tracking across websites.

  • Personal Data / Personal Information means any information that relates to an identified or reasonably identifiable individual, as defined by applicable law.

  • Sale and Share have the meanings given in CCPA/CPRA and similar state laws. Generally, “sell” means disclosing personal information for monetary or other valuable consideration, while “share” refers to disclosing personal information for cross‑context behavioral or targeted advertising.

  • Sensitive Personal Information generally includes certain types of data such as precise geolocation, account log‑in credentials, or data revealing health or similar information, as defined by law.

  • Service refers to the Application, Websites, and any related offerings.

  • Service Provider means any natural or legal person who processes data on behalf of the Company (e.g., payment processors, logistics providers, analytics and marketing vendors).

  • Third‑Party Social Media Service refers to any website or social network you can use to log in to or interact with our Services.

  • Usage Data refers to data collected automatically, such as how you use the Services.

  • Website refers to Gourmesso (www.gourmesso.com) and other GroveCommerce websites.

  • You means the individual accessing or using the Services, or the company or other legal entity on whose behalf such individual is accessing or using the Services.

Categories of Personal Information We Collect

Depending on how you interact with us and which Services you use, we may collect the following categories of personal information:

  • Identifiers (e.g., name, postal address, email address, phone number, account identifiers, device identifiers, IP address).

  • Customer records / commercial information (e.g., products purchased or considered, purchase history, subscription details, order and transaction details, shipping and billing information).

  • Internet or other electronic network activity information (e.g., browsing history, search history, pages viewed, links clicked, time spent, referral URLs, device and browser information, app usage, cookies and similar technologies).

  • Geolocation data (general location derived from IP address and, if you enable it in our app or device settings, more precise location information).

  • Inferences drawn from the information above (e.g., preferences, interests, or segments used for marketing and analytics).

  • Any other information you choose to provide directly to us (e.g., messages you send us, product reviews, survey responses, customer support interactions).

We do not intentionally collect sensitive personal information (such as financial account login information, government IDs, or precise geolocation beyond what you explicitly enable) except as necessary to provide the Services (for example, approximate location for shipping, or payment information processed by our payment providers). If we ever process sensitive personal information in ways covered by law, we will comply with applicable requirements, including providing the right to limit its use.

How We Collect Personal Information

We collect personal information in several ways:

  • Directly from you, such as when you create an account, place an order, sign up for communications, contact us, or otherwise interact with our Services.

  • Automatically, when you use the Services, through cookies, pixels, SDKs, and similar technologies that collect Usage Data and device information.

  • From third parties, such as marketplaces (e.g., Amazon, Walmart), advertising partners (e.g., Meta, Google, TikTok, Reddit, Outbrain, Taboola, AdRoll), analytics providers, affiliate networks, and logistics or payment partners.

Customer Accounts

For customers who complete the registration process, we provide password‑protected access to a customer account where you can view and manage your orders, addresses, payment details, and newsletter subscriptions. You are responsible for keeping your login credentials confidential and not sharing them with others. A user account and stored data can be deleted at any time through your account settings or by contacting us.

Usage Data

We collect Usage Data automatically when you use the Services. This may include your Device’s IP address, browser type and version, pages visited, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data. We may also collect Usage Data via our apps, including device type, operating system, and app interactions.

Information from Third‑Party Social Media Services

You may be able to register or log in using accounts from Third‑Party Social Media Services (such as Google or Meta). If you do so, we may receive certain information from that service, such as your name, email address, or profile information, and will use it in accordance with this Policy.

Information Collected via the Application (Including Location)

When you use our mobile applications, we may collect certain information, including—if you grant permission—information regarding your location. We use this information to provide and improve features of our Services. You can change location permissions at any time in your device settings.

Mobile Message Service (SMS) Terms

Your use of our mobile messaging service (for updates, promotions, and cart reminders) is subject to the Mobile Message Service Terms and Conditions included in this Policy. Standard message and data rates may apply, and you can opt out at any time by following the instructions in the messages.

Tracking Technologies and Cookies

We use cookies, pixels, SDKs, beacons, tags, and scripts to collect and track information and to improve and analyze our Services.

You can instruct your browser to refuse non‑essential cookies or to indicate when a cookie is being sent. If you disable certain cookies, some features of the Services may not function properly.

We use:

  • Necessary/essential cookies – to provide core functionality and prevent fraud.

  • Preference/functional cookies – to remember your settings and preferences.

  • Analytics cookies – to help us understand how our Services are used and improve performance.

  • Advertising/remarketing cookies – to enable interest‑based and cross‑context behavioral advertising on our own properties and on third‑party platforms (e.g., Meta, Google, TikTok, Reddit, Outbrain, Taboola, AdRoll).

You can manage your cookie and tracking preferences at any time by using the cookie or privacy settings available on our websites (where provided), adjusting your browser settings, or using the opt‑out mechanisms described in the “Do Not Sell or Share / Targeted Advertising” and “Behavioral Remarketing” sections below.

How We Use Personal Information

We may use personal information for one or more of the following purposes:

  • Providing, operating, and maintaining the Services, including processing and fulfilling orders, subscriptions, and payments.

  • Managing your account and enabling account‑related features.

  • Communicating with you about your orders, account, and our Services.

  • Providing you with news, offers, promotions, and marketing communications (where permitted by law or your preferences).

  • Personalizing your experience, including remembering your preferences and tailoring content and offers.

  • Conducting analytics and measuring usage across our own sites and third‑party channels.

  • Providing and improving advertising and marketing, including interest‑based and cross‑context behavioral advertising on our own properties and on third‑party platforms.

  • Detecting, investigating, and preventing fraud, security incidents, and other malicious or illegal activities.

  • Complying with legal obligations, enforcing our terms, and defending legal claims.

  • For any other purposes described to you at the time of collection or with your consent.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

  • Service Providers – such as payment processors, shipping and logistics providers, customer support providers, analytics providers, marketing and advertising partners, IT and cloud hosting providers.

  • Fulfillment and e‑commerce partners – for example, Amazon (including Amazon Buy with Prime), Walmart, and other marketplaces, in order to process and fulfill orders, provide customer service, and support integrated checkout and logistics.

  • Advertising and analytics partners – including Google, Meta (Facebook, Instagram), TikTok, Reddit, Outbrain, Taboola, AdRoll, and similar partners, to provide measurement, analytics, and targeted advertising.

  • Affiliate networks and partners – such as Rakuten, CJ Affiliate, ShareASale, or similar networks that use cookies and tracking technologies to attribute referrals and commissions for purchases made through affiliate links.

  • Affiliates – our parent company and other related entities under common control, who process personal information in accordance with this Policy.

  • Business partners – for example, co‑marketing or co‑branded partners offering joint promotions.

  • Other users – where you choose to share content or interact in public areas (e.g., reviews or social interactions).

  • Successors and assigns – in connection with a merger, sale, or other corporate transaction involving our business.

  • Law enforcement and legal recipients – when necessary to comply with law, protect our rights, investigate fraud, or respond to legal requests.

Sale, Sharing, and Targeted Advertising

We do not sell your personal information in the traditional sense (for example, we do not exchange your name and contact details with unrelated third parties solely for money). However, we do disclose certain personal information (such as identifiers, internet activity data, and inferences) to advertising and analytics partners, who may use this information to provide cross‑context behavioral or targeted advertising and measurement services.

Under CCPA/CPRA and similar state laws, this type of disclosure may be considered:

  • A “sale” of personal information;

  • “Sharing” of personal information for cross‑context behavioral advertising; and/or

  • “Targeted advertising” under other U.S. state privacy laws.

While we do not exchange your personal information for cash, we do “share” personal information (as defined by California law) and process it for targeted advertising (as defined by other U.S. state laws) with our advertising and analytics partners.

Depending on where you live, you may have the right to opt out of the sale or sharing of your personal information or of its use for targeted advertising. See “Your Privacy Rights (United States)” below for more information.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Data Retention

We retain personal information for as long as reasonably necessary to achieve the purposes described in this Policy, or as required by law.

In general:

  • Order and transaction data is typically retained for up to 7 years to comply with tax, accounting, and legal obligations.

  • Customer account information is retained for as long as your account remains active and for a reasonable period thereafter, or until you request deletion (subject to legal obligations).

  • Marketing and communications data (e.g., email subscription and engagement data) is typically retained until you opt out or until it is no longer needed for the purposes for which it was collected.

  • Cookies and analytics data are typically retained for periods ranging from several months up to about 24 months, depending on the tool and your settings, unless a shorter or longer period is required or permitted by law.

When we no longer need personal information, we will delete or anonymize it, or, if that is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from further use until deletion is possible.

International Transfers

Personal information may be processed at our operating offices and in other locations where Service Providers are located, which may include locations outside your state or country. Where required by law, we will take appropriate measures to ensure a level of protection for your personal information that is consistent with applicable legal requirements.

Business Transfers and Legal Requirements

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the acquiring entity. We may also disclose personal information as required by law, in response to legal requests, or to protect our rights and the rights of others.

Security of Personal Information

We implement reasonable and appropriate technical, organizational, and administrative measures designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Analytics

We use analytics services (such as Google Analytics, Firebase, Mixpanel, and similar tools) to help us understand how the Services are used, improve performance, and support marketing and advertising. These providers may set cookies and collect information about your use of the Services, which may then be used to provide aggregated reporting and advertising services.

You can opt out of certain analytics tools using the methods they provide (for example, browser add‑ons, device settings, or opt‑out pages).

Email Marketing

We may use your personal information to send you newsletters, marketing, or promotional communications, as permitted by law and your preferences. You can opt out of these communications at any time by clicking the unsubscribe link in our emails or contacting us. We may use providers such as Klaviyo to manage and send emails.

Payments

When you purchase products, your payment information is processed by third‑party payment processors (such as Stripe or PayPal). We do not store full payment card details; these processors handle your payment data in accordance with their own privacy policies and applicable security standards (such as PCI‑DSS).

Behavioral Remarketing and Targeted Advertising

We use remarketing and targeted advertising services to advertise on third‑party websites and platforms after you visit our Services. Our partners (including Google Ads, Microsoft/Bing Ads, Meta, TikTok, Pinterest, Reddit, Outbrain, Taboola, AdRoll, and others) use cookies, pixels, and similar technologies to serve ads based on your past interactions with our Services.

You can manage interest‑based advertising preferences using:

  • The advertising settings provided by individual platforms (e.g., Google Ads Settings, Facebook/Meta ad preferences, TikTok ad preferences).

  • Industry opt‑out tools such as the Digital Advertising Alliance (aboutads.info/choices) where available.

  • Your browser and device settings to limit tracking and personalized ads.

Even if you opt out of targeted advertising, you may still see ads; they just may be less relevant.

Information Processed Through Third‑Party Platforms and Marketplaces

We sell and advertise our products through third‑party platforms and marketplaces such as Amazon, Amazon Buy with Prime, Walmart, eBay, TikTok Shop, and others. When you interact with us on those platforms, both we and the platform may collect and process your personal information.

In many cases, the platform acts as an independent business or controller of your personal information and processes it according to its own privacy policy. We encourage you to review the privacy policies of each platform you use. Where we receive personal information from those platforms (for example, order details, contact information, or advertising performance data), we use and disclose that information in accordance with this Privacy Policy.

Your Privacy Rights (United States)

Depending on where you live, you may have certain rights regarding your personal information under applicable U.S. state privacy laws (such as CCPA/CPRA in California, and similar laws in states like Colorado, Connecticut, Utah, Virginia, Texas, Oregon, Montana, and others).

These rights may include:

  • Right to know / access – to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the categories of recipients to whom we disclose it.

  • Right to deletion – to request that we delete personal information we collected from you, subject to certain exceptions (for example, where we need the information to complete transactions, detect fraud, comply with legal obligations, or for other permitted purposes).

  • Right to correction – to request that we correct inaccurate personal information we maintain about you.

  • Right to data portability – to request a copy of certain personal information in a portable, readily usable format.

  • Right to opt out of sale, sharing, and targeted advertising – to direct us not to sell or share your personal information or process it for targeted advertising as these terms are defined by applicable state law.

  • Right to limit use and disclosure of certain sensitive personal information – if we process sensitive personal information in ways covered by law, you may have the right to limit our use of such information.

  • Right to non‑discrimination – we will not deny goods or services, charge different prices, or provide a different level or quality of services solely because you exercise your privacy rights.

  • Right to appeal – in certain states (such as Colorado, Virginia, Connecticut, and Texas), if we deny your privacy request, you may have the right to appeal our decision.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

How to Exercise Your Privacy Rights

To exercise your privacy rights, you can:

  • Email us using the contact details in the “Contact Us” section.

  • Use any web forms or “Your Privacy Choices / Do Not Sell or Share My Personal Information” tools provided on our websites.

We will verify your identity as required or permitted by law before fulfilling certain requests. We will respond to your request within the time periods required by applicable law (generally within 45 days, with the possibility of an extension where permitted).

If we deny your request (in whole or in part), we will explain the reasons as required by law. In states where an appeal right exists, you may appeal the decision by following the instructions we provide in our response.

Do Not Sell or Share / Targeted Advertising Opt‑Out

You may have the right to opt out of the sale or sharing of your personal information or of its use for targeted advertising. To exercise this right:

  • Visit our “Your Privacy Choices / Do Not Sell or Share My Personal Information” page (linked in the footer of our websites) and use the opt‑out tools provided there.

  • Enable a supported Global Privacy Control (GPC) or similar browser‑based opt‑out signal. Where required by law, we will treat such signals as a request to opt out of sale/sharing for the browser and device you use.

Opt‑out choices are generally browser and device specific and may be reset if you clear cookies or use a different browser or device.

“Do Not Track” Signals

Our Services do not currently respond to standard “Do Not Track” (DNT) signals. However, we do honor certain browser‑ or device‑based opt‑out signals, such as Global Privacy Control (GPC), as required by applicable law.

Minors and Children

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information, unless we have a legal obligation to retain it.

We do not knowingly sell or share the personal information of consumers under 16 years of age. If you are under 16, you should not use our Services to submit personal information for purposes that may involve sale or sharing as defined by applicable law.

Parents or guardians who believe their child has provided us with personal information without their consent may contact us, and we will take appropriate steps to remove the information and terminate any associated account where applicable.

California “Shine the Light” and Minor Users

California residents may request information about our sharing of certain personal information with third parties for their direct marketing purposes, as described by California’s “Shine the Light” law.

California residents under 18 who are registered users of online services may also have the right to request removal of content they have publicly posted, subject to certain limitations and exceptions.

To exercise these rights, contact us using the information in the “Contact Us” section.

Links to Other Websites

Our Services may contain links to other websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and update the “Last updated” date at the top. Where required by law, we will also notify you in another way (for example, via email or a notice on our Services).

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us:

  • By email: service at gourmesso.com or service at grovecommerce.com

  • By mail:
    GroveCommerce / Coffee Capsules Inc.
    66 West Flagler Street – Suite 900
    Miami, FL 33130, USA

  • Via our website contact page: https://www.gourmesso.com/pages/contact-us