Last updated: 13 Sep 2026
Laterite Coorg (LATCO)
Effective date: 13 Sep 2026
Laterite Coorg ("Laterite Coorg", "LATCO", "we", "us", or "our") operates the website www.lateritecoorg.com (the "Site"), through which we sell single-estate coffee, spices, and related products grown and roasted on our family farm in Kodagu, Karnataka.
We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the rights and choices available to you.
This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and Rule 3(1) of the Information Technology (Intermediary Guidelines) Rules.
By using the Site, placing an order, creating an account, or subscribing to our communications, you acknowledge that you have read and understood this Privacy Policy.
For the purposes of the DPDP Act, Laterite Coorg is the Data Fiduciary responsible for your personal data.
Business name: Laterite Coorg (LATCO)
Registered address: Mahadevapura, Bengaluru, Karnataka, India
Email: latcocoffee@gmail.com
Phone / WhatsApp: +91 97409 15713
FSSAI Licence No.: 21226188002611
Business hours: Monday–Saturday, 9:00 AM – 6:00 PM IST
This Policy applies to personal data we collect:
On or through the Site, including our shop, product pages, subscriptions, order tracking, wholesale/B2B enquiries, and account areas;
When you communicate with us by email, phone, WhatsApp, or social media (for example, our Instagram, @latcocoffee); and
When you interact with our marketing, newsletters, or promotional offers.
This Policy does not apply to third-party websites, platforms, or services that we link to but do not control. Please review their privacy policies separately.
We collect the following categories of information:
Account information: name, email address, phone number, and password (stored in encrypted/hashed form) when you register or log in.
Order and transaction information: billing and shipping addresses, products purchased, order value, and order history when you make a purchase.
Subscription information: your chosen coffee, grind, delivery frequency, and subscription preferences when you sign up for "Subscribe & Save".
Payment information: processed securely by our payment gateway (see Section 7). We do not store your full card number, CVV, UPI PIN, or net-banking credentials on our servers.
Wholesale / B2B enquiry information: business name, contact person, GSTIN (if provided), and enquiry details.
Communications: the content of messages you send us via contact forms, email, phone, or WhatsApp, and our replies.
Newsletter and marketing preferences: your email address and consent status when you subscribe to our list.
User-generated content: reviews, ratings, feedback, or other content you choose to submit.
When you use the Site, we and our service providers may automatically collect:
Device and technical data: IP address, browser type and version, operating system, device identifiers, and time-zone setting.
Usage data: pages viewed, links clicked, products browsed, items added to cart, referring/exit pages, and the dates and times of your visits.
Cookies and similar technologies: as described in Section 6.
We may receive information about you from:
Payment and shipping partners confirming payment status or delivery updates;
Social media and login providers if you interact with us or sign in through them; and
Analytics providers that help us understand how the Site is used.
We do not intentionally collect sensitive personal data (such as health, biometric, or financial account passwords). Payment credentials are handled by our payment gateway and are treated with heightened security under the SPDI Rules.
We use your personal data for the following purposes:
PurposeExamplesFulfilling your ordersProcessing payments, arranging delivery, sending order confirmations and tracking updatesManaging your accountCreating and maintaining your account, authenticating logins, saving preferencesOperating subscriptionsScheduling recurring deliveries, processing recurring payments, managing cancellationsCustomer supportResponding to enquiries, complaints, returns, and refund requestsCommunicationsSending transactional messages (OTPs, order updates) and, with your consent, marketing and newslettersImproving our Site and productsAnalysing usage, troubleshooting, and enhancing the shopping experienceSecurity and fraud preventionDetecting, preventing, and investigating fraud, abuse, and security incidentsLegal and regulatory complianceMeeting tax, accounting, FSSAI, consumer-protection, and other legal obligations
Under the DPDP Act, we process your personal data on the following bases:
Consent: where you have given us clear consent — for example, subscribing to our newsletter or opting into marketing. You may withdraw consent at any time (see Section 11).
Legitimate uses / performance of a contract: where processing is necessary to fulfil your order, deliver your subscription, or provide services you have requested.
Legal obligation: where processing is required to comply with applicable law (for example, retaining invoices for tax purposes).
We use cookies and similar technologies to make the Site function, remember your cart and preferences, keep you logged in, and understand how the Site is used.
Essential cookies are necessary for core functions such as logging in, checkout, and security. These cannot be switched off.
Functional cookies remember your preferences (for example, your grind selection).
Analytics cookies help us measure and improve Site performance.
You can control or delete cookies through your browser settings. Disabling essential cookies may affect your ability to shop or log in.
We do not sell your personal data. We share it only with trusted service providers ("Data Processors") who help us run our business, and only to the extent necessary. These include:
Payment processing: Razorpay — to process UPI, card, and net-banking payments securely.
Shipping and logistics: Shiprocket and associated courier partners — to deliver your orders and provide tracking.
Transactional email: ZeptoMail — to send order confirmations, account notifications, and other service messages.
SMS and OTP: MSG91 — to send one-time passwords and delivery notifications.
Image and media delivery: ImageKit — to serve product images and media on the Site.
Hosting and infrastructure: our cloud hosting provider (data hosted in the Mumbai / India region) — to run and store the Site and its database.
Authentication: our login/authentication provider — to secure account sign-in.
We may also disclose your information:
to comply with a legal obligation, court order, or lawful request by a public authority;
to enforce our terms, protect our rights, property, or safety, or those of our customers; or
in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership or use of your personal data.
All our processors are required to protect your data and use it only for the purposes we specify.
All payments are processed through our PCI-DSS-compliant payment gateway (Razorpay). Payment card and UPI details are entered directly with the gateway over encrypted connections. We do not see or store your full card number, CVV, UPI PIN, or banking passwords.
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including:
Account data: for as long as your account remains active;
Order and invoice records: for the period required under tax, accounting, and consumer-protection laws (typically up to 8 years);
Marketing data: until you unsubscribe or withdraw consent; and
Support communications: for a reasonable period to address follow-up queries.
When personal data is no longer required, we securely delete or anonymise it.
We implement reasonable security practices and procedures in line with the SPDI Rules to protect your personal data, including:
encryption of data in transit (HTTPS/TLS);
hashing of account passwords;
access controls limiting who can access personal data;
use of reputable, security-conscious service providers; and
regular review of our security measures.
While we take these steps to safeguard your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities of a personal data breach where required by law.
Subject to applicable law, you have the following rights in respect of your personal data:
Right to access: request a summary of the personal data we hold about you and how we process it.
Right to correction: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your personal data where it is no longer required and we are not legally obliged to retain it.
Right to withdraw consent: withdraw consent to processing (such as marketing) at any time, without affecting the lawfulness of earlier processing.
Right to grievance redressal: raise a complaint about how we handle your data (see Section 15).
Right to nominate: nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
To exercise any of these rights, contact us at latcocoffee@gmail.com. We may need to verify your identity before acting on your request. We will respond within the timeframes required by applicable law.
Marketing opt-out: You can unsubscribe from marketing emails at any time using the "unsubscribe" link in any email, or by contacting us directly. You will still receive essential transactional messages relating to your orders and account.
The Site is intended for users aged 18 and above. We do not knowingly collect personal data from children without verifiable parental or guardian consent as required by the DPDP Act. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
We primarily store and process your data within India. Some of our service providers may process data on servers located outside India. Where this happens, we take steps to ensure your data is handled in accordance with this Policy and applicable law, and that transfers comply with any restrictions notified by the Central Government under the DPDP Act.
In accordance with the Information Technology Act, 2000 and the SPDI Rules, and to address concerns under the DPDP Act, you may contact our Grievance Officer:
Name: Dhananjaya PC
Designation: Director, Laterite Coorg
Email: latcocoffee@gmail.com
Address: Mahadevapura, Bengaluru, Karnataka, India
Phone: +91 97409 15713
We will acknowledge complaints within a reasonable time and endeavour to resolve them promptly.
The Site may contain links to third-party websites and services (such as our Instagram or WhatsApp). We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing any personal data.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. Where changes are significant, we will take reasonable steps to notify you. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: latcocoffee@gmail.com
Phone / WhatsApp: +91 97409 15713
Address: Mahadevapura, Bengaluru, Karnataka, India
Hours: Monday–Saturday, 9:00 AM – 6:00 PM IST