Privacy policy

This policy covers overcaffd (“we”, “us”) and the website at overcaffd.com. overcaffd is a content and personal branding studio run by Jun and Cody, based in Malaysia, working with coffee businesses here and overseas. This page explains what we collect, why, who else sees it, and what you can ask us to do with it. If anything is unclear, email overcaffd@gmail.com and we'll answer in plain English.

The short version

We collect almost nothing. If you just read the site, we do not know who you are. If you book a call or message us, we hold what you send us so we can reply and do the work. We do not sell your information and we do not run advertising trackers.

What we collect

• When you book a call. Your name, email address, time zone and anything you type into the booking form. This is handled by Cal.com, the scheduling tool the booking box on our offer page runs on.
• When you message us. Whatever you send by email, Instagram or WhatsApp, plus the address or handle it came from.
• If you become a client. The details we need to do the work and invoice you: your business name, contact details, social media accounts, the material you send us, and payment records.
• Technical information your browser sends. Your IP address, browser type and the pages you opened. Our host records this in ordinary server logs, which is how every website works. We do not use it to identify you.

We are not running website analytics, advertising pixels or tracking scripts at the moment. If that changes, this page changes first.

Why we collect it

• To arrange and hold a call with you.
• To answer your message.
• To deliver the service and invoice you, if you become a client.
• To keep the site running and secure.

The legal basis, where you are somewhere that asks for one, is either your consent (you contacted us), performing a contract (you are a client), or our legitimate interest in running and protecting the business.

Who else sees it

These are the services we use, and what each one touches.

• Netlify hosts the website and keeps the server logs described above.
• Cal.com runs the booking calendar and holds what you enter when you book a call.
• Google provides the mailbox we read and reply from, and the calendar your booking lands in. The fonts on this site are also loaded from Google Fonts, which means your browser sends your IP address to Google when a page opens, even if you never contact us.
• Namecheap forwards any email sent to hello@overcaffd.com on to our mailbox.
• Notion is where we keep our own records of who we are talking to and what stage it is at.
• Resend sends the emails that go out from the site, such as free resources you sign up for. Signups are switched off at the moment.
• Wise processes payments if you become a client.
• Instagram (Meta) and WhatsApp carry any message you send us that way.

Each handles your data under their own terms. We do not sell your information, we do not trade it, and we do not pass it to anyone else except where the law requires it.

Where your information goes

We are in Malaysia and the tools above are mostly run by companies in the United States and Europe, so your information is stored and processed outside your country in many cases. By contacting us you accept that. We pick tools that take security seriously, but we cannot control how another country's law treats data held there.

Cookies

We do not set any cookies ourselves, and we do not use cookies to build an advertising profile of you. The Cal.com booking box on our offer page may set its own cookies when you interact with it, in order to work. You can block or delete cookies in your browser settings and the rest of the site still works normally.

How we keep it safe

The site is served over https only. Our keys and passwords are stored as protected settings on the host, never in the website code. Access to the mailbox and to Notion is limited to the two of us and protected with two factor authentication. No system is perfect, so we keep what we hold to the minimum we actually need.

How long we keep it

Enquiries that go nowhere are deleted within about 24 months. Client records are kept while we work together and afterwards for as long as Malaysian tax and accounting rules require, currently seven years. Server logs are kept for a short period by our host and then rotated out.

Your choices

At any time, and for any reason, you can:

• Ask what we hold about you.
• Ask us to correct it.
• Ask us to delete it.
• Ask us to stop using it.
• Ask for a copy of it in a normal file format.
• Unsubscribe from any email we send, using the link in that email.

Email overcaffd@gmail.com and we will action it. We aim to reply within a few working days and to finish within 30 days. If you are in the UK, the EU or Australia and you think we have handled this badly, you can complain to your national data protection authority.

Children

This site is for people running a business. It is not aimed at children and we do not knowingly collect information from anyone under 16. If you think a child has sent us something, email us and we will delete it.

Changes

If we change this policy we update the date at the top. Changes apply from the date they are posted. If a change materially affects people already on our records, we will say so by email.

Contact

overcaffd
Malaysia
overcaffd@gmail.com