How does Mr. J Coffee collect, protect, and handle your data under active advertising and privacy standards?
This policy answers in plain language every question about how information is treated when you visit mrjcoffee.com, submit an inquiry, use barista chat, or arrive via paid campaigns on Google Ads, Microsoft Advertising, or Meta Ads.
When did this privacy policy take effect?
This policy took effect on October 17, 2026. Any updates or changes to our operating practices, advertising tags, or privacy workflows are published immediately on this page with an updated effective date.
Who operates this coffee bar and acts as the data controller?
The data controller for this website is Mrjcoffee, trading online at mrjcoffee.com. Our physical establishment and retail location operates at 7805 VETERANS PARKWAY, COLUMBUS, GA 31909, COLUMBUS, GA, United States. You can reach our management by telephone at (541) 890-5378 or by email at [email protected].
What personal information do we collect from your visit?
We collect only the information strictly necessary to process your counter beverage inquiries and maintain site security:
- Inquiry Form Submissions (jotiebd.php): When you send a pre-order or inquiry, we store your name, telephone number (if provided), email address (if provided), pickup notes or address, inquiry kind, beverage and food specification, and notes.
- Support Chat (duruc39.php): We record the chat transcript and a session token stored locally in your browser so you can continue a conversation with on-duty baristas across page visits.
- Technical Log Data: Our web server records your IP address, browser user-agent string, referring URL, timestamp of render, and timestamp of form submission.
- Advertising Click Identifiers: When you arrive via paid advertisements, the landing URL passes campaign parameters: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads.
- Consent Choice: Your cookie preference is stored locally under the key
site_consent_v2.
We never collect payment cards, bank credentials, account passwords, or government identification numbers on this site.
For what purposes do we use your information?
We use collected data solely for specific, legitimate operational needs:
- To confirm and prepare drink and breakfast sandwich pre-orders, verify milk or allergy requirements, and notify you when items are ready at 7805 Veterans Parkway.
- To answer questions via live barista chat regarding our manual espresso machines, whole-leaf teas, or real-fruit smoothie ingredients.
- To diagnose technical server errors, prevent spam submissions via hidden form verification fields, and maintain website stability.
- To measure aggregate advertising performance and traffic acquisition efficiency across paid search and social campaigns.
What are the legal bases for processing your data?
Under applicable data protection laws including the General Data Protection Regulation (GDPR) for international visitors, we process data under these specific bases:
- Contractual Steps: Processing your name and contact details when you request an order quote, menu pricing, or advance breakfast sandwich preparation.
- Consent: Measuring advertising conversions, reading cookie storage, and processing chat interactions when you check consent boxes or accept our cookie banner.
- Legitimate Interests: Securing our infrastructure against automated bot abuse, monitoring server health, and preserving raw logs to defend against fraudulent activity.
Which advertising platforms send traffic to this site today?
This site is an active landing destination for paid advertising campaigns. Google Ads, Microsoft Advertising, and Meta Ads run paid traffic to mrjcoffee.com. Each platform attaches a specific click identifier to destination URLs:
- Google Ads: Attaches the
gclidparameter to track ad impressions, ad clicks, and subsequent counter inquiries. - Microsoft Advertising: Attaches the
msclkidparameter to attribute visits originating from Bing and the Microsoft search network. - Meta Ads: Attaches the
fbclidparameter for traffic originating from campaigns on Facebook and Instagram.
We present these platforms accurately as current traffic partners. Neither Google, Microsoft, nor Meta has reviewed, approved, or certified this website.
How does Consent Mode v2 govern tracking and storage tags?
We implement Google Consent Mode v2 to ensure privacy choices are enforced before any tag reads or writes storage. By default, upon your initial page load, four essential consent signals are set strictly to denied:
ad_storage: Deniedad_user_data: Deniedad_personalization: Deniedanalytics_storage: Denied
These four signals remain denied until you explicitly click "Accept All" on our consent banner or enable them in consent settings. If you click "Decline Non-Essential", these signals stay denied, preventing non-essential tracking cookies from being written to your browser. You can modify this choice at any moment.
Who are the third-party processors that receive this data?
We share data only with designated service providers essential to counter communication, hosting, and ad measurement:
- Google LLC / Google Ireland Ltd: Processes ad attribution and analytics signals under Consent Mode v2 settings.
- Microsoft Ireland Operations Ltd: Measures ad clicks via msclkid on Microsoft Advertising. Review their comprehensive data handling at the Microsoft privacy statement at privacy.microsoft.com.
- Meta Platforms Ireland Ltd: Processes campaign click attribution via fbclid where campaigns are active.
- Web Hosting & Mail Infrastructure: Secure cloud servers that host our database, execute PHP scripts, and transmit automated email notifications to our bar team.
How are international data transfers handled?
Our primary servers and physical coffee counter are located in the United States. If you visit mrjcoffee.com from outside the United States, your inquiry data is transferred to and processed within the United States. Where personal data is transferred across international borders, we rely on standard contractual clauses (SCCs) adopted by the European Commission and relevant adequacy decisions established with our cloud and advertising processors.
How long do we retain your information?
We do not retain information indefinitely. We hold data only for defined, practical timeframes:
- Inquiry Records & Notification Emails: Stored for exactly 18 months following receipt to verify catering records and seasonal order history.
- Chat Transcripts: Stored for 12 months from the date of the conversation.
- Server & Access Logs: Retained for 90 days, after which logs are permanently rotated and overwritten.
- Consent Choice Record: Your browser token under
site_consent_v2is retained for 6 months before prompting for confirmation. - Data Subject Access Requests: Formal requests submitted via our DSAR channel are processed and answered within 7 days.
What security measures protect your submitted information?
We enforce strict security controls across all website touchpoints. All traffic is encrypted in transit using Transport Layer Security (TLS 1.3). Inquiry endpoints incorporate dual server-side honeypot verification fields (office and weblink) alongside timestamp validation to block automated injection attacks. Access to our server logs and notification mailboxes is restricted to authorized operations personnel using multi-factor authentication.
What rights do European visitors hold under GDPR?
For visitors subject to the General Data Protection Regulation (gdpr), you hold full statutory rights regarding your personal data:
- Right of Access: You can request a complete copy of any personal data we hold about you.
- Right to Rectification: You can request immediate correction of inaccurate or incomplete contact records.
- Right to Erasure: You can demand deletion of your inquiry messages and chat logs ("right to be forgotten").
- Right to Restriction: You can request that we pause processing while data accuracy is contested.
- Right to Data Portability: You can receive your submitted data in a structured, commonly used machine-readable format.
- Right to Object: You can object at any time to processing grounded in legitimate interests or direct marketing.
- Right to Withdraw Consent: You may revoke consent at any moment via our consent banner controls.
What rights do United States and California residents hold under CCPA?
Under US state privacy statutes, including the California Consumer Privacy Act (ccpa) as amended by the CPRA, and parallel statutes across Virginia, Colorado, Connecticut, and Texas:
- You have the right to know what categories of personal information we collect and disclose.
- You have the right to request deletion of personal information collected directly from you.
- You have the right to correct inaccurate personal records.
- Opt-Out of Sale or Sharing: Mr. J Coffee does not sell personal information for monetary payment. We do not share personal data for cross-context behavioral advertising when non-essential cookies are declined.
- We will never discriminate against you, alter counter pricing, or refuse service because you exercised your statutory privacy rights.
Do we recognize Global Privacy Control (GPC) browser signals?
Yes. We recognize and honor global privacy control (GPC) signals transmitted via the Sec-GPC HTTP header. When your browser broadcasts a valid GPC signal, our site automatically treats it as a binding opt-out request for non-essential cookies, analytics storage, and advertising personalization without requiring additional manual input.
What is our policy regarding children's privacy?
Our website and digital services are designed for general public coffee and breakfast kitchen inquiries and are not directed to children under the age of 13 (or under 16 in applicable jurisdictions). We do not knowingly solicit or collect personal information from children. If we discover that an inquiry originated from a child without verified parental consent, we delete that submission immediately.
Where can you file a regulatory complaint?
If you believe your privacy rights have been violated, you have the right to lodge a complaint with an appropriate regulatory authority:
- In Georgia: Contact the Office of the Georgia Attorney General (Consumer Protection Division).
- In California: Contact the California Privacy Protection Agency (CPPA) or the California Attorney General.
- In other US States: File with your state Attorney General's consumer protection bureau.
- In the European Union: File with the Data Protection Authority (DPA) in the member state where you reside or work.
How can you submit a data access or deletion request?
To exercise any privacy rights, review personal data held by our bar, or request permanent erasure, submit a request through our dedicated Data Request Page or send an email directly to [email protected]. You may also send written requests to:
Mr. J Coffee Privacy Desk
7805 VETERANS PARKWAY
COLUMBUS, GA 31909
United States
We verify requester identity against prior inquiry email addresses and telephone records to prevent unauthorized disclosure. We answer all verified requests within 7 days at no charge.
How do we notify you of changes to this privacy policy?
When we modify this policy, we update the effective date at the top of this document. Material changes affecting how we process pre-order inquiries or manage Consent Mode v2 signals are posted clearly on our website footer. Continued use of mrjcoffee.com after changes take effect indicates acknowledgment of the revised policy.
How do you reach a live person with questions about your data?
You can contact our management team directly through any of these verified channels:
Operator: Mrjcoffee
Physical Counter: 7805 VETERANS PARKWAY, COLUMBUS, GA 31909, COLUMBUS, GA, United States
Direct Telephone: (541) 890-5378
Direct Email: [email protected]
Our bar operates daily in Columbus, Georgia. For counter orders and menu questions, visit our Contact Bar Page.