Privacy Policy

Last updated: May 5, 2026

Black Rifle Coffee Company operates this website, its online shopping environment, and the digital features, services, content, products, and tools made available through these channels. The company aims to provide customers with a convenient and tailored online experience while maintaining responsible practices for handling personal information. Shopify supports certain portions of the online store and related functions. This Privacy Policy describes how information relating to identifiable individuals may be collected, received, used, retained, processed, and disclosed when visitors browse the website, register for an account, purchase products, use available functions, communicate with customer support, or otherwise interact with the Services. If there is a difference between this Privacy Policy and the Terms of Service regarding privacy or the treatment of personal information, the provisions of this Privacy Policy will apply to those matters.

By accessing or using the Services, visitors acknowledge that they have had an opportunity to review this Privacy Policy and understand the general information practices described within it. Personal information generally refers to information that identifies a person or can reasonably be connected with a particular individual. Data that has been sufficiently anonymized, aggregated, or de-identified so that it cannot reasonably be associated with a specific person will generally fall outside the definition of personal information, subject to applicable law.

The information collected may vary according to the manner in which an individual interacts with the Services, the features used, the individual’s location, and the privacy requirements applicable to the particular situation. Information provided directly by customers may include names, billing information, delivery addresses, email addresses, telephone numbers, and other contact details. Payment and transaction information may include payment card details, financial account information, selected payment methods, purchase records, confirmations, and related transaction data. Account information may include login credentials, preferences, settings, and security-related details. Records of shopping activity may include products viewed, selected, saved, added to a cart or wishlist, purchased, returned, exchanged, or cancelled.

Information may also be obtained from communications between customers and the company. When individuals contact customer service, the company may receive questions, comments, requests, feedback, order-related information, and other details voluntarily included in those communications. Technical information may be collected concerning the device, browser, operating system, network connection, IP address, and other identifiers associated with the equipment used to access the Services. Usage information can also describe interactions with the website, such as pages visited, navigation behavior, feature engagement, timing, and general patterns of activity.

Personal information can originate from several different sources. Customers may submit information when creating or managing accounts, completing purchases, filling out online forms, contacting support, submitting reviews or feedback, participating in promotions, or otherwise using the Services. Certain information may be gathered automatically through cookies, pixels, log files, and comparable technologies that operate when individuals visit or interact with the website. The company may also receive information from vendors, contractors, technology providers, business partners, and other third parties when those parties are permitted to provide information for legitimate business purposes.

Information collected through the Services may be used to operate and administer the online store, maintain customer accounts, complete purchases, process payments, fulfill orders, arrange delivery, manage returns and exchanges, and provide transaction-related notifications. It may also be used to remember selected preferences, improve website functionality, personalize features, assist with product discovery, support reviews, and make the shopping experience more relevant. Understanding how customers interact with products and website features can help the company evaluate performance and develop improvements to its Services.

The company may also use personal information for advertising and promotional activities where permitted by applicable law. Marketing communications may be delivered through channels such as email, text messages, or physical mail. Advertising and promotional content may take into account information such as previous purchases, browsing activity, products placed in a shopping cart, interactions with the website, or other permitted activity. The nature and availability of these practices may depend on applicable privacy requirements and the choices available to individuals.

Security and fraud prevention are additional purposes for processing personal information. The company may use relevant information to authenticate accounts, evaluate transactions, identify unusual behavior, investigate suspected fraud, prevent misuse, protect its systems, and maintain the integrity of the Services. Customers who establish accounts are expected to keep usernames, passwords, and other authentication details confidential and should not intentionally provide account credentials to unauthorized persons.

Information may be used to maintain communications with customers and provide assistance throughout the customer relationship. This includes responding to questions, resolving service issues, processing requests, communicating about purchases, and providing account or order information. Personal information may also be processed when necessary to comply with applicable laws, regulations, court orders, governmental requests, or other legal obligations. The company may use or disclose information when investigating suspected unlawful conduct, enforcing applicable agreements, protecting its rights and property, safeguarding customers or other individuals, or defending against legal claims.

The company may engage third-party service providers to perform functions necessary for operating the business. Depending on the circumstances, these providers may include Shopify, payment processors, hosting companies, analytics services, customer service platforms, information technology providers, fulfillment businesses, shipping carriers, cloud service providers, marketing vendors, advertising partners, and cybersecurity providers. Such parties may receive information when it is necessary for them to perform services on behalf of the company or support legitimate business activities.

Some advertising, analytics, and personalization technologies may involve information relating to activity across different websites, services, or online merchants. Where applicable law provides individuals with choices concerning targeted advertising, the sale of personal information, or certain forms of information sharing, customers may be able to exercise those choices through available privacy controls or other designated mechanisms. The availability and scope of these rights depend on the individual’s location and the laws that apply.

Information may also be disclosed when a customer asks or authorizes the company to do so. For example, information may be provided when necessary to arrange delivery, connect an account with a third-party service, use social media functionality, or participate in an integration selected by the customer. Personal information may also be exchanged among affiliated entities or related companies where appropriate. In addition, information may become part of a corporate transaction involving a merger, acquisition, financing, restructuring, bankruptcy proceeding, transfer of assets, or similar business event.

Shopify provides technology that supports significant portions of the company’s online store. As part of providing those services, Shopify may independently collect and process information associated with visitors’ interactions with the website and online store. Information submitted through the Services may therefore be transmitted to Shopify and other service providers, including organizations operating outside the country where a customer resides. Shopify may process information in connection with its own services, interactions with merchants, and efforts to improve its technology. Customers interested in understanding Shopify’s independent privacy practices should review the privacy information and choices made available directly by Shopify.

The website may provide links, integrations, applications, or other connections to services controlled by independent third parties. Those external platforms may maintain privacy practices and security procedures that differ from those of Black Rifle Coffee Company. Customers should review the applicable privacy notices, terms, and security information before providing personal information to an external service. The company is not responsible for the privacy practices, security controls, content, accuracy, or reliability of independent third-party websites or services. Information posted through public or semi-public platforms, including social networking services, may be accessible to other users and may be handled under the policies established by those platforms.

The Services are not intended for children, and the company does not knowingly seek to collect personal information from children below the age permitted by applicable law. If a parent or legal guardian believes that a child has submitted personal information through the Services, the parent or guardian may contact the company and request appropriate action, including deletion where legally required. As of the effective date of this Privacy Policy, the company does not have actual knowledge that it sells or shares personal information belonging to individuals under sixteen in a manner covered by applicable privacy laws.

The company takes reasonable measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, or loss. Nevertheless, no online system, electronic transmission, or storage environment can be guaranteed to be completely secure. Information transmitted through the internet may encounter risks while moving between systems. Customers should therefore exercise caution when communicating sensitive information and should avoid sending confidential details through unsecured channels when safer alternatives are available.

Personal information may be retained for different periods depending on the purpose for which it was collected and the company’s operational, legal, and contractual requirements. Retention considerations may include maintaining customer accounts, completing transactions, providing services, resolving disputes, preserving business records, meeting regulatory obligations, preventing fraud, and enforcing agreements or policies. When information is no longer required for an applicable purpose, it may be deleted, anonymized, or otherwise handled according to the company’s retention practices and legal obligations.

Depending on the customer’s location and applicable privacy laws, individuals may have various rights concerning their personal information. These rights may include requesting access to information maintained about them, seeking correction of inaccurate information, asking for deletion, obtaining a copy of certain information, or requesting portability where legally available. Certain jurisdictions may also provide rights to object to or restrict specific processing activities or to opt out of the sale, sharing, or use of information for targeted advertising.

Marketing preferences can generally be managed through the unsubscribe mechanisms included in promotional communications. Choosing to discontinue marketing messages does not necessarily stop service-related communications. The company may still contact customers regarding orders, transactions, accounts, security matters, customer service issues, or other communications that are necessary for providing requested services.

Privacy rights may be subject to legal limitations, exceptions, verification requirements, and other conditions. Before fulfilling certain requests, the company may need to confirm the identity of the person making the request in order to protect personal information from unauthorized disclosure. Where permitted, individuals may use an authorized representative to submit a privacy request, although additional documentation or verification may be required. The company will not unlawfully discriminate against individuals because they exercise privacy rights available to them under applicable law.

Individuals who have concerns regarding the handling of their personal information may contact the company to raise a question, complaint, or privacy-related request. Depending on the applicable jurisdiction, individuals may also have the right to appeal certain privacy decisions or contact an appropriate governmental data protection or privacy authority if they believe their concerns have not been adequately addressed.

Because the company and its service providers may operate internationally, personal information may be transferred to, stored in, or processed within countries other than the customer’s country of residence. When information originating from the European Economic Area or the United Kingdom is transferred to another country, the company or its service providers may rely on legally recognized transfer mechanisms where required. These mechanisms may include appropriate contractual protections or other safeguards recognized by applicable regulatory authorities.

This Privacy Policy may be modified from time to time as business operations, technologies, legal requirements, regulatory expectations, or information-management practices develop. When changes are made, an updated version will be made available through the website, and the policy date will be revised when appropriate. Additional notice may be provided when required by applicable law or when the nature of a material change warrants further communication.

Questions regarding privacy practices, personal information, or available privacy rights may be submitted through the company’s customer support channels. Written privacy inquiries may be directed to info@blackriflecoffee.com. Correspondence may also be sent to Black Rifle Coffee Company at 3131 W 2210 S, West Valley City, UT 84119, United States. Individuals seeking to exercise a privacy right should provide enough information for the company to identify and understand the request while avoiding unnecessary submission of sensitive personal information. Through these practices, the company seeks to maintain responsible information handling while supporting a functional, secure, and customer-focused digital shopping environment.