beanindex

Privacy notice

In short: Bean Index sets no cookies, uses no tracking and loads no content from other servers. Personal data about visitors only arises in the web server's log files and when you send us an e-mail. We also read public product data from roasters' shops (section 10). In detail:

1. Who is responsible for your data

The controller for the processing of personal data on this website is:

Yevhen Polishchuk
vul. Verkhovnoi Rady 21a, kv. 74
02094 Kyiv
Ukraine
E-mail: hello@beanindex.coffee

We have not appointed a data protection officer.

2. Hosting

The website is hosted by Hosting Ukraine LLC (TOV “Khosting Ukraina”), Kyiv, Ukraine (company code EDRPOU 37593550). The servers are located in Germany. The hosting provider processes this data on our behalf in order to deliver the website. The website consists of ready-made, static pages. There is no database that stores visitor data, and there are no user accounts. The search fields send what you type to our server as part of the page address; like every address, it appears in the log file (section 3).

The connection is encrypted with TLS (you can tell by “https://”).

3. Server log files

Each time a page is requested, the web server automatically records:

  • the IP address of the requesting device,
  • the date and time of the request,
  • the address (URL) requested and the request method,
  • the HTTP status code and the amount of data transferred,
  • the previously visited page (referrer), if your browser sends it,
  • the identifier of your browser and operating system (user agent).

Purpose: to keep the website running and secure, to find errors, to detect and fend off attacks, and to count in aggregate how often visitors follow our links to roasters' shops (section 5). We don't analyse the data to identify individuals, and we don't combine it with other data.

Lawful basis: legitimate interests (Art. 6(1)(f) UK GDPR). Our legitimate interest is the secure and stable operation of the website and knowing whether it sends visitors to roasters.

The hosting provider keeps the log files for the current month and the three previous months and then deletes them automatically. We only evaluate them in aggregate (section 5).

Retention: the log files are deleted after at most 120 days. We keep only counts without IP addresses for longer, such as “coffee X: this many visits to the roaster in a month”.

4. No cookies, no tracking, no third-party content

  • No cookies. Bean Index sets no cookies.
  • No tracking. We use no analytics or statistics services, no tracking pixels and no advertising networks.
  • Nothing stored in your browser. We store nothing in your browser's storage, including localStorage and sessionStorage. Your catalogue filters are in the page address, not in your browser.
  • No third-party content. Fonts, scripts, images and data come from our own server. We embed no maps, videos, fonts or social media buttons from other providers, so your browser doesn't connect to other servers while you use Bean Index.

5. Links to roasters

Links to roasters' shops go through a redirect on our server (addresses starting with “/go/”). The redirect stores nothing of its own: the request appears in the log files like any other (section 3) – with your IP address, the time, the /go/ address, which tells us which coffee or roaster you went to, the referrer and the user agent. From these we count in aggregate how often visitors go to a roaster.

We add tags to the destination address, such as “utm_source=beanindex” and an identifier for the coffee. They tell the roaster that the visit came from Bean Index; they contain no data about you. As the referring page, your browser sends only our domain, not the individual page.

When you click, you leave Bean Index. From then on, the roaster's privacy policy applies.

There are currently no affiliate links on Bean Index. If we use affiliate programmes later, the links will be marked and this section updated: after a click on an affiliate link, the programme's operator may set cookies on its own domain to attribute a purchase. Nothing changes on Bean Index itself.

7. Contacting us by e-mail

If you send us an e-mail – including through “Report an error”, “Suggest a roaster” or “Confirm details”, which open your e-mail program with a prepared message – we process your e-mail address, your name if you give it, and the content of your message. Bean Index has no contact form; the message goes straight from your e-mail program to our mailbox. The mailbox is provided by Hosting Ukraine LLC; incoming messages are forwarded to a mailbox at Google Ireland Limited (Gmail).

Purpose and lawful basis: to answer your request and correct reported errors – legitimate interests (Art. 6(1)(f) UK GDPR); where it concerns a contract, for example with a roaster, Art. 6(1)(b) UK GDPR.

Retention: we delete the message once the matter is dealt with, unless the law requires us to keep it longer. If we make a correction, it appears in the public list of corrections in the methodology – without your name or e-mail address.

8. Recipients and international transfers

We don't pass on data from the log files or from e-mails, except to our hosting and e-mail providers, who process it on our behalf, or where the law requires us to. We run Bean Index from Ukraine; our hosting provider is also based in Ukraine, and its servers are in Germany. Your data is therefore processed outside the UK. You can exercise your rights under section 9 directly with us. There is no automated decision-making or profiling.

9. Your rights

Under the UK GDPR you have the right of access to the data we hold about you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

Right to object: where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation (Art. 21 UK GDPR).

An e-mail to hello@beanindex.coffee is enough. Please note: the log files contain only an IP address. Without further information we usually can't link it to a person, and so can't give you information about it (Art. 11 UK GDPR).

Right to complain: you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint. We would appreciate the chance to deal with your concern first, so please contact us beforehand if you can.

10. Data from roasters' shops

We read publicly available product data from roasters' online shops: the name of the coffee, origin, process, price, pack size and the shop address. Where a roastery trades as a sole trader under a person's name, the roastery's name can be personal data. The lawful basis is legitimate interests (Art. 6(1)(f) UK GDPR); our legitimate interest is a comparable directory for coffee buyers. The source is the shops themselves. Notifying every roaster individually would involve disproportionate effort (Art. 14(5)(b) UK GDPR), so we provide this information here and on For roasters. To object or be removed, an e-mail from the shop's domain to hello@beanindex.coffee is enough.

11. Date of this notice

This privacy notice is dated 20 Oct 2026. If the way the website works changes, we will update it.

Last updated: