Privacy Policy

The owner of the personal data base is the Seller, whose details are specified in section 9 of this Policy.

name, phone number, email (optional), delivery address.

IP address, browser type, site visit time, cookies.

• Processing and fulfillment of orders.
• Communication with the client regarding order status.
• Improving service quality and personalization.
• Sending information about promotions and new products (with separate consent).
• Compliance with Ukrainian legislation.

consent of the data subject (Art. 6 of Law No. 2297-VI); performance of the contract (public offer); legitimate interests of the owner.

By placing an order or creating an account, you consent to the processing of your personal data in accordance with this Privacy Policy and the Law of Ukraine "On Personal Data Protection".

You have the right to withdraw consent by contacting hello@demo.vitrina.cafe. Withdrawal of consent does not affect the legality of processing prior to withdrawal.

Personal data may be transferred to:

• — Delivery service (for order fulfillment);
• — The payment system (for payment processing);
• — Government agencies (based on legal requirements);
• — SMS operator (phone number and message text — login codes and order notifications);
• — Email service Resend (email address and letter content — order confirmations, receipts, service emails);
• — Push notification service Expo (device identifier and the order notification text);
• — Mapping services (delivery address and its coordinates — address search, address field suggestions, route and delivery time calculation);
• — Cloudflare (IP address and technical browser data — the human verification check; a profile photo you upload is stored in Cloudflare R2 storage);
• — Error monitoring service Sentry (technical crash data: page address, browser, error stack; request bodies and personal data are stripped before sending);
• — Google, Apple or Facebook (Meta) — only if you choose to sign in with their account: we verify the sign-in token with them and receive that account's name, email and profile photo (Apple does not share a photo);

In addition, part of the content is loaded by your browser directly from third-party servers: map tiles from OpenStreetMap and default avatars from api.dicebear.com. These requests bypass our server, so those services can see your IP address.

We do not sell personal data to third parties.

Personal data is stored for the period necessary to achieve the purpose of processing, but not less than the periods established by law.

The specific periods Demo Cafe applies:

• — An order as a financial document (total, contents, fiscal receipt) — kept indefinitely: tax law requires at least three years, and we do not delete the document once they pass. The guest’s personal data is anonymised separately, under the periods below — the total and contents remain. This period cannot be shortened at a guest’s request.
• — Contact details on a guest order placed without an account (name, phone, e-mail, delivery address, order comment) — anonymised 12 months after the order. The total and contents remain, but are no longer tied to a person.
• — Order chat with the courier and support requests — 12 months.
• — Delivery logs (the number an SMS code was sent to, or the address an e-mail was sent to, with timestamp and delivery status) — 90 days.
• — The courier location track you follow on the map — 30 days.
• — Usage analytics (app and site events): device, session and account identifiers are deleted from an event after 180 days; anonymised events (which event, on which page, when) are kept indefinitely for statistics.

Account data is kept for as long as the account exists: deleting your profile anonymises it immediately, without waiting for the periods above. Regardless of any request, the financial part of an order (total, contents, receipt) is kept indefinitely — that is an obligation to the state, not to us.

In accordance with Art. 8 of the Law of Ukraine "On Personal Data Protection", you have the right to:

• — know about the sources of collection and location of your personal data;
• — receive information about the processing of your personal data;
• — demand correction or deletion of your personal data;
• — withdraw consent to the processing of personal data;

You have the right at any time to request the deletion of your personal data under Article 8 of the Law of Ukraine "On Personal Data Protection".

You can delete your account from the Profile page using the "Delete account" button. Personal data will be anonymized; the total, contents and receipt of your orders remain indefinitely — Ukrainian tax law requires at least three years.

Alternatively, send a request to hello@demo.vitrina.cafe from the email or phone number associated with your account.

The site uses cookies to ensure functionality and traffic analysis.

You can disable cookies in your browser settings, but this may affect site functionality.

By placing an order or creating an account, you consent to the processing of your personal data in accordance with this Privacy Policy and the Law of Ukraine "On Personal Data Protection".

You have the right to withdraw consent by contacting hello@demo.vitrina.cafe. Withdrawal of consent does not affect the legality of processing carried out prior to withdrawal.

For questions regarding personal data processing, contact: