Privacy policy

What data we collect

The site has no registration, accounts, or online payment. We process only the following data:

• Order data: the contents of your order and notes when you send a message from the cart via WhatsApp, plus the name, phone number, and delivery address you provide in the conversation.
• Technical data: IP address, browser and device type, pages viewed, and visit time (server logs).
• Your cookie choice: a record of consent or refusal.

Purposes and legal basis

Data is processed only for the purposes below, based on your consent or where the law provides otherwise:

• receiving, confirming, and fulfilling your order;
• contacting you and answering your questions;
• keeping the site secure and working correctly;
• complying with legal requirements.

Consent

By sending an order message or using our contact channels, you consent to the processing of your personal data for these purposes. You may withdraw consent at any time by writing to us; withdrawal does not affect the lawfulness of processing carried out before it.

Third parties and data transfers

We do not sell your personal data or share it with third parties for marketing. The site relies on WhatsApp and Instagram (Meta Platforms), Google Maps (the map), and the hosting provider that serves the site. These services may operate servers outside Azerbaijan, so data is processed only to the extent necessary and under the services’ own privacy rules.

Data is disclosed to state authorities only in cases and in the manner provided by law.

Retention

Data is kept for as long as needed to achieve the purpose of processing. Order conversations and technical logs are then deleted or anonymised, unless the law requires longer retention.

Your rights

Under the Law “On Personal Data”, as a data subject you have the right to:

• find out whether your data is processed and for what purpose;
• access your data and obtain a copy;
• request correction of inaccurate or incomplete data;
• request destruction or blocking of your data;
• withdraw your consent;
• apply to the competent state authority or a court if your rights are violated.

Data security

We apply technical and organisational measures against unauthorised access, loss, and alteration: HTTPS encryption, security headers (CSP, X-Frame-Options), and restricted access to data.

Minors

We do not knowingly collect data from persons under 18. If you find that such data has been sent, contact us and we will delete it immediately.

Changes and contact

This policy may be updated to reflect changes in law or in our service; the current version is always on this page. To exercise your rights or ask questions, contact us via WhatsApp or Instagram. The Operator’s details are provided on request.