Privacy policy

This is a translation provided for convenience. In case of any discrepancy, the Ukrainian version prevails.

This policy explains what personal data the Fajni Pyrohy website collects, why, how we protect it and what rights you have. We comply with the Law of Ukraine "On Personal Data Protection" and, for visitors from the European Union, the EU General Data Protection Regulation (GDPR).

1. Who processes your data

Data controller: [Full name — sole proprietor], tax ID [_______], 13 Vynohradna St., Kenderesiv village, Mukachevo district, Zakarpattia region, Ukraine. Contacts are on the "Contact" page.

2. What data we collect

When you place an order:

• name, phone number, preferred contact method (Telegram, Viber, WhatsApp, Messenger, phone call);
• delivery address, preferred date and time;
• the Recipient's name and phone if the order is a gift, and the card text;
• order contents and total, your comment.

If you subscribe to order status in Telegram: your Telegram ID and username.

If you leave a review: name, rating and review text.

Automatically: technical data (IP address, browser and device type, pages visited) — for spam protection and, with your consent, for analytics (see the Cookie policy).

We do not collect bank card data: you pay on receipt.

3. Why we process data and on what basis

Purpose	Legal basis
Accept, make and deliver your order, contact you about it	performance of the contract (public offer), your consent
Send order status updates in Telegram	your consent (you tap "Track" yourself)
Keep sales and accounting records	legal obligation
Publish reviews	your consent
Protect the website from abuse	legitimate interest
Analyse website traffic	your consent to analytics cookies

We do not use your data for marketing without separate consent and never sell it to third parties.

4. Who else has access

• Our staff — only as needed to fulfil the order (baker, courier).
• Technical service providers that store or transmit data on our behalf: website hosting (Cloudflare), server and database (Render, Neon), Telegram — for order notifications, Google — maps and analytics (with consent).

Some of these services have servers outside Ukraine (including the EU and the USA). We choose providers that ensure an adequate level of data protection.

We use automated tools to process orders, including artificial-intelligence services for accounting. Decisions about your order are made by people.

5. How long we keep data

• order data — 3 years from the order date (for accounting and possible claims), then deleted or anonymised;
• Telegram ID for notifications — until you unsubscribe or 1 year after your last order;
• reviews — until you ask us to delete them;
• analytics data — up to 14 months.

6. Your rights

Under Article 8 of the Law of Ukraine "On Personal Data Protection" (and the GDPR for EU residents) you have the right to:

• know what data we process and receive a copy;
• have inaccurate data corrected;
• have data deleted or its processing restricted;
• withdraw consent at any time (this does not affect the lawfulness of earlier processing);
• object to processing;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (or the supervisory authority of your EU country).

To exercise your rights, contact us via the website. We will reply within 30 days.

7. How we protect data

The website uses a secure connection (HTTPS). Only authorised persons can access order data; the admin panel is password-protected. We keep only the minimum data necessary.

8. Consent to personal data processing

By placing an order, you confirm that you have read this policy and consent to the processing of your personal data for the purposes listed in section 3. If you provide another person's data (the Recipient), you confirm that you are entitled to share it.

9. Changes

We may update this policy. The current version is always available on this page; the date of the latest update is shown at the top.