Privacy Policy
Data controller
Controller: [LEGAL_ENTITY_NAME] (Шеф Шами / Chief Shami), UIC [UIC_BULSTAT], registered at [REGISTERED_ADDRESS].
Privacy contact: [DPO_EMAIL] · Phone: +359 89 539 9855.
Data we process
Data provided during phone orders (name, phone, order details).
Technical data when visiting the site (IP address, browser, language, cookies).
Data from future analytics tools — only after your consent.
Purposes and legal basis
Order processing and communication — contract performance or pre-contractual steps.
Site operation and language preferences — legitimate interest / essential cookies.
Analytics — only with explicit consent (GDPR Art. 6(1)(a)).
Retention
Order data: up to 12 months after the transaction, unless law requires longer.
Consent cookies: up to 12 months.
Analytics data: per provider policy, deleted after consent withdrawal.
Third parties
The site links to Glovo, Takeaway and Bolt Food — they have their own privacy policies.
Hosting: Vercel Inc. (USA) — standard contractual clauses (SCC) where required.
We do not sell personal data to third parties.
Your rights
You have the right to access, rectify, erase, restrict, port and object to processing.
You may withdraw cookie consent at any time via browser settings or by clearing localStorage.
Complaint to CPDP Bulgaria (Commission for Personal Data Protection): www.cpdp.bg.