Privacy Policy

PRIVACY POLICY AND PERSONAL DATA PROTECTION

Effective Date: June 15, 2026

Last Updated: June 15, 2026

1. GENERAL PROVISIONS

This Privacy Policy and Personal Data Protection Policy (the “Policy”) defines the procedures for collecting, processing, using, storing, and protecting personal data of users of the Cheesecake Family website (the “Website”).

The data controller is:

Sole Proprietor OLENA VIKTORIVNA KAPLONSKA

Tax ID: 2308803448

Registered address: 2 Oleksandra Myshuhy St., Apt. 295

Kyiv, 02141, Ukraine

Bank details:

IBAN: UA783052990000026001005035782

JSC CB PrivatBank

MFO 305299

By using the Website, placing an order, submitting a request, or otherwise providing personal data, the User confirms that they have read this Policy and consent to the processing of their personal data in accordance with its terms and the applicable laws of Ukraine.

2. PERSONAL DATA WE COLLECT

When using the Website, we may collect and process the following personal data:

First and last name;

Phone number;

Email address;

Delivery address;

Order information;

Order history;

Payment information related to orders;

IP address;

Browser, device, and operating system information;

Information regarding interaction with the Website;

Requests submitted through contact forms;

Any other information voluntarily provided by the User while using the Website.

We do not collect or process special categories of personal data, including information concerning racial or ethnic origin, political opinions, religious beliefs, health status, or other categories of data whose processing is restricted under Ukrainian law.

3. PURPOSE OF PROCESSING PERSONAL DATA

Personal data is processed for the following purposes:

Receiving, processing, and fulfilling orders;

Manufacturing and delivering confectionery products and food items;

Communicating with customers regarding orders;

Providing consultations and responding to inquiries;

Processing payments and refunds where required by law;

Maintaining accounting and tax records;

Improving the Website and customer service quality;

Ensuring Website security;

Complying with applicable laws of Ukraine;

Sending informational and marketing communications with the User’s separate consent.

4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is processed on the basis of:

The User’s voluntary consent;

The necessity to perform a sales and delivery contract;

Compliance with legal obligations under Ukrainian law;

Legitimate interests related to operating the Website and providing customer service.

5. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We do not sell or disclose Users’ personal data to third parties except where such disclosure is necessary for order fulfillment or required by law.

Personal data may be shared with:

Delivery service providers;

Courier companies;

Payment service providers and banking institutions;

CRM system providers;

Hosting and technical support providers;

Accounting and legal advisors;

Government authorities where required by law.

5.1 Delivery Services

To fulfill orders, Users’ personal data may be provided to delivery services, couriers, and other logistics partners solely to the extent necessary to deliver the ordered products.

5.2 Online Orders

When placing an order through the Website, the User voluntarily provides personal data necessary for processing, confirming, manufacturing, and delivering the order, as well as communicating regarding such order.

6. DATA RETENTION

Personal data is retained for as long as necessary to achieve the purposes for which it was collected or for the periods required by Ukrainian law.

Once the processing purpose has been achieved, personal data may be deleted or anonymized unless otherwise required by law.

7. PERSONAL DATA SECURITY

The data controller implements appropriate organizational and technical measures to protect personal data against unauthorized access, loss, alteration, damage, unlawful disclosure, or misuse.

8. USER RIGHTS

Users have the right to access their personal data, request correction or updating, request deletion in cases provided by law, withdraw consent to processing, and protect their rights in accordance with applicable legislation.

9. USER REQUESTS

To obtain information regarding the processing of personal data or to exercise their rights, Users may contact us using the contact details provided on the Website.

10. LINKS TO THIRD-PARTY WEBSITES

The Website may contain links to third-party websites. The data controller is not responsible for the content of such websites or their personal data processing practices.

11. CHANGES TO THIS POLICY

The data controller reserves the right to amend this Policy at any time. The current version of the Policy is always available on the Website.

12. CONTACT INFORMATION AND COMPANY DETAILS