Privacy
Policy

This Privacy Policy describes how the healthy food restaurant Organica (hereinafter — "we", "our", "the restaurant") collects, uses, and protects users' personal information (hereinafter — "you", "user") on the website https://organica.com.ua/ (hereinafter — "Website").

1. What Information We Collect

We may collect the following information:

• First and last name
• Email address
• Phone number
• Delivery address (if you place an online order)
• Order details
• Cookies and website usage data (via Google Analytics or other tools)

2. How We Use Your Information

Collected information may be used for:

• Processing and delivering your orders
• Providing personalized services
• Responding to your inquiries
• Improving our website and services
• Sending newsletters (with your consent)

3. Data Storage and Protection

We take the security of users’ personal data seriously and apply all necessary measures to protect it.

3.1. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, specifically:

• order data — up to 1 year after order completion;
• newsletter data — until you withdraw your consent;
• analytical data — up to 24 months (e.g., Google Analytics).

After the retention period expires, data will be securely deleted or anonymized.

3.2. Data Storage Location

Your data may be stored:

• on secure servers of our hosting provider within the European Union or Ukraine;
• in internal CRM systems or databases accessible only to authorized personnel.

3.3. Technical and Organizational Safeguards

To protect personal data, we have implemented the following measures:

• SSL/HTTPS for secure connection between the website and your browser;
• Two-factor authentication for access to administrative systems;
• Regular data backups;
• Access restrictions to personal data limited to employees who require it for their duties;
• Antivirus protection and DDoS mitigation (via hosting platform);
• Security audits — periodic vulnerability checks of our systems.

3.4. In Case of Data Breach or Security Incident

If we detect a security breach that may impact your personal data, we commit to:

• notify you as soon as possible (no later than 72 hours);
• inform the relevant supervisory authority;
• take actions to mitigate damage and prevent further incidents.

4. Data Sharing with Third Parties

We do not sell, transfer, or disclose your personal data to third parties without your explicit consent, except as described in this Policy or as required by law.

4.1. Service Providers

We may share your personal data with third parties who help us deliver our services, specifically:

• Delivery services (e.g., courier or food delivery companies) — for order fulfillment;
• Payment systems (e.g., LiqPay, WayForPay, Stripe, or others) — for processing online payments. Please note that we do not store your card data — transactions are securely handled through partner gateways;
• Website support partners — only to the extent needed for administration or technical troubleshooting;
• CRM or email services (e.g., eSputnik, Mailchimp) — for managing subscriptions, promotions, and personalized offers.

All third parties are required to maintain confidentiality and use the data solely to provide their respective services.

4.2. Analytics and Website Improvements

We use third-party analytics tools, such as Google Analytics, Meta Pixel (Facebook Pixel), and others, which may collect anonymized technical data about your interaction with the website (device type, browser, pages visited, etc.).

This data does not identify you personally, but helps us analyze user behavior and improve site functionality.

4.3. Legal Requirements

We may disclose your data to third parties in the following situations:

• When required by law (e.g., court order or law enforcement request);
• If necessary to protect our rights, property, or the safety of users or third parties;
• To comply with tax or other regulatory obligations.

4.4. International Data Transfers

If data is transferred outside Ukraine or the European Economic Area, we ensure that such transfer is carried out in accordance with legal requirements, including standard contractual clauses or other lawful mechanisms.

5. Your Rights

We respect your right to data protection and enable you to exercise your rights under the Law of Ukraine on Personal Data Protection and, where applicable, the General Data Protection Regulation (GDPR).

5.1. Right of Access

You have the right to obtain confirmation as to whether your personal data is being processed, and access to the data along with information about:

• the purposes of processing;
• categories of personal data;
• sources of data collection;
• recipients or categories of recipients of the data;
• retention periods or criteria for determining them.

5.2. Right to Rectification

If your data is inaccurate, incomplete, or outdated, you have the right to request its correction or completion.

5.3. Right to Erasure (“Right to Be Forgotten”)

You have the right to request the deletion of your personal data if:

• it is no longer needed for the purposes it was collected;
• you have withdrawn consent and there is no other legal basis for processing;
• the data was processed unlawfully;
• deletion is required to comply with a legal obligation.

5.4. Right to Restriction of Processing

You may request restriction of processing in the following cases:

• you contest the accuracy of the data — for the period of verification;
• processing is unlawful, but you do not want the data to be erased;
• we no longer need the data, but you require it for legal claims;
• you object to the processing — pending the verification of legitimate grounds.

5.5. Right to Object

You have the right to object to the processing of your data if it is based on our legitimate interests, including profiling or marketing.

5.6. Right to Data Portability

In applicable cases, you have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

5.7. Right to Withdraw Consent

If you have given consent to the processing of personal data, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

5.8. Right to Lodge a Complaint

If you believe your rights have been violated, you have the right to file a complaint:

• to the Ukrainian Parliament Commissioner for Human Rights;
• to the relevant EU supervisory authority (if GDPR applies);
• or take legal action to protect your rights.

How to Exercise Your Rights?

To exercise any of the above rights, you may contact us in writing or via email:

Email: info@organica.com.ua

Postal address: Lviv, Shevchenka Street, 73A

Phone: +380 63 787 17 77

We will process your request within 30 calendar days of receipt. If necessary, the period may be extended, and you will be informed accordingly.

6. Changes to This Policy

We may periodically update this Privacy Policy. All changes will be published on this page with the updated date.