At gist.coffee, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, shop, and services.
1. Who we are (Data Controller)
The data controller responsible for processing your personal data is:
- Legal entity: SC Gist Coffee Shop SRL
- Registered address: Strada Grigore Ureche, Nr. 1–3, Spaţiu comercial, Bl. Walter Mărăcineanu, Etaj Mezanin, Iași, 700023, Romania
- Trade Register / VAT number: RO42719231
- Email: tudor@gist.coffee
No Data Protection Officer (DPO) has been appointed.
2. What personal data we collect
a) Contact forms
When you contact us via our contact form, we collect the information you provide (such as name, email address, phone number, and message). We use this data only to respond to your inquiry.
b) Online shop & customer accounts
When you place an order or create an account, we collect standard WooCommerce data, including:
- Name and surname
- Email address and phone number
- Billing and shipping address
- Company details and VAT number (if applicable)
- Order notes
c) Payments
Payments are processed via :contentReference[oaicite:0]{index=0}, bank transfer, or cash on delivery. We do not store full card details on our servers.
d) Delivery
Orders are delivered via :contentReference[oaicite:1]{index=1} or collected locally. Necessary personal data is shared with the courier solely for delivery purposes.
e) Customer support
You may contact us via email or phone. Communications may be stored to handle your request and improve our services.
3. Newsletter & marketing communications
You can subscribe to our newsletter via:
- Checkbox at checkout
- Dedicated subscription forms
- Pop-ups on the website
We use :contentReference[oaicite:2]{index=2} to send newsletters, transactional emails, and abandoned cart reminders.
We process newsletter data based on your explicit consent. You can unsubscribe at any time using the link in our emails.
4. Cookies, analytics & advertising
Our website uses cookies and similar technologies.
- Analytics tools such as :contentReference[oaicite:3]{index=3}
- Marketing and remarketing tools (e.g. Meta / Google Ads pixels)
Analytics and marketing cookies are activated only after you give consent via our cookie consent banner.
You can manage or withdraw your consent at any time from the cookie settings.
5. Legal bases for processing
- Contract performance – for processing orders and deliveries
- Consent – for newsletters, marketing, and analytics cookies
- Legitimate interest – for website security, fraud prevention, and basic logs
6. Data retention
- Order and invoice data: retained according to applicable accounting and tax laws
- Newsletter data: until you unsubscribe
- Contact form messages: up to 6 months
- User accounts: until you request deletion
7. Data processors & third parties
We may share personal data with trusted partners only when necessary:
- Hosting: :contentReference[oaicite:4]{index=4}
- Payments: Viva Payments
- Courier: Fan Courier
- Accounting / POS: :contentReference[oaicite:5]{index=5}
8. International data transfers
Some tools we use may process data outside the EU/EEA. Where applicable, such transfers are protected using appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
9. Your rights under GDPR
You have the right to:
- Access your personal data
- Request rectification or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Data portability
To exercise your rights, contact us at tudor@gist.coffee. For security reasons, we may request identity verification for sensitive requests.
We will respond within one month, as required by law.
10. Children & sensitive data
Our website is not intended for children under 16, and we do not knowingly collect data from minors.
We do not collect sensitive personal data or use automated decision-making with legal effects.
11. Events, reservations & future features
We may organize events, reservations, loyalty programs, or gift cards via our website. Any additional data processing related to these features will be covered by this Privacy Policy or supplementary notices.
12. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us at:
Last updated: January 2026