Legal

Privacy Policy

Updated 28 January 2026

This Privacy Policy explains how RoastWorksLviv.com LLC ("RoastWorksLviv.com", "we", "us", "our") collects, uses and protects personal data when you visit our website at roastworkslviv.com or contact us about our products and services. RoastWorksLviv.com LLC is the data controller for all personal data described in this document.

1. Who we are

RoastWorksLviv.com LLC is a specialty coffee roastery and wholesale supplier registered in Ukraine, with our principal place of business at 14 Promyslova Street, Lviv 79020, Ukraine. For any matter relating to your personal data, you may contact us at privacy@roastworkslviv.com.

2. What personal data we collect

We collect personal data in the following ways:

  • Contact form data: When you submit our website enquiry form, we collect your full name, email address, company or venue name (if provided), the subject of your enquiry and the content of your message.
  • Technical and usage data: When you visit our website, we automatically receive technical information such as your IP address, browser type and version, operating system, referring URL, pages visited and time spent on the site.
  • Cookie data: We use cookies and similar tracking technologies. The specific cookies we use are described in Section 6 below.
  • Business enquiry data: If you become a wholesale partner, we collect business contact details, delivery addresses, order history and payment information as necessary to fulfil our contractual obligations.

3. How we use your data

We use your personal data for the following purposes:

  • To respond to your enquiry and provide information about our coffee products, wholesale pricing or training services.
  • To manage our wholesale partnership with you, including processing orders, arranging deliveries and issuing invoices.
  • To send sample packs, product updates or seasonal coffee announcements where you have consented to receive such communications.
  • To operate, maintain, secure and improve our website and digital services.
  • To fulfil our legal and regulatory obligations under Ukrainian law.
  • To analyse how our website is used so we can make it more relevant and useful to visitors.

4. Legal basis for processing

We process your personal data on one or more of the following legal bases:

  • Consent: Where you have submitted our contact form, accepted cookies, or opted in to marketing communications.
  • Contract: Where processing is necessary to fulfil a wholesale supply agreement or to take steps at your request before entering into such an agreement.
  • Legitimate interests: Where processing is necessary for our legitimate business interests — such as operating and improving our website, preventing fraud, and maintaining our business records — and those interests are not overridden by your rights.
  • Legal obligation: Where we are required to process data to comply with applicable Ukrainian law.

5. How long we keep your data

We retain personal data only for as long as necessary:

  • Contact form enquiries: up to 24 months from the date of submission, unless an ongoing business relationship develops.
  • Wholesale partner records: for the duration of the partnership and for seven years thereafter, as required for accounting and tax compliance under Ukrainian legislation.
  • Website analytics data: aggregated and anonymised after 26 months.

After the relevant retention period, personal data is securely deleted or anonymised.

6. Cookies

Our website uses the following types of cookies:

  • Essential cookies: Required for the website to function correctly (e.g. security, session management). These are always active.
  • Analytics cookies: Used with your consent to collect aggregated, anonymised data about how visitors interact with our site, helping us improve content and navigation.
  • Preference cookies: Store your cookie consent choice so we do not ask you again on subsequent visits.

You can accept or decline non-essential cookies using the banner displayed on your first visit. You can also delete cookies at any time through your browser settings. Note that disabling all cookies may affect the functionality of the site.

7. Sharing your data

We do not sell, rent or trade your personal data to third parties. We may share data only in these limited circumstances:

  • Service providers: Trusted third parties who process data on our behalf, such as our web hosting provider, email delivery service and analytics platform. All such processors are bound by data processing agreements that restrict their use of your data.
  • Delivery partners: Where necessary to arrange delivery of your wholesale order (e.g. sharing your delivery address with Nova Poshta or a similar courier).
  • Legal authorities: Where required to do so by Ukrainian law, court order, or to protect our legal rights.

8. Your rights

Depending on your location and applicable law, you may have the right to:

  • Access the personal data we hold about you and receive a copy of it.
  • Have inaccurate data corrected without undue delay.
  • Request deletion of your personal data ("right to erasure") where there is no longer a lawful basis to retain it.
  • Restrict or object to the processing of your data in certain circumstances.
  • Receive your data in a structured, commonly used, machine-readable format.
  • Withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.

For full details on how to exercise these rights, please see our GDPR & Data Protection page.

9. Security

We implement appropriate technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. No method of electronic transmission or storage is 100% secure; however, we apply industry-standard protections proportionate to the sensitivity of the data we process.

10. International transfers

Our primary operations and data storage are within Ukraine. If personal data is transferred to or accessed from outside Ukraine — for example, by a cloud infrastructure provider with servers in the EU — we ensure appropriate safeguards are in place, including standard contractual clauses or reliance on adequacy decisions where applicable.

11. Children's privacy

Our website and wholesale services are directed at business operators and are not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

13. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@roastworkslviv.com or by post at: RoastWorksLviv.com LLC, 14 Promyslova Street, Lviv 79020, Ukraine.