Privacy policy

What we keep and why

Every line below exists because without it we cannot do what you asked.

• Name, phone, email — to prepare and deliver the order. Until the account is deleted.
• Delivery address — to reach you. Kept on the order, for the fiscal retention period.
• Order contents and total — the order itself, and accounting. The fiscal retention period (10 years).
• Booking name, phone, party size — to hold the table. Until deletion.
• Password — kept only as a cryptographic hash (scrypt, salted per user). It cannot be turned back into a password.
• Session — to keep you signed in. 30 days, revocable.
• Allergy note — kitchen safety. Printed on the ticket and kept with the order.

Card details

They never reach us. Payment happens at the processor; we keep a reference and a state.

Deleting your account

Deletion anonymises rather than hard-deletes — orders are accounting records with a legal retention period.

Actually removed: addresses, notifications, linked accounts, sessions, your name, phone and password.

Kept but emptied of you: orders and bookings lose their link to the account and every personal field. The financial record survives; the person does not.

Your rights

You can ask for a copy of everything we hold about you at any time — from your account, one button, immediate, as JSON.

You may ask for rectification, erasure, restriction, or object to processing. Erasure is done from the account, behind a typed confirmation.

For anything else: office@zucca.ro. You may also contact the Romanian data protection authority (dataprotection.ro).

Who else sees it

The payment processor when you pay by card, and the email provider for confirmation messages. That is all.

No analytics, no tag manager, no chat widget, no AI service. Fonts are self-hosted, so no request goes to a font CDN.