Privacy policy

1. General

1.1. This document explains what personal data the online store toggle.coffee collects, why, on what legal basis, whom we share it with, and what you can do about it.

1.2. It is published under part 2 of article 18.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and is available to any visitor without restriction or registration.

1.3. This Policy covers the website toggle.coffee only. We are not responsible for data processing on third-party sites linked from our pages.

2. Who processes the data

2.1. The operator of personal data is the seller of the online store toggle.coffee:

• Name: ИП Тахтаров Владислав Анатольевич
• INN: 290540185180
• OGRN / OGRNIP: 319784700201831

2.2. Enquiries about personal data are accepted at info@toggle.coffee.

3. What we collect

3.1. When you place an order: name, e-mail address, phone number, delivery address (if you choose delivery) and the order comment you write yourself.

3.2. When you register and use your account: name, e-mail address, phone number, address. The password is stored only as an irreversible hash.

3.3. When you sign in with Yandex ID: your Yandex account identifier, name, e-mail address, phone number and a link to your profile picture — exactly what Yandex passes on with your permission.

3.4. Technical data: IP address, browser details and the addresses of requested pages. These are written to the web server logs automatically.

3.5. We do not collect special categories of personal data or biometric data. We do not knowingly collect data of minors.

4. Why we process data

4.1. Accepting, confirming, packing and handing over your order, delivery, and contacting you about the order. Legal basis — clause 5 of part 1 of article 6 of 152-FZ: processing is necessary to perform a contract to which you are a party.

4.2. Running your account, keeping your contacts and address for future orders, and saving your cart. Legal basis — your consent (article 9 of 152-FZ).

4.3. Complying with obligations imposed on us by law, including record keeping and document retention. Legal basis — clause 2 of part 1 of article 6 of 152-FZ.

4.4. Keeping the website working, available and secure. Legal basis — clause 7 of part 1 of article 6 of 152-FZ.

4.5. We send no marketing mailings. We do not use profiling or automated decision-making that produces legal effects for you.

5. Cookies and browser storage

5.1. The site uses first-party cookies only. There are no third-party counters, analytics systems, advertising pixels or foreign scripts on our pages.

5.2. Every cookie we use is required for the site to work, so they cannot be switched off selectively. You may block cookies in your browser, but then sign-in, the cart and the language switch will stop working.

• tc_lang — the language you chose. Stored for up to one year.
• tc_shop — your session identifier after signing in. Stored until the browser is closed.
• tc_uid — the "remember me" token that keeps you signed in. Stored for up to 60 days.
• tc_ck — a mark that the cookie notice has already been shown to you. Stored for up to one year.
• tc_preview — a service token for access during maintenance. Stored for up to 30 days.
• tc_shop_admin — the store administrator's session. Never issued to customers.

5.3. Your browser storage (localStorage and sessionStorage) keeps the cart contents, the chosen fulfilment method and minor view settings. The cart contents are sent to our server on every recalculation — prices, stock and delivery cost cannot be worked out otherwise; they are not linked to your name until you place an order. For a signed-in customer the cart is additionally stored in the account so that it follows you between devices.

5.4. If you signed in with Yandex ID, the page loads your profile picture from a Yandex server, and Yandex therefore learns your IP address. If you do not use Yandex sign-in, this request does not happen.

6. Who we share data with

6.1. We do not sell personal data and do not pass it to third parties for advertising purposes.

6.3. When you sign in with Yandex ID, data is exchanged with the Yandex ID service on its own terms. You choose this sign-in method voluntarily and may avoid it.

6.4. Data may be provided to state authorities in the cases, to the extent and in the manner established by law.

6.5. Note separately: online payment is not enabled on this site — payment is taken on receipt — so your data is not passed to any payment service.

7. Where data is stored

7.1. The databases in which personal data of citizens of the Russian Federation is recorded, systematised, accumulated, stored, updated and retrieved are located in the Russian Federation — part 5 of article 18 of 152-FZ.

7.2. No cross-border transfer of personal data takes place.

8. How long we keep data

8.1. We keep data no longer than the purposes of processing require.

8.2. Order data is kept for the period established by law for retaining documents about completed transactions.

8.3. Account data is kept while the account exists and is deleted or anonymised at your request.

8.4. The "remember me" token lasts no longer than 60 days, after which it stops working and is removed.

9. How we protect data

9.1. Only authorised persons have access to the data in the store's control panel, and access is password protected.

9.2. Customer passwords are stored as an irreversible hash: the original password cannot be recovered by us or by anyone else.

9.3. Data travels between your browser and the site over HTTPS.

10. Your rights

10.1. You have the right to obtain information about the processing of your personal data and to demand that it be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose.

10.2. To exercise any of these rights, write to info@toggle.coffee from the e-mail address you used for the order or in your account, and describe what you want. We will respond within the period established by law.

10.3. You have the right to appeal against our actions or inaction to the competent authority for the protection of personal data subjects' rights, or to a court.

11. Consent: how it is given and withdrawn

11.1. You give consent to the processing of personal data by ticking a dedicated box when registering, when placing an order and when signing in with Yandex ID. The box is not pre-ticked — you tick it yourself.

11.2. We record the date of consent and the revision number of this Policy that was in force at that moment.

11.3. Consent may be withdrawn at any time by writing to info@toggle.coffee.

11.4. Withdrawing consent stops the processing that was based on consent. It does not stop the processing necessary to perform a contract already concluded and to comply with our obligations under law: records of completed orders remain with us for the statutory retention period.

12. Changes to this Policy

12.1. We may amend this Policy. The current revision is always published on this page, and its number and date are shown at the top.

12.2. Changes are not applied retroactively to consents already obtained.