Needs legal reviewA lawyer has not read this text yet. The cafe owner will approve the final version before the site launches.
Who collects the data
The Red Roses cafe in Novomykolaivka collects the data on this site. The cafe's phone is 097 411 4617. We will add the owner's full legal name and details here once the cafe provides them.
What data and when
Only what you type into the table booking form or the banquet request form:
- your name and phone number;
- the date, the time and the number of guests;
- your notes, if you wrote any;
- allergies or dietary restrictions, if you listed them in a booking and ticked the separate consent box (the field is optional; without the consent box we do not keep allergies).
The cafe keeps a guest card under your phone number: your name, how many times you booked, came or did not come, and the allergies you wrote about. This way the kitchen knows about an allergy next time too, and the manager calls you before a booking if a previous one was missed without notice. Only the cafe's staff see the card.
The cart with the dishes you picked stays in your browser's memory and goes nowhere until you place an order. Your browser also remembers the theme there (light or dark).
Purpose of processing
The purpose of processing is to receive and fulfil your request: to call you back, to confirm a booking or an order, and to agree on a banquet. Allergy details let the kitchen cook safely for you; we process them only with your separate consent. We do not use this data for advertising or mailing lists.
Who receives it
A request goes to the cafe's work chat in Telegram, where the staff read it: your name, phone number, notes and allergies. Nobody else gets it.
Third-party services the data passes through:
- Cloudflare hosts the site and the request database, so the data is stored on its servers. Its Cloudflare Turnstile service protects the forms from spam: it checks the browser and does not receive what you type in the form.
- Telegram carries the cafe's work chat where requests arrive, and the guest account bot (below).
Fonts are served by the site itself, not by a third party. Our site sets no cookies and has no analytics or advertising scripts. The “Account” button opens a Telegram page (t.me): that is Telegram's own site, and it sets a technical cookie stel_ssid (the Telegram page session) on its own domain. Our site neither sets nor reads it; Telegram's privacy policy describes what it does with it.
The guest account in our Telegram bot is optional. Until you open the bot yourself and share your number there, the site sends nothing to Telegram on your behalf. If you share it, the bot links your Telegram to your guest card to show the booking status and remind you about the visit.
How long we keep it
The cafe owner decides how long requests are kept. We will state the period here before the site launches.
Allergy details stay in your guest card until you withdraw your consent. To withdraw it, call or message us (contacts below): the manager erases the allergies from the card in the staff account, and the kitchen no longer sees them. The site does not yet delete them automatically after a set period.
Your rights and contact for requests
You can ask us to show, correct or delete your data, including the guest card and the allergies on record, and to withdraw your consent. Contact for personal data requests: phone 097 411 4617 or a message on the cafe's Facebook page. Give the number you used in the request.
Version of 1 November 2026.