legal

Privacy Policy

Last updated: 4 October 2026

1. Who we are

This policy covers waycup.ge and the data we receive from you when you place an order or apply for a job.

2. What we collect

When you order

Name, phone number, email (if you give one), what you ordered and for how much, pickup point, time, subscription status and any discount applied.

When you apply for a job

Name, phone, email and whatever you write in the “about you” field.

In your browser, on your device

Your cart, your contact details (only if you ticked “remember me on this device”), your language, your cookie choice and a random browser id. That id says nothing about you — we only use it to check whether the free first cup has already been taken from this browser. It is stored on the server with your order.

Analytics

Google Analytics and Meta Pixel load only after you agree on the banner. If you decline, they are never loaded at all.

The site never receives or stores card details — you pay at the counter.

3. Why we need it

• Taking and handing over your order — performance of a contract. Without this data we cannot accept the order.
• Preventing abuse — order limits per phone number and tracking who already used a discount. This is our legitimate interest.
• Accounting and tax — a legal obligation.
• Analytics and advertising — only with your consent, which you can withdraw at any time.

4. Who else sees it

We do not sell your data and we do not rent it to advertising databases. We use these services, which process data on our instructions:

• Supabase — the database holding orders and customers;
• Google (Sheets) — the working order log;
• Telegram — the new-order notification to the barista;
• Netlify — website hosting;
• Google Analytics, Meta — only if you agreed.

Their servers are outside Georgia, so your data may be processed in another country.

5. How long we keep it

• Orders and related data — 6 years, because of accounting rules;
• Job applications — 6 months, then deleted;
• Your cookie choice — 12 months, then we ask again.

6. Your rights

At any time you can ask us for:

• what data we hold about you;
• correction or deletion of it;
• a stop or restriction on processing;
• a copy of your data in a portable format;
• withdrawal of consent — this does not affect what happened before you withdrew it.

Write to privacy@waycup.ge and we will reply within the period the law allows.

If our answer does not satisfy you, you can complain to the Personal Data Protection Service of Georgia.

7. Security

The site runs over HTTPS. Only staff with personal accounts can reach the database and every action is written to an audit log. Passwords and PIN codes are never stored in plain text.

8. Children and alcohol

This site is not meant for people under 16 and we do not knowingly collect their data. Drinks containing alcohol are 18+ — the barista may check your age before handing one over.

9. Cookies

Necessary cookies and local storage cannot be switched off — without them the cart and the order will not work. Analytics and advertising cookies load only with your consent. You can change your choice at any time through the “Cookie settings” link at the bottom of the page.

10. Changes

If we update this policy we will change the date on this page. We will announce important changes on the site.