Thank you for reviewing our Privacy Policy. This document outlines how FATIBO LTD, operating as Craze Caffe (referred to as “Company,” “we,” “us,” or “our”), collects, uses, stores, and discloses your personal information, along with your statutory rights. We are committed to safeguarding your personal data in accordance with applicable data protection laws. Please note that we may update this policy periodically, with such changes taking immediate effect upon publication. We encourage you to visit our website regularly for the most current version of this policy.

Who Protects Your Information?

We are FATIBO LTD, trading as Craze Caffe (Website), with the following details:

    • Company Number: 14766314
    • Phone Number: + 44 20 8638 5747
    • Email Address: Support@crazecaffe.com
    • Address : 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ ,UNITED KINGDOM

Why and How Do We Collect Your Information?

To Process Your Orders on Our Webshop, Receive Payments, and Deliver Purchased Goods

    • When you make a purchase: We collect your first name, last name, delivery address, phone number, email address, information about your paid purchase price and currency, your credit card brand, type, BIN number, credit card issuer country, IP address, language, device type, and payment history.
    • Legal Basis: Contract (Art. 6 (1) (b) of GDPR).
    • Source of Information: From yourself.
    • Obligation to Provide Information: It is necessary to enter into a contract. If you do not provide this information, you will not be able to purchase and receive our products.
    • Storage Period: 10 years.

To Ensure Security of and Improve Our Website

    • When you use our website: We collect your IP address, device information and ID, web browser information, information on your activity on our website, country, information about violations of Terms of Service, and inclusion into a blacklist.
    • Legal Basis: Legitimate interest (security and improvement of our website) (Art. 6 (1) (f) of GDPR).
    • Source of Information: From yourself.
    • Obligation to Provide Information: No.
    • Storage Period: 1 month after your last use of the website; 10 years for information on violations of Terms of Service and blacklist.

To Provide You with Customer Support

    • When you contact our customer support: We collect your first name, last name, email address, country, telephone number, subject of your inquiry, date of your inquiry, content of your inquiry, attachments to your inquiry, reply to your inquiry, customer contact history, and order ID.
    • Legal Basis: Consent (Art. 6 (1) (a) of GDPR).
    • Source of Information: From yourself and customer support service providers.
    • Obligation to Provide Information: No.
    • Storage Period: 10 years from the moment your last inquiry was received.

To Inform You About Our Products or Show You Internet Ads

    • When we want to inform you about our products or show you internet ads: We collect your full name, email, telephone number, IP address, order information, country, postback information, website that directed you to our website, and your interaction with internet ads.
    • Legal Basis: Consent (Art. 6 (1) (a) of GDPR), customer relationship, legitimate interest (direct marketing and internet ads) (Art. 6 (1) (f) of GDPR).
    • Source of Information: From yourself, social media service providers, marketing service providers, e-commerce providers.
    • Obligation to Provide Information: No.
    • Storage Period: 5 years, unless you opt-out.

To Interact with You Via Social Media

    • If you interact with our social media profiles: We collect your name, email address, gender, country, picture, message, time and date the message was received, content of the message, message attachments, response to the message, time of response to the message, information about our company’s rating, comments on a post, post shares, and information about post reactions.
    • Legal Basis: Consent (Art. 6 (1) (a) of GDPR).
    • Source of Information: From yourself and social media service providers.
    • Obligation to Provide Information: No.
    • Storage Period: 10 years from your last interaction with our social media profiles.

To Carry Out the Selection of Potential Employees

    • When we receive your job application or contact you based on publicly disclosed information on professional social media platforms: We collect your full name, email, phone number, CV, work experience, and other information you provide us with.
    • Legal Basis: Consent (Art. 6 (1) (f) of GDPR), contract (Art. 6 (1) (b) of GDPR), legitimate interest (to contact you if you made your information public) (Art. 6 (1) (f) of GDPR).
    • Source of Information: From yourself, professional social media service providers, HR agencies.
    • Obligation to Provide Information: It is necessary to enter into a contract only where we intend to enter into an employment contract with you. If you do not provide this information, we will not be able to enter into an employment contract with you.
    • Storage Period: 6 months after the end of the relevant recruitment process; 5 years after you give us your consent or publicly disclose your information on professional social media platforms.

To Fulfill Statutory Accounting Requirements

    • When you order our products: We collect your full name, email address, telephone number, bank account number, address, signature, invoices, reports, accounting documents, payments, paid amounts, and other information we are statutorily required to collect.
    • Legal Basis: Legal obligation (Art. 6 (1) (c) of GDPR).
    • Source of Information: From yourself and audit service providers.
    • Obligation to Provide Information: It is a statutory requirement. If you do not provide this information, you will not be able to buy goods or services from us.
    • Storage Period: 10 years following a transaction.

To Defend Our Rights and Interests

    • In case we become a party to legal process which you are subject to or we are statutorily required to collect information about you: We collect all of the aforementioned information, accounting and legal case files, legal documents, other information you provide us with, and other information that we are statutorily required to collect and/or provide.
    • Legal Basis: Legal obligation (Art. 6 (1) (c) of GDPR), legitimate interest (to protect our rights and interests) (Art. 6 (1) (f) of GDPR).
    • Source of Information: From aforementioned sources, law enforcement authorities, parties that are subject to legal process, courts.
    • Obligation to Provide Information: Yes, where we are statutorily obliged to collect personal information.
    • Storage Period: 10 years following the end of the contractual relationship with us or, for the duration of legal process and 3 years after a final authority decision came into full force.

Note: If the case arises – information about criminal offenses and convictions is processed for the establishment, exercise, or defense of legal claims (Art. 9 (2) (f) of the GDPR).

Who Do You Share My Information With?

We share your information with information recipients, both within and outside the European Economic Area (EEA), when necessary for the purposes described above and allowed in accordance with applicable laws.

Information Recipient or Category of Information Recipientv

Purpose of Information Transfer

Country of Recipient

European Commission Decision on Adequate Information Protection

Suitable Safeguards for Information Protection when Transferred to Non-EEA Countries

Accounting and audit service providers

To fulfill statutory accounting requirements

EU

N/A

N/A

Archiving service providers

To keep our archive

EU

N/A

N/A

Electronic communication service providers

To operate our electronic communications

EU

N/A

N/A

Attorneys, notaries, bailiffs, auditors, data protection officers, consultants

To ensure our compliance, defend our rights and interests

EU

N/A

N/A

Email and cloud hosting service providers

To operate IT resources

Worldwide

NO

EU Standard Contractual Clauses

Banking, payment processing, and other financial service providers

To process payments

Worldwide

NO

EU Standard Contractual Clauses

Marketing and telemarketing service providers

To market our products

Worldwide

NO

EU Standard Contractual Clauses

Shipping service providers and fulfillment centers

To ship our products

Worldwide

NO

EU Standard Contractual Clauses

Customer support service providers

To provide customer support

Worldwide

NO

EU Standard Contractual Clauses

Social media service providers

To manage our social media profiles

Worldwide

NO

EU Standard Contractual Clauses

What statutory rights do I have regarding my information?

Subject to conditions and limitations established by applicable laws, you have the following rights regarding your personal information:

    • Receive a confirmation as to whether we collect the information related to you and to request access to that information.
    • Correct inaccurate or incorrect information, or supplement it when it is incomplete.
    • Delete the information we have about you.
    • Restrict the use of your information where you challenge the accuracy of the information, object to the processing of the information, or need your information for legal purposes.
    • Request your information in a structured, commonly used, and machine-readable format.
    • Object to the processing of your information.
    • Withdraw any consent given to us regarding the processing of your information.
    • File a complaint with supervisory authorities.
    • Not to receive discriminatory treatment while exercising your rights.

More detailed information on these rights and the cases where they are applicable is provided in the sections below.

What is my right to request access to information?

You have the right to request that we disclose certain information to you about our collection and use of your personal information. Once we receive and verify your request, we will provide you with details including the categories of personal information collected about you, sources of this information, the purposes for collecting it, categories of third parties with whom we share it, specific pieces of personal information collected, and other relevant information required by applicable laws. We have disclosed information to third parties for business or commercial purposes as described in Section 3 of this policy.

What is my right to rectification?

You have the right to obtain the correction of any inaccurate personal information concerning you. Considering the purposes of the processing, you also have the right to have incomplete information completed, including by providing a supplementary statement.

What is my right to request deletion of the information?

You have the right to request the deletion of your information collected and maintained by us in the following cases:

    • Information is no longer necessary in relation to the purposes for which it was collected or processed.
    • You withdraw consent on which the processing is based, and there is no other legal ground for the processing.
    • You object to the processing, and there are no overriding legitimate grounds for the processing, or you object to the processing for direct marketing purposes.
    • The information has been unlawfully processed.
    • The information must be erased for compliance with a legal obligation.
    • The information was collected in relation to offering information society services directly to a child and is subject to consent.

Once we receive and verify your request, we will delete (and direct our service providers to delete) your information from our records, unless applicable laws do not provide for deletion in specific cases (e.g., retaining information necessary to complete a transaction, provide a requested service, maintain ongoing business relationships, detect security incidents, protect against malicious activities, comply with legal obligations, or make other lawful uses of the information provided).

What is my right to restrict the processing of information?

You have the right to restrict the processing of your information in the following cases:

    • The accuracy of the personal information is contested by you.
    • The processing is unlawful, and you oppose the erasure of the personal information, requesting instead that their use be restricted.
    • We no longer need the personal information for processing purposes, but you require it for the establishment, exercise, or defense of legal claims.
    • You have objected to the processing.

In these situations, you can request restrictions on how your information is processed. This ensures that your personal data is handled appropriately according to your rights and legal requirements.

What is my right to information portability?

You have the right to information portability in cases where you wish to receive the information you have provided in a structured, commonly used, and machine-readable form. Additionally, you can transmit this information to another controller if the processing is based on consent or a contract and is carried out by automated means.

What is my right to object to the processing of my information?

You have the right to object to the processing of your information under certain circumstances. This includes situations where the collection and use of your information are based on a task carried out in the public interest, the exercise of official authority, or a legitimate interest (as outlined in Section 2 of this policy). You also have the right to object to the collection of your personal information for direct marketing purposes.

What is my right to withdraw consent?

You have the right to withdraw any consent you have given for the processing of your information. This applies when the processing is based on consent, as described in this policy. You can withdraw your consent at any time.

What is my right to file a complaint with supervisory authorities?

You have the right to file a complaint with supervisory authorities if you wish to lodge a complaint regarding the processing of your information. This can be done particularly in the Member State of your habitual residence, place of work, or in response to an alleged infringement of the GDPR.

What is my right not to receive discriminatory treatment while exercising my rights?

When you exercise your rights under applicable laws, you have the right to non-discrimination. For instance, because you’ve exercised your rights, you should not be denied goods or services, charged different prices, or provided with a different quality of goods and services.

How do I submit a request?

To exercise your rights described above, please submit a request to us via email at Support@crazecaffe.com.com or call our toll-free telephone number: +44 20 32 39 79 38.

Can I use an authorized agent?

Yes, you may use an authorized agent to submit a request on your behalf. To do so, provide us with the authorized agent’s written permission. If using an authorized agent, please provide a copy of the permission. Note that we may deny a request from an authorized agent who does not provide proof of authorization. You may also make a request on behalf of your minor child.

Do you engage in automated individual decision-making, including profiling?

No, we do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you.

These policies are designed to ensure transparency and fairness in how your personal information is handled. If you have further questions or need assistance, please feel free to contact us using the provided methods.

 

DOES YOUR WEBSITE PLACE COOKIES ON MY DEVICE?

Yes, our website places the following cookies on your device:

Cookie Name

Cookie Description

Cookie Expiry

Strictly Necessary & Statistics Cookies

_fbp

Used to distinguish and keep track of unique users

3 months

_ga

This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

2 years

_gat

This cookie is used b y Google Analytics to throttle request rate.

1 day

_gid

This cookie stores and update a unique value for each page visited and is used to count and track page views.

1 day

__cfruid

Cookie associated with sites using CloudFlare, used to identify trusted web traffic.

During your session only

_fw_crm_v

Used to track Visitor/User identity and chat sessions performed by the User

1 year

_uetvid

This is a cookie utilised by Microsoft Bing Ads. It allows us to engage with a user that has previously visited our website.

1 year

XSRF-TOKEN

This cookie is written to help with site security in preventing Cross-Site Request Forgery attacks.

1 day

omnisendAnonymousID

This cookie is used to encrypt and contain visitor data – This is necessary for the security of the user data.

1 year

enence_session

This is used to hold information about your current visit with us. This cookie is essential to the functionality of the site.

While visiting the website only

ads/ga-audiences

This cookie is used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s online behaviour across websites.

2 years

soundestID

This cookie is used to determine if the visitor has visited the website before, or if it is a new visitor on the website.

While visiting the website only

soundtest-views

Assigns a specific ID to the visitor – This allows the website to determine the number of specific user-visits for analysis and statistics.

While visiting the website only

Marketing Cookies

ads/ga-audiences

This cookie measures the efficiency of the website’s marketing. The cookie is used to measure the conversion rate between website marketing and telephone response.

While visiting the website only

REST/webTracking/v1/event

This cookie measures the efficiency of the web site’s marketing. The cookie is used to measure the conversion rate between website marketing and telephone response.

While visiting the website only

Targeting Cookies

_gat_gtag_UA_136786017_1

This cookie is part of Google Analytics and is used to limit requests (throttle request rate).

1 minute

These cookies help improve user experience, track site performance, and support marketing efforts on Craze Caffe’s website. If you have any concerns or questions about these cookies, please feel free to contact us. 

HOW CAN I MANAGE COOKIES?

You can configure your browser to decline some or all cookies or to ask for your permission before accepting them. Please note that by deleting cookies or disabling future cookies you may be unable to access certain areas or features of our website. You can control the use of functionality cookies, targeting cookies or advertising cookies by adjusting your browser settings. To find out how to manage cookies in your browser, please visit one of the links below:

HOW CAN I CONTACT YOUR DATA PROTECTION OFFICERS?

If you have any questions, comments, or complaints regarding our privacy policy and (or) how we collect, use, and store your personal information, our data protection officers are ready to help you. If you need their help, you may contact them at any time via Support@crazecaffe.com.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@crazecaffe.com or by phone at : + 44 20 8638 5747