At Samrah Cafe, we collect information to craft the best possible experience for you — whether you're ordering your favourite matcha latte or subscribing to our seasonal newsletter.
Personal Information you provide directly:
- Full name, email address, and phone number
- Delivery address and billing details
- Account credentials and profile preferences
- Order history and favourite items
- Feedback, reviews, and support messages
Automatically Collected information Passive
- Device type, browser, and operating system
- IP address and approximate geolocation
- Pages visited, time spent, and interaction patterns
- Referral source and campaign identifiers
Every piece of data we collect serves a clear purpose — like selecting the right beans for the perfect roast. We never collect more than we need.
- Processing and fulfilling your orders and deliveries
- Personalising your menu recommendations and offers
- Communicating order updates, promotions, and events
- Improving our website, app, and overall service quality
- Preventing fraud and ensuring account security
- Complying with applicable legal obligations
We will always notify you before using your data for any purpose not described in this policy.
We use cookies and similar technologies to remember your preferences, keep your cart intact, and understand how our platform is used so we can make it better.
- Essential cookies — required for core site functionality and security
- Preference cookies — remember your language, region, and display settings
- Analytics cookies — help us understand traffic patterns and popular content
- Marketing cookies — enable relevant promotions and seasonal offers
You can manage or disable cookies through your browser settings at any time. Disabling essential cookies may affect site functionality.
We never sell your personal data. We share information only when necessary to deliver our services or when required by law.
- Delivery partners — to bring your coffee to your door
- Payment processors — for secure transaction handling
- Analytics providers — to help us improve (data is anonymised)
- Legal authorities — when required by law or to protect rights
All third-party partners are contractually obligated to protect your data and may only use it for the specific purpose we engage them for.
We protect your data with the same care we put into crafting every cup. Our security measures include:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive personal information
- Regular security audits and vulnerability assessments
- Role-based access controls for internal staff
- Incident response plan with prompt breach notification
While we strive for the highest standards, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords for your account.
You are in control of your data. Depending on your location, you may have the following rights:
- Access — request a copy of all personal data we hold
- Correction — update or fix inaccurate information
- Deletion — request erasure of your personal data
- Portability — receive your data in a structured, common format
- Objection — opt out of specific processing activities
- Withdraw consent — revoke permission at any time
To exercise any of these rights, contact us at the details provided below. We respond to all requests within 30 days.
Our website and app may contain links to third-party platforms, including social media, review sites, and delivery aggregators. We are not responsible for the privacy practices of these external services.
We recommend reviewing their individual privacy policies before providing any personal information.
Samrah Cafe's services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected such data, we will promptly delete it.
If you believe a child has provided us with personal information, please contact us immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you via email or through a prominent notice on our website.
We encourage you to review this page periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.
