Privacy Policy

1. Who is responsible for your data

The owner and operator of the database containing personal data is Coffee Exchange Technology LLP, Apt. 32, 6 Alikhan Bokeikhan St., Yesil District, Astana, 010017, Republic of Kazakhstan. For any question about data processing, write to office@coffeeexchange.kz.

2. What data we process

Depending on how you use the Services, we process:

• Account data: phone number, name and — if you choose to provide them — date of birth and email address.
• Orders and loyalty program: orders and purchases at Coffee Exchange coffee shops (date, location, items and amount), coupons and locked prices, Beans balance and history, achievements, friend invitations, offers received.
• Technical data: device model, operating system and app version, language, IP address, push notification identifier, error logs.
• Support requests: the content of your messages and the contact details you share.

Payments in the app are processed by a payment provider. We do not store full bank card details: we receive only the payment status and a masked card number.

3. How we collect data

We receive data directly from you when you register, fill in your profile and place orders, automatically from your device when you use the app, and from Coffee Exchange coffee shops when you make a purchase and show the code from the app at the counter.

4. Device permissions

The app may ask for access to notifications (to tell you about orders, prices and promotions) and location (to show the nearest coffee shops on the map). Each permission is granted only with your consent and can be withdrawn in your device settings at any time; the core features of the app remain available without them.

5. Data on this website

The website coffeeexchange.kz does not use cookies, analytics counters or advertising trackers. If you send us a question or a franchise request through a form on the site, we process the data you enter (name, contact details, country and city, the text of your message) to reply to you and discuss cooperation; it is kept for as long as needed to reply and negotiate and is deleted at your request. When you open the site, the server keeps standard technical logs (IP address, time of request, browser type) for security purposes.

6. Why we use data

We use personal data only for the following purposes:

• creating and maintaining your account;
• placing and fulfilling orders and coupons, adding and redeeming Beans, providing offers;
• sending notifications about orders, prices and promotions (marketing messages — only with your consent);
• answering support requests;
• keeping the Services secure and preventing abuse;
• improving the Services based on aggregated statistics;
• complying with legal requirements.

7. Legal grounds

We process data on the basis of the consent you give when registering in the app, to perform the user agreement with you, and in cases expressly provided for by law. You can withdraw your consent at any time — see “Your rights”.

8. Who we share data with

• Coffee Exchange coffee shops, including franchise partners — to the extent needed to fulfil orders, activate coupons and serve guests.
• Service providers acting on our instructions: hosting and cloud infrastructure, payment providers, SMS and push notification delivery services (including Apple Push Notification service and Firebase Cloud Messaging).
• Government authorities — upon lawful requests, in the manner established by law.

We require every third party that receives personal data to protect it to the same or an equal standard as described in this Policy and required by law.

We do not sell personal data and do not share it with advertising networks.

9. Storage and cross-border transfer

We store personal data in accordance with the legislation of the Republic of Kazakhstan, including the requirement to keep it in databases located in the Republic of Kazakhstan. Cross-border transfer of data takes place only in the cases and on the terms provided for by the legislation of the Republic of Kazakhstan.

10. Retention

We keep data for as long as your account exists. After the account is deleted, data is deleted or anonymized within 30 days, except for information we are required to keep by law (for example, accounting and tax records), which is kept for the periods set by law.

11. Your rights

You have the right to:

• know what data about you is processed and receive a copy of it;
• correct or complete inaccurate data;
• withdraw your consent to data processing;
• request deletion of your data;
• lodge a complaint about our actions with the authorized body for personal data protection or with a court.

To exercise your rights, use the app settings or write to office@coffeeexchange.kz. We respond within the time limits set by law.

12. Account deletion

You can delete your account in the app (Profile → Delete account) or by request. Detailed instructions are on the Account deletion page.

13. Children

The Services are not intended for children under 16. We do not knowingly collect their personal data. If you believe a child has provided data to us, write to us and we will delete it.

14. Security

We apply organizational and technical safeguards: encryption of data in transit, restricted staff access, activity logging and regular backups. In the event of a personal data security breach, we will notify the authorized body and the affected users in the manner established by law.

15. Changes to this Policy

We may update this Policy. The current version is always published on this page, with the effective date shown at the top. We will notify you of material changes in the app.

16. Contacts

Coffee Exchange Technology LLP, BIN 260540006188. Address: Apt. 32, 6 Alikhan Bokeikhan St., Yesil District, Astana, 010017, Republic of Kazakhstan. Email: office@coffeeexchange.kz. Phone: +7 701 540 86 63.