Privacy, terms & refunds

• When you order: your name, your mobile number and email if you give them (both optional), what you ordered, eating in or taking away, your chosen time and any note you add.
• Payments: handled by Square. We never see or store your full card details.
• On your phone: your basket, name and number are saved on your own device so the site can fill them in next time. You can clear them by clearing your browser data.
• Notifications (only if you allow them): a technical address from your phone's browser so we can send order updates and, if you opted in, the odd offer.
• Customer record: your name, number and email (if given), how many times you've ordered and what you've spent, so we can run rewards and know our regulars. If you tick "send me deals", we also note when you said yes and where you found us (for example a card in your Uber Eats bag).
• Visitor stats: anonymous, cookie-free counts of page visits (Cloudflare Web Analytics). We don't use advertising cookies or track you across other sites.

• To make, confirm and hand over your order, and contact you if there's a problem with it (needed to carry out your order).
• To keep records of sales for accounting and tax (a legal requirement).
• To send deals and rewards by email or text, only if you ticked "send me deals" (your consent). Every message lets you unsubscribe, or email us and we'll remove you.
• To send news and offers by notification, only if you said yes (your consent, which you can withdraw any time in your phone's settings).
• To keep the site working and improve it (our legitimate interest in running the café).

• Square (orders and payments), Cloudflare (website hosting, notifications and visitor stats) and your phone's notification service (Apple or Google). They only use it to provide their service to us.
• We never sell your details.

• Order and payment records: kept in Square for as long as the law requires for accounting (usually 6 years).
• Order-tracking and notification data: deleted automatically within days, or when you turn notifications off.
• Customer records and sign-ups: while you're an active customer, deleted after 3 years with no orders, or sooner if you unsubscribe or ask us to delete them.

You can ask to see, correct or delete the details we hold about you, or object to how we use them. Email gymvibecafe@gmail.com. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).