Privacy policy

1. General

1.1. This document explains what personal data the online store toggle.coffee collects, why, on what legal basis, whom we share it with, and what you can do about it.

1.2. It is published under part 2 of article 18.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and is available to any visitor without restriction or registration.

1.3. This Policy covers the website toggle.coffee only. We are not responsible for data processing on third-party sites linked from our pages.

2. Who processes the data

2.1. The operator of personal data is the seller of the online store toggle.coffee:

• Name: ИП Тахтаров Владислав Анатольевич
• INN: 290540185180
• OGRN / OGRNIP: 319784700201831

2.2. Enquiries about personal data are accepted at info@toggle.coffee.

3. What we collect

3.1. When you place an order: name, e-mail address, phone number, delivery address (if you choose delivery) and the order comment you write yourself.

3.2. When you register and use your account: name, e-mail address, phone number, address. The password is stored only as an irreversible hash.

3.3. When you sign in with Yandex ID: your Yandex account identifier, name, e-mail address, phone number and a link to your profile picture — exactly what Yandex passes on with your permission.

3.4. When you submit a wholesale application: the name of the organisation or the full name of the sole trader, INN, KPP (organisations only), registered address, city, type of business, contact person, phone number, e-mail address and the comment on the application. For a sole trader, the full name and INN are themselves personal data; for an organisation, the details of its contact person are. Once the application is approved, the name, INN, KPP and address of the buyer are shown on wholesale orders and on the invoices issued for them.

3.5. Technical data: IP address, browser details and the addresses of requested pages. These are written to the web server logs automatically.

3.6. We do not collect special categories of personal data or biometric data. We do not knowingly collect data of minors.

4. Why we process data

4.1. Accepting, confirming, packing and handing over your order, taking payment for it, delivery, and contacting you about the order. Legal basis — clause 5 of part 1 of article 6 of 152-FZ: processing is necessary to perform a contract to which you are a party. Some of this data is passed to the bank that processes the payment and issues the fiscal receipt — see section 6.

4.2. Running your account, keeping your contacts and address for future orders, and saving your cart. Legal basis — your consent (article 9 of 152-FZ).

4.3. Reviewing your wholesale application, giving you wholesale prices, issuing invoices, entering into and performing the supply contract, and contacting you about the application and wholesale orders. Legal basis — clause 5 of part 1 of article 6 of 152-FZ: processing is necessary to enter into a contract at your request and to perform it. The application data, including the details of the contact person of an organisation, is also processed on the basis of the consent (article 9 of 152-FZ) given when the application is submitted.

4.4. Complying with obligations imposed on us by law, including record keeping and document retention. Legal basis — clause 2 of part 1 of article 6 of 152-FZ.

4.5. Keeping the website working, available and secure. Legal basis — clause 7 of part 1 of article 6 of 152-FZ.

4.6. We send no marketing mailings. We do not use profiling or automated decision-making that produces legal effects for you.

5. Cookies and browser storage

5.1. The site uses first-party cookies only. There are no third-party counters, analytics systems, advertising pixels or foreign scripts on our pages.

5.2. Every cookie we use is required for the site to work, so they cannot be switched off selectively. You may block cookies in your browser, but then sign-in, the cart and the language switch will stop working.

• tc_lang — the language you chose. Stored for up to one year.
• tc_shop — your session identifier, needed to sign in, place an order and submit forms on the site. Stored for up to 30 days after your last visit.
• tc_uid — the "remember me" token that keeps you signed in. Stored for up to 60 days after your last visit.
• tc_sso — the single sign-on token shared by the Toggle Coffee sites on the toggle.coffee domain: once signed in on one of them, you stay signed in on the others. Stored for up to 60 days after your last visit.
• tc_ck — a mark that the cookie notice has already been shown to you. Stored for up to one year.
• tc_preview — a service token for access during maintenance. Stored for up to 30 days.
• tc_shop_admin — the store administrator's session. Never issued to customers.
• tc_admin_uid — the token that keeps the store administrator signed in for 30 days. Never issued to customers. Stored for up to 30 days after the last visit to the control panel.

5.3. Your browser storage (localStorage and sessionStorage) keeps the cart contents, the chosen fulfilment method and minor view settings. The cart contents are sent to our server on every recalculation — prices, stock and delivery cost cannot be worked out otherwise; they are not linked to your name until you place an order. For a signed-in customer the cart is additionally stored in the account so that it follows you between devices.

5.4. If you signed in with Yandex ID, the page loads your profile picture from a Yandex server, and Yandex therefore learns your IP address. If you do not use Yandex sign-in, this request does not happen.

6. Who we share data with

6.1. We do not sell personal data and do not pass it to third parties for advertising purposes.

6.3. When you sign in with Yandex ID, data is exchanged with the Yandex ID service on its own terms. You choose this sign-in method voluntarily and may avoid it.

6.4. Data may be provided to state authorities in the cases, to the extent and in the manner established by law.

6.5. Payment for orders is taken online, through the internet acquiring service of Tochka Bank (Tochka). To process the payment and issue the fiscal receipt, Tochka receives the order number, amount and contents, together with your name, e-mail address and phone number. Tochka acts on our instructions under part 3 of article 6 of 152-FZ and, as regards cash register requirements, in performance of duties placed on it by law.

6.6. The fiscal receipt for your order is issued and sent to you by the fiscal data operator engaged by Tochka; for that it receives the order contents and amount and your e-mail address. You enter your bank card details on the secure Tochka page — they are never passed to us and never stored by us.

7. Where data is stored

7.1. The databases in which personal data of citizens of the Russian Federation is recorded, systematised, accumulated, stored, updated and retrieved are located in the Russian Federation — part 5 of article 18 of 152-FZ.

7.2. No cross-border transfer of personal data takes place.

8. How long we keep data

8.1. We keep data no longer than the purposes of processing require.

8.2. Order data is kept for the period established by law for retaining documents about completed transactions.

8.3. Account data is kept while the account exists and is deleted or anonymised at your request.

8.4. A wholesale application is kept until a decision is made on it. Rejected applications, and applications for which wholesale access has been closed, are kept for one year from that decision and then deleted or anonymised. An approved application is kept while wholesale access remains open, but no longer than the account exists (clause 8.3). The buyer details on wholesale orders and on the invoices issued for them are kept together with the order data for the period stated in clause 8.2.

8.5. The "remember me" and single sign-on tokens last no longer than 60 days after your last visit, after which they stop working and are removed.

9. How we protect data

9.1. Only authorised persons have access to the data in the store's control panel, and access is password protected.

9.2. Customer passwords are stored as an irreversible hash: the original password cannot be recovered by us or by anyone else.

9.3. Data travels between your browser and the site over HTTPS.

10. Your rights

10.1. You have the right to obtain information about the processing of your personal data and to demand that it be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose.

10.2. To exercise any of these rights, write to info@toggle.coffee from the e-mail address you used for the order or in your account, and describe what you want. We will respond within the period established by law.

10.3. You have the right to appeal against our actions or inaction to the competent authority for the protection of personal data subjects' rights, or to a court.

11. Consent: how it is given and withdrawn

11.1. You give consent to the processing of personal data by ticking a dedicated box when registering, when placing an order, when signing in with Yandex ID and when submitting a wholesale application. The box is not pre-ticked — you tick it yourself.

11.2. We record the date of consent and the revision number of this Policy that was in force at that moment.

11.3. Consent may be withdrawn at any time by writing to info@toggle.coffee.

11.4. Withdrawing consent stops the processing that was based on consent. It does not stop the processing necessary to perform a contract already concluded and to comply with our obligations under law: records of completed orders remain with us for the statutory retention period.

12. Changes to this Policy

12.1. We may amend this Policy. The current revision is always published on this page, and its number and date are shown at the top.

12.2. Changes are not applied retroactively to consents already obtained.