Privacy Policy

Last updated: 1/07/2026

1. Who We Are

This website (https://butter-coffee.ro) is operated by BUTTER COFFEE SRL, a company registered in Romania under registration number J40/17353/2021, VAT/Tax Registration Number RO45038234, with registered office in Bucharest, Romania (“Butter Coffee“, “we“, “us“, “our“).

We are the data controller responsible for the personal data described in this Privacy Policy.

Contact for privacy matters: hello@butter-coffee.ro

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, in accordance with Regulation (EU) 2016/679 (the “GDPR“) and Romanian Law No. 190/2018, and how we use cookies and similar technologies, in accordance with Law No. 506/2004 on the processing of personal data in the electronic communications sector.

For details specifically about cookies, please also see our Cookie Policy.

2. What Personal Data We Collect

Depending on how you interact with our website, we may collect:

Category	Examples
Contact data	Name, email address, message content	When you email us or use a contact form
Technical / usage data	IP address, browser type, device type, pages visited, time on site, referral source, approximate location	Automatically, via Google Analytics 4 (GA4) and Google Tag Manager (GTM)
Advertising identifiers	Browser/device identifiers, interactions with ads, pages viewed after clicking a Facebook/Instagram ad	Automatically, via the Meta Pixel (if you have consented)

We do not knowingly collect sensitive categories of personal data (e.g., health, religion, political opinions) through the website.

3. How and Why We Use Your Data

Purpose	Legal basis
Responding to enquiries sent to hello@butter-coffee.ro	Performance of pre-contractual steps / legitimate interest (Art. 6(1)(b) or (f) GDPR)
Measuring website traffic and usage patterns (GA4, via GTM)	Your consent (Art. 6(1)(a) GDPR), collected via our cookie banner
Measuring ad performance and showing relevant ads on Meta platforms (Meta Pixel, via GTM)	Your consent (Art. 6(1)(a) GDPR), collected via our cookie banner
Complying with legal obligations (e.g., tax, accounting records)	Legal obligation (Art. 6(1)(c) GDPR)

We do not use automated decision-making or profiling that produces legal effects concerning you.

4. Cookies and Tracking Technologies

We use Google Tag Manager (GTM) to manage tags for Google Analytics 4 (GA4) and the Meta Pixel. These tools use cookies and similar technologies (such as device/browser identifiers) to collect information about how you use our site and, in the case of the Meta Pixel, about your interactions with our Facebook/Instagram ads.

Analytics and advertising cookies are only activated after you give consent through our cookie consent banner. You can withdraw your consent at any time — see our Cookie Policy for full details, including which cookies are used, their purpose, and how to manage your preferences.

5. Who We Share Data With

We share personal data with the following categories of recipients, acting as independent data controllers or processors with respect to their own platforms:

Google LLC / Google Ireland Limited – provider of Google Tag Manager and Google Analytics 4
Meta Platforms, Inc. / Meta Platforms Ireland Limited – provider of the Meta Pixel
Our website hosting provider and any IT service providers who support our website
Public authorities, where required by law (e.g., tax authorities, courts)

We do not sell personal data to third parties.

6. International Data Transfers

Google and Meta may process data on servers located outside the European Economic Area, including in the United States. Where this occurs, such transfers are carried out under appropriate safeguards recognized under GDPR, such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses adopted by the European Commission. You can review Google’s and Meta’s own privacy and data transfer practices on their respective privacy policies.

7. How Long We Keep Your Data

Contact/email correspondence: retained for as long as necessary to handle your enquiry and for a reasonable period afterward for record-keeping, generally no longer than 3 years unless a longer period is required by law.
Analytics data (GA4): retained according to the retention settings configured in our Google Analytics account (commonly 14 months), after which it is automatically deleted or anonymized.
Advertising data (Meta Pixel): retained according to Meta’s own data retention practices, as described in Meta’s policies.

8. Your Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”), where applicable
Restrict processing in certain circumstances
Object to processing based on legitimate interest or for direct marketing
Data portability, where technically feasible
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
Lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the supervisory authority of your EU country of residence

To exercise any of these rights, contact us at hello@butter-coffee.ro.

9. Children’s Privacy

Our website is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised “Last updated” date.