Legal
Privacy Policy
Last updated 18 August 2026.
Blend Thru Ltd, trading as Blend Coffee Shop (Akamantidos 24, Chloraka, Cyprus — "we", "us"), respects your privacy. This page explains what information we collect when you use https://blendcy.com/, why, and what rights you have over it, in line with the EU General Data Protection Regulation (GDPR).
What we collect
- Order details — name, phone number, and (for delivery) your email, address and delivery notes, plus what you ordered. Needed to prepare and deliver your order, and to reach you if something goes wrong with a delivery.
- Account details — if you create a Blend account, your email and password (handled by our authentication provider, never stored by us in plain text), order history, and Blend Club loyalty stamp count.
- Payment information — if you pay online, your card details are entered directly on Viva Payments' secure payment page. We never see or store your full card number, expiry date, or CVV — only whether the payment succeeded.
- Technical data — a hashed (irreversible) form of your IP address, kept briefly to prevent abuse of the order form. We do not use tracking cookies or analytics scripts.
How we use it
- To prepare, fulfil, and — for delivery orders — get your order to the correct address.
- To run the Blend Club loyalty programme (counting stamps against your account or phone number).
- To process card payments securely through Viva Payments.
- To contact you about a specific order if there's a problem with it.
We do not sell your data, and we do not use it for advertising or marketing without your separate consent.
Who we share it with
- Viva Payments — processes card payments on our behalf. Viva is a licensed payment institution regulated for card processing in the EU.
- Supabase — our database and account-login provider, which stores order and account records securely on our behalf.
- Our point-of-sale/till system, once connected, to prepare your order — this only receives what's needed to make and hand over the order (name, phone, items, delivery address), never payment details.
We do not share your data with any other third party, and none of the above are permitted to use it for their own purposes.
How long we keep it
Order records are kept for as long as your account exists, or for guest orders, for a reasonable period to handle any follow-up questions or disputes. You can ask us to delete your account and associated data at any time (see below).
Your rights
Under GDPR, you can ask us to:
- Show you what personal data we hold about you
- Correct anything that's wrong
- Delete your account and personal data
- Export your data in a portable format
To make any of these requests, email us at [email protected] or call 70 000 305.
Cookies & local storage
The site uses your browser's local storage (not tracking cookies) to remember your cart and, if you're signed in, keep you logged in between visits. This data stays on your device and is never sold or shared.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page.
Contact
Blend Thru Ltd (trading as Blend Coffee Shop), Akamantidos 24, Chloraka 8020, Cyprus. [email protected] · 70 000 305.