The BaklavaThe Baklava
HomeMenuBook a tableAbout us
Sign inCart

Privacy policy

Last updated: 09.08.2026

This page explains what data is collected on the The Baklava website and why it is needed. The Baklava receives and uses the data; the site runs technically on the Keel platform.

1. What is collected

— Account: your name and phone number. The number is confirmed by an SMS code. If you sign in through Telegram, the number arrives only when you send it yourself.

— Order: delivery address, the point on the map, your notes on dishes, payment method and the contents of the order.

— Table booking: name, phone, number of guests and the time.

— Feedback: a rating and a comment, if you leave one.

— Visits: an anonymous count (details below).

2. Why it is needed

Name and phone: to deliver the order and to reach you if something is unclear. Address and map point: so the courier arrives and so the delivery fee can be calculated. Notes: for the kitchen. Rating and comment: to improve the service.

Marketing messages are possible, but once you opt out they stop. Order updates and sign-in codes are not marketing — they are the service you asked for.

3. Cookies and browser storage

— Chosen language, chosen brand and branch: in cookies.

— Cart, session, theme and favourite dishes: in your own browser's storage. Without them the cart empties on the next page and signing in does not stick.

— Table number (when a QR code is scanned): only for this visit.

There are no advertising or tracking scripts: no Google Analytics, no Yandex Metrica, no Facebook pixel, nothing of that kind.

4. How visits are counted

Your browser creates a random marker and keeps it. When it reaches the server it is hashed one-way together with the date, so tomorrow the same browser is a different row — these rows cannot be used to follow a person from one day to the next.

Rows are deleted automatically after 100 days. The restaurant sees only totals: how many people came and how many pages they opened.

5. Who it is shared with

Data is not sold. It is passed on only where the service itself does not work otherwise:

— Payment providers, if you pay by card: the order number and the amount. We never see your card details; the bank's own page takes them.

— SMS gateway: the number, to send a code or a message.

— An external delivery service, if one is called: the address and phone.

— The till (POS), if connected: the contents of the order.

— Telegram, if the bot is used: the messages sent through it.

6. How long it is kept

Orders and bookings are kept while your account exists — both you and the restaurant need the history. SMS codes are deleted after 3 minutes. Visit rows after 100 days.

7. Your rights

You edit your name and addresses in your profile yourself, and change your phone number with a code sent to the new one. To stop marketing messages, telling the restaurant is enough.

To have your data deleted, or to get a copy of it, contact the restaurant:

— +998 90 000 00 00 · 31, Buyuk Ipak Yo'li (C-1), Mirzo Ulug‘bek Tumani, Toshkent, 100000, Oʻzbekiston

8. Security

Passwords are stored irreversibly (hashed), the site runs over HTTPS, each restaurant's data lives in its own database, and no other restaurant can reach it.

The Baklava

The Baklava

• Desserts • Tea • Coffee • Terrace • Made fresh daily ✨

Contact

  • +998 90 000 00 00
  • 31, Buyuk Ipak Yo'li (C-1), Mirzo Ulug‘bek Tumani, Toshkent, 100000, Oʻzbekiston

Pages

  • Menu
  • About us
  • Work with us
  • Cart
  • My orders
  • Privacy policy
© 2026 The Baklava. All rights reserved. · Powered byKeel