Privacy Policy
This Privacy Policy explains what data Cravio collects, why we collect it, and how we use it — whether you're a company ordering catering, a caterer offering your services, or a visitor just browsing the platform.
1. Data we collect
Account data: email address, name, and password (stored only in hashed form).
Company data: company legal name, tax ID (OIB), billing address, delivery addresses, and invoice email — needed to process your order and issue a correct invoice.
Caterer data: business name, tax ID, bank account (IBAN), address, and business registration documents — needed for verification and payout.
Order data: order history, order contents, amounts, delivery dates, and any reviews you leave.
Technical data: IP address, browser type, and session data, used solely for security and to keep the platform running.
2. How we use your data
We use your data solely to:
- Process and fulfill your orders, or orders you receive as a caterer.
- Issue invoices and meet our legal tax obligations.
- Verify a caterer's identity before they're shown on the platform.
- Communicate with you about your orders, quotes, or account.
- Prevent abuse and keep the platform secure.
We do not sell your personal data to third parties.
3. Data sharing
When you order from a specific caterer, we share the information needed to fulfil that order with them: your company name, delivery address, and order contents. The caterer never sees your payment details or your orders with other caterers.
We may also share data with service providers who help us run the platform (e.g. hosting, email delivery), who are contractually required to protect your data.
4. Cookies
We use cookies necessary for the platform to function — primarily to keep you signed in. We do not use tracking cookies for third-party advertising.
5. Data retention
We retain account and order data for as long as your account is active, and afterward for as long as the law requires (e.g. tax records). You can request account deletion at any time.
6. Your rights
Under Croatian and EU data protection law (GDPR), you have the right to:
- Request access to the data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal exceptions (e.g. tax records).
- Object to certain kinds of data processing.
7. Contact
For any privacy-related questions, reach out via our Contact page or at privacy@cravio.com.
8. Changes to this policy
We may update this policy from time to time. We'll notify you of significant changes by email or a visible notice on the platform.
Last updated: August 14, 2026