Privacy Policy
Last updated: July 2026
Controller
Caviar Codex. Data protection contact: contact@caviarcodex.com.
What we process and why
Your cart is stored solely in your browser's localStorage and is not sent to us until you place an order. Only if you choose “Accept all” in the cookie notice do we use Microsoft Clarity (Microsoft Corporation, USA) to see how the site is used (clicks, scrolling, session recordings without form contents). Legal basis: your consent, which you can withdraw at any time.
When you order, we process the data you enter (name, delivery address, city, postal code, phone and, optionally, email) to perform the contract — process the order, deliver it and contact you about it. Legal basis: performance of the contract (Serbian Personal Data Protection Act).
When you email us, we process the message data solely to answer your request.
Payment
Payment is by cash on delivery (to the courier on handover). We never collect or store card data. Collection data is processed by the courier as a processor.
Recipients
The courier — for delivery (name, address, phone, COD amount). The hosting provider — which processes server log files (IP address, timestamp, requested resource) for the technically necessary operation of the site.
Retention
Order data and related invoices are retained for the statutory accounting-record period (Serbian Accounting Act), then deleted.
Ambassador Program
If you take part in the Ambassador Program, we process your name, contact details, referral code, orders referred through it and your bank details to calculate and pay commission — legal basis: performance of the contract. Settlement data is kept for the statutory accounting-record period.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection. You may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).