Privacy Policy

1. Who we are

Chicago MYS is responsible for the processing of personal data described on this page.

For privacy-related questions, you can contact us at info@chicagomys.se.

2. Data we collect

We only collect the personal data we need in order to process your order and let you know when it is ready for pickup.

• Your email address, so we can contact you about your order.
• Order-related information, such as what you ordered, your selected pickup location, and the status of your order.
• Limited payment-related information shared with us through Stripe, such as payment confirmation or transaction status.

We do not store your full credit card details.

3. Why we collect it

We use your data to:

• process and manage your order,
• notify you when your pizza is ready for pickup,
• handle refunds, order issues, or customer support if needed,
• keep a basic record of transactions for accounting and operational purposes.

We do not sell your personal data.

4. Payments

Payments are processed by Stripe. When you make a purchase, some personal and transaction-related data is shared with Stripe so that the payment can be processed safely and securely.

We do not store your full card number, CVC, or other complete payment card details on our servers.

For more information about how Stripe handles personal data, please see Stripe’s Privacy Policy.

5. Legal basis under GDPR

We process your personal data because it is necessary in order to fulfil your order and provide the service you requested from us.

Where required, we may also process certain data in order to comply with legal obligations, such as accounting or bookkeeping requirements.

6. Data retention

We keep your personal data only for as long as necessary to manage your order, provide customer support if needed, and meet our legal obligations.

Order emails and basic transaction records may be retained for as long as required by law or for legitimate business administration.

7. Data storage and security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, misuse, or alteration.

Access to personal data is limited to those who need it in order to operate the service.

8. Your rights

Under the GDPR, you may have the right to:

• request access to the personal data we hold about you,
• request correction of inaccurate data,
• request deletion of your data, where applicable,
• object to certain processing, or request restriction of processing, where applicable.

To exercise any of these rights, contact us at info@chicagomys.se.

9. Cookies and security services

We may use essential security tools and payment providers that rely on cookies or similar technologies in order to protect the site, prevent abuse, and complete transactions.

Cloudflare Turnstile or similar security services on forms may set essential cookies for bot detection and site protection.

For more information, please see Cloudflare’s Privacy Policy.

10. Contact

If you have any questions about this Privacy Policy or how we handle personal data, contact:

Chicago MYS
info@chicagomys.se