Privacy Policy

Last updated: January 2026

1. Introduction

ljubljbhli Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ljubljbhli.top, use our services, or interact with us in any way.

We are the data controller responsible for your personal data. Our company is registered in Cyprus with registration number HE2648 and VAT number CY73499852I, located at Athalassa Avenue 56, Paphos, 8038, Paphos District, Cyprus.

2. Data We Collect

The data we collect from you includes personal information that you provide directly to us, information we collect automatically when you use our services, and information we may receive from third parties. Specifically, the data collection encompasses the following categories:

2.1 Information You Provide to Us

• Contact details (name, email address, phone number)
• Communication preferences and marketing consents
• Messages and enquiries sent through our contact forms
• Reservation and catering service requests
• Feedback and survey responses
• Any other information you choose to provide when contacting us

2.2 Information We Collect Automatically

• Website usage data and analytics information
• IP address, browser type, and device information
• Cookies and similar tracking technologies (see our Cookie Policy)
• Pages visited, time spent on our website, and referral sources

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services. The use of your data is based on legitimate business interests, contractual necessity, or your consent. Specifically, how we use your information includes:

3.1 Service Provision

• Processing and responding to your enquiries and requests
• Providing café services, catering, and event planning
• Managing reservations and service bookings
• Delivering customer support and assistance

3.2 Communication and Marketing

• Sending service-related communications and updates
• Providing information about our menu, services, and special offers (with consent)
• Responding to your questions and feedback

3.3 Business Operations

• Analysing website performance and user behaviour
• Improving our services and customer experience
• Ensuring security and preventing fraudulent activity
• Complying with legal obligations and regulatory requirements

4. Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

• With service providers who assist us in operating our business (email services, analytics providers)
• When required by law, regulation, or legal process
• To protect our rights, property, or safety, or that of our customers or others
• In connection with a business transfer, merger, or acquisition (with appropriate safeguards)

6. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, your rights regarding your personal data include:

• Right of access: You can request information about the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request a copy of your data in a machine-readable format
• Right to object: You can object to certain types of data processing
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Data retention periods vary depending on the type of information and the purpose for which it is processed:

• Contact form enquiries: 3 years from last contact
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months (Google Analytics default)
• Legal and regulatory compliance: As required by applicable laws

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) when we use third-party services such as analytics or communication platforms. We ensure that such transfers are protected by appropriate safeguards, including adequacy decisions or standard contractual clauses approved by the European Commission.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us using the following contact information:

You also have the right to lodge a complaint with the relevant data protection authority if you believe we have not handled your personal data in accordance with applicable laws.

12. Legal Basis for Processing

Our processing of your personal data is based on one or more of the following legal grounds under GDPR:

• Consent: Where you have given clear consent for us to process your data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where we need to comply with legal or regulatory requirements
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms