Privacy & Security

When you order, we only collect what's needed to fulfil your order:

• Name and WhatsApp number (required)
• Email (optional, to receive confirmations)
• Delivery address (only if you choose delivery)
• Any order notes you send us

• To confirm and deliver your order
• To communicate with you on WhatsApp or email about your order
• To send you, only if you opt in, updates on new flavours or promos (you can unsubscribe any time from the link at the bottom of each email)

We do not sell your data to third parties.

The admin area is only accessible to authorised Misù staff, via email and password login with server-side role checks. Customers do not need to sign up to place an order.

• HTTPS-encrypted traffic
• Database protected by Row-Level Security: every request goes through rules that limit who sees what
• Email-sending functions run server-side with credentials never exposed to the browser
• Payment data never transits through the site: payments are handled via WhatsApp / cash / bank transfer

We keep order data for accounting and customer-support purposes. You can request deletion of your data by messaging us on WhatsApp: we apply an immediate soft-delete and permanently erase the data once it's no longer required by law.

Transactional emails (order confirmation, reminders) are sent via a third-party email provider. You can unsubscribe from promotional communications via the link at the bottom of each email.

You can ask us at any time to:

• See the data we hold about you
• Correct it
• Delete it
• Unsubscribe from communications

Message us on WhatsApp and we'll reply as soon as possible.

If you think you've found a vulnerability, contact us on WhatsApp. We'll handle it confidentially as soon as possible.