Privacy and cookies
Last updated 26 October 2026
This page explains what personal information DeMOYO Café collects through this website, why we collect it, who else handles it, and the choices you have. We keep it to what we need to prepare your order, answer your messages and keep the website safe.
Who we are
DeMOYO Café, 36 East Road, Belgravia,
Harare. You can reach us on or . Use the same details for any question about this page.
What we collect, and why
When you order online. The checkout asks for:
- your name and mobile number, so we know whose order it is and can contact you about it;
- your email address (optional), to send you a copy of your order with a link to follow it;
- what you ordered, when you want to collect it, and any allergies or requests you write.
We use these details only to prepare your order, hand it over and contact you about it. We do not add you to a mailing list.
When you chat with us. The chat asks for your name, and optionally an email address or mobile number so we can still reply if you leave the website. We keep the messages you send and our replies, so the conversation can carry on.
Technical information. Like every website, our server sees your network (IP) address, the type of browser you use, the pages you ask for and the time. This sits in standard server records that we use to keep the website secure and to fix problems. To stop floods of spam, the website also keeps a short-lived counter next to your network address, which is cleared automatically within two days.
What we do not collect. Customers do not create accounts on this website. We do not take payments online. We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.
Café staff. Staff who sign in to the website manager or the orders app have a name, an email address and a password (kept in scrambled form). The website records when they sign in, with the network address and browser type, until that session ends. Phones that receive order alerts are registered with the push service of the phone’s maker.
How your order travels
Your order is stored on the website’s server. The café sees it in its orders app and receives a copy by email. An alert goes to the café’s phones with your name, the number of items, the total and the collection time. If you gave an email address, you receive a copy too.
Who else handles information
- SendGrid delivers the order emails and, if you gave an email address in the chat, our replies.
- Apple, Google or Mozilla deliver the alerts to the café’s phones (whichever makes the phone’s browser).
- Google reCAPTCHA protects the checkout, the chat and the staff sign in from spam and automated programs. Google receives technical information from your browser and about how you use the form, in order to tell people from bots, and Google’s Privacy Policy and Terms of Service apply.
- Google Maps shows the map on our home page. The map is loaded from Google when you scroll to it, so Google receives technical information from your browser, and Google’s Privacy Policy applies to it.
- WhatsApp only if you choose to message us there.
- DigitalOcean provides the server this website runs on.
We do not sell your information, and we do not share it for advertising.
Cookies and storage on your device
Cookies are small files that a website asks your browser to keep. This website itself does not use cookies for analytics, advertising or tracking. These are the cookies you may get:
| Cookie | Set by | What it is for |
|---|---|---|
_GRECAPTCHA | Google reCAPTCHA | Spam protection, set when you place an order, start a chat or a staff member signs in. It is necessary for that protection. Google decides how long it lasts. |
| Google’s own cookies | Google Maps | Set by Google when the map on the home page loads (only if you scroll to it). Google decides what they are for and how long they last. |
dc_chat | This website | Keeps your chat with us on this browser, so you can come back to it. It is set only when you start a chat, and lasts six months. |
dc_session | This website | Keeps café staff signed in. It is never set for customers. It ends when the browser closes, or after up to 30 days if “Remember me” was ticked. |
Your browser also keeps your order (before you send it) and a link to your last order on your device, so they survive moving between pages. Nothing in it is sent to anyone until you place the order. You can delete cookies and this storage in your browser settings.
How long we keep information
- Orders are kept for 12 months. After that, names, phone numbers, email addresses and notes are removed, and only what was ordered stays (for the café’s records).
- Chats are deleted six months after the last message.
- Server records are kept for up to 30 days.
- The spam counter next to your network address is cleared automatically within two days.
Your choices
You can ask us what personal information we hold about you, ask us to correct it or delete it, ask us to stop using it, and take back any permission you gave us. Write to us using the details above and we will answer as soon as we can. If you are not happy with how we handle your information you can also complain to the data protection authority in Zimbabwe, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).
Keeping information safe
The website is served over a secure (HTTPS) connection, passwords are stored in scrambled form, and only café staff can see orders and chats. No system is perfectly secure, so please do not put sensitive details such as bank or identity numbers in an order or a chat.
Children
This website is not aimed at children, and we do not knowingly collect information from them.
Changes to this page
If what we do changes, we will update this page and the date at the top.