Version 2026-10-12. Effective 2026-10-12.
This is the privacy notice for websites and ordering for pickup or delivery hosted by Stampomat Sites. It is shown on every website we host and on our business portals. Earlier versions are listed on the document versions page.
This website is built and hosted by Stampomat Sites, a service of Stampomat, operated by Daniel Ilievski, Ljubljana, Slovenia, SI ("Stampomat", "we", "us"). Registration number: company registration pending. Tax number: company registration pending.
General contact: hello@stampomat.com. Privacy requests: hello@stampomat.com.
Representative in North Macedonia: none appointed; write to the privacy address above. Data protection officer: none appointed; write to the privacy address above.
The website you are reading belongs to a business. Stampomat builds and hosts it, relays orders and messages to the business, never takes payment, and never accepts an order in its own name. If you are reading this on a business's website, that business is named on its Legal page, at /legal on this site, together with its own privacy notice for this site.
This page is the short, product-specific notice for Stampomat Sites. Our full privacy policy, which covers everything Stampomat runs and repeats everything on this page in more detail, is at stampomat.com/en/legal/privacy. Nothing on this page contradicts it.
Data protection law asks who decides why and how your data is used. On this platform that depends on what you are doing:
| Data | Who is responsible |
|---|---|
| An order for pickup or delivery you place at checkout | The business and Stampomat, jointly |
| The content of the site (menu, prices, photos, pages) | The business. Stampomat hosts it on the business's instructions |
| A message you send through the contact or quote form | The business. Stampomat relays it, and briefly stores it, on the business's instructions |
| A newsletter sign-up | The business, as the sender. Stampomat collects and stores the list on its instructions |
| The copy of an order or message in the business's own mailbox | The business alone |
| Portal accounts of business staff, platform security, visit counts, and the work of our AI assistants | Stampomat alone |
| Your Stampomat loyalty wallet and the stamps in it | Stampomat and the shop, jointly, as described in the full policy |
What joint responsibility for orders means for you. This is the essence of our arrangement with every business:
The full arrangement is part of our Data Processing and Joint Controller Terms, which every business accepts before it can use its portal.
At checkout you give your name, your phone number, an optional email address for your order confirmation, an optional note, item notes, whether you collect the order or have it delivered, and a pickup or delivery time. We also store the items and prices, the version of the order terms you accepted, a random token that opens your order status page, a normalised copy of your phone number so that we can find your orders if you ask us to, and, if you linked your wallet, the wallet reference (section 6). Your name and phone number are required to order: without them the business cannot prepare the order or reach you, so an order cannot be placed. Everything else is optional. Basis: the contract for your order.
There is no online payment. You pay at the counter or, for a delivery, at the door, and no card data ever touches this platform.
Delivery. Where a business delivers with its own staff and you choose delivery, you also give the delivery address (street and house number, postcode and town), confirm on a map the point of your entrance, and may add a note for the driver, for example the floor or the doorbell. We store the address, that point, the straight-line distance from the business that the delivery area was checked on, and the delivery fee with your order, so that the business can deliver it. The address suggestions come from our own copy of OpenStreetMap address data on our server: what you type is looked up there, is sent to no map, search or address provider, and is kept only as part of an order you place. If you let the page use your location, your browser asks you first, and our server uses the position only to find the nearest address and does not keep it. The map pictures come from our server too; when it does not hold a picture yet, our server fetches it from the OpenStreetMap Foundation without your IP address or anything you typed. Whether an address lies inside the business's delivery area is checked automatically against the distance the business set; that check decides only whether delivery is offered to that address, and pickup stays open to you. Basis: the contract for your order; the business and Stampomat are jointly responsible (section 2).
Who sees your order. The business, in its portal, on its order screens and by email: to the order address it configured or, if it set none, to the people who manage its site in our portal. That copy carries your name, phone number, your email address if you gave one and, for a delivery, the delivery address and the note for the driver, so that the business can reach you and deliver your order; afterwards it stays in the business's own mailbox under its own responsibility. The business's driver may open the delivery point in a navigation app of the business's choice: its order screens offer a link that opens the point in Google Maps, and if the business uses it, Google receives the point from the device that opens it, under the business's own responsibility. Stampomat, to run and support the service. Our AI assistants, under the limits in section 9. Anyone who has your order status link sees the items, the status and, for a delivery, the postcode and town, never your name, your phone number or your street.
Order emails. If you gave an email address, we email you when the business accepts your order, which is your order confirmation with a link to follow its progress, and if the order does not go ahead: when it is declined, not answered in time, or cancelled by the business. These are sent in the business's name from our mail server; a reply reaches the business. We keep a record of which of these emails went out and when, not their content or your address. An order the business does not answer within its response window is marked declined automatically; that is not an assessment of you, only the absence of an acceptance. No other automated decision is made about you on this platform.
Notes and allergies. Note fields go to the business so that it can prepare your order. Do not enter medical details. If you have an allergy, tell the business directly as well, by phone before you order or at the counter; ask about allergens before you order: this site does not yet show them with menu items.
How long. 90 days after your order is completed, declined or cancelled, we remove your name, phone number, email address, notes, the delivery address with its map point, distance and note for the driver, the status token and the wallet reference from it. A reason the business wrote in its own words for declining or cancelling your order is removed at the same time; a standard reason, chosen from a list or given by an automatic decline, stays. The items, totals and times, the delivery fee and whether the order was picked up or delivered stay so that the business has its statistics.
Remembering your details. At checkout you can tick Remember my details on this device. The box starts unticked. It is shown ticked only if you ticked it, or while the name, phone and email fields hold exactly the details already saved on this device; if you change those details without touching the box, it unticks. If the box is ticked when you press the order button, your name, phone number and email address are held in this browser tab, and they are saved in this browser's local storage, for this site's address only, when your order status page opens after the order is placed. Your next checkout here then shows them instead of empty fields. A copy held in the tab that the order status page does not pick up is removed the next time one of this site's ordering pages, such as the menu or the checkout, opens in that tab, or when your browser ends that tab's session. Your note, item notes, pickup or delivery time and delivery address are never saved. The saved details stay on your device: we receive them only as part of an order you place, and nothing about your choice is stored on our server. Anyone who uses the same browser can see them, so do not tick the box on a shared device.
Each order you place with the box ticked saves your details again. They are used for up to 365 days after they were last saved, and your browser may remove them sooner; after that they are no longer used, and the checkout deletes them the next time you open it here. You can remove them at any time: Not you? Clear, shown at this site's checkout whenever details are saved in this browser, removes them at once; an order placed with the box unticked and the same details removes them when your order status page opens; and clearing this site's data in your browser removes them too. An order placed with the box unticked and different details leaves the saved details as they are. Basis: your consent, which you can withdraw in any of these ways.
What you type (your name, your email address, your phone number and the service you ask about where the form has those fields, and your message) is emailed to the business, which answers you. The business relies on the steps you asked it to take before a contract, or on its legitimate interest in answering you. We keep a copy for 90 days as a delivery safeguard, then delete it. The business is responsible for the message; Stampomat acts on its instructions.
You give your name and email address and tick a consent box that names the business as the sender and links this notice and the terms in your language; the box is checked on our server, not only in your browser. We then email you a confirmation link, valid for seven days, and your sign-up counts only once you click it. An unconfirmed request is never exported and never mailed anything except the confirmation link, and it is deleted 14 days after it was made. We store your name, your email address, your language, the time you asked and the time you confirmed. We also record the exact consent wording you saw, where on the site you signed up, and a hashed copy of your IP address, as proof of your consent.
The business is the sender and is responsible for the list; Stampomat collects and stores it on the business's instructions. No newsletter has been sent through Stampomat yet; when sending is built, every email will carry an unsubscribe link. You can withdraw at any time through that link or by writing to the business or to us; we then delete your entry and keep only a hash of your address for 30 days so that you are not signed up again by mistake. Basis: your consent. You must be at least 16 to sign up.
At checkout you can link your Stampomat loyalty wallet so that the shop can add a stamp when you pick up your order or it is delivered. You confirm the link on a Stampomat page after signing in there. This site then receives a random identifier for you and that shop, never your name, email address or anything else from your wallet, and your order carries only that identifier; the shop's order screen and this site never learn who the wallet belongs to, and the loyalty service never learns your phone number. When the business marks your order as picked up or delivered, this site asks the loyalty service to add a stamp for that shop. The request can occasionally fail; your order status page shows the outcome, and the shop can add the stamp at the counter.
You can remove the link at any time from your wallet's account menu on stampomat.com; how the wallet itself works is described in section 4 of the full policy.
Sessions. Our server keeps a session record (an identifier, your IP address, your browser type, your cart) while you browse, and deletes it about two hours after your last request. Basis: our legitimate interest in a working, secure service.
Counting visits. We count how many visitors reach the menu, the cart and the checkout on each site, as plain numbers with no identifier attached. That is not personal data.
Fonts. Sites load their fonts from Bunny Fonts (BunnyWay d.o.o., Slovenia, EU), which receives your IP address to serve the files and states that it keeps no logs.
Maps. A site may show its location on a Google Map. The map does not load until you tap Load map. Loading it sends your IP address, browser details and the page address to Google LLC (United States), which may set its own cookies inside the map; Google describes its use of that data in its privacy policy (policies.google.com/privacy). Until you tap, the site shows the address as text and a plain link that sets no cookies, and Hide map clears your choice, which is stored in your browser only.
Delivery map. On the checkout and the Info page of a business that delivers, a map shows the delivery area and, at checkout, the point you confirm. It is not the Google Map above: our server serves its pictures, from its own copy or, when it has none yet, fetched from the OpenStreetMap Foundation without your IP address or anything you typed, so your browser contacts nobody else for it, and the map sets no cookie, writes nothing to your browser's storage and needs no tap.
Cookies. We set only cookies the site needs to work: the session (which also holds your cart and your language choice) and protection against forged forms. The business portals also set a keep-me-signed-in cookie that lasts up to 30 days. Cloudflare sets a short-lived security cookie on proxied hostnames. There are no advertising or analytics cookies, which is why there is no cookie banner; the Google Maps cookies above appear only after you load a map. Every cookie is listed with its purpose and lifetime on the cookies page.
Server logs. Requests and errors are logged for debugging and security and deleted after 14 days.
Your business, or Stampomat while setting the site up, gives us your email address to invite you to the merchant portal; that is how we got your data, and the invitation email tells you who added you, why, with a link to this notice and a way to object. At your first Google sign-in we store your name and Google account ID from your Google profile; Google tells us whether your address is verified. We keep your role on each site, the record of when you accepted our business terms (which document and version, in which language, on which screen, at what time, from which IP address and browser), and, if you turn order alerts on, a push subscription (a delivery address and keys; your browser's push service receives an encrypted order number and total). Alerts are only subscribed after you tap the control, and you can turn them off in the portal. Portal sessions last up to 30 days, and you can sign out all devices from the portal. Invitations that are never accepted are deleted after 90 days. Basis: your business's contract with us.
The legal identity of your business (legal name, seat, registration and tax numbers, contact details, licence details where given) is published on the site's Legal page because the law requires a trader to identify itself; providing it is a statutory requirement for going live.
Stampomat alone is responsible for our administrator accounts (our own team's name, email address and Google account ID, signed in with Google against an allowlist), for platform security, and for the audit trail of every change made through our administrative interfaces, whether by our team or by the AI assistants we use to build and support sites. The trail records who did what and when, and is kept for 24 months.
Our AI assistants work with task-scoped keys that expire and are logged. On order lists they see your name masked and no phone number; your full name, phone number, notes and delivery address open only with a key a person on our team has granted for that purpose, and every such read is logged. Assistants can read orders but cannot accept or decline them; that stays with a person at the business. What an assistant reads reaches the provider of the assistant, listed on the sub-processors page.
We share personal data only with the parties below and only for the purpose stated. The authoritative list, with the transfer mechanism and contract basis per party, is the sub-processors and recipients page.
| Party | Location | What it does | What it receives |
|---|---|---|---|
| The business that runs this site | Its own country, named on /legal | Prepares and, where it delivers, delivers your order, answers your message, sends its newsletter | Sections 3, 4 and 5 |
| The business's own mail provider | The provider's country | Holds the business's mailbox | The order and contact emails we relay |
| InterServer, Inc. | United States (New Jersey) | Hosts our servers, databases, files, backups and mail relay | Everything we store |
| Cloudflare, Inc. | United States, with servers worldwide | Network proxy, encryption at the edge, caching and attack protection for every hosted site, including businesses' own domains | Every request that passes through it, including what you type |
| Google LLC | United States | Sign-in for business staff and our team; Google Maps after you tap Load map, and when a business that delivers opens the route to your door | Sign-in: section 8. Maps: section 7. The delivery point: section 3 |
| BunnyWay d.o.o. (Bunny Fonts) | Slovenia, EU | Serves fonts | Your IP address and browser details; no logs are kept |
| Browser push services (Google, Mozilla, Apple, Microsoft) | United States, EU | Deliver order alerts that business staff turned on | A delivery address and an encrypted message |
| Anthropic PBC (AI assistants, Claude) | United States | Runs the assistants our team uses | What an assistant reads for a task, minimised as in section 9 |
| The Stampomat loyalty service | Same operator | Adds a stamp when you linked your wallet | The random identifier and order number from section 6 |
| Authorities | Where required | Only when the law obliges us | What the law requires |
We do not sell personal data and we do not share it with advertisers or data brokers.
We operate from SI. Our servers, databases and backups are hosted by InterServer in the United States, and requests pass through Cloudflare's network. For data of people in the EU and EEA we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework for recipients certified under it, and on the Commission's standard contractual clauses for every other US recipient and as a fallback; the sub-processors page states the status of each recipient at the date we last checked. You can ask for a copy of the safeguards by writing to hello@stampomat.com. For data of people in North Macedonia, transfers to EU and NATO member countries, including the United States, are outside the transfer chapter of the Macedonian Law on Personal Data Protection; we notify the Agency for Personal Data Protection of them as that law requires, and we still bind every recipient by contract.
Every window below is read from the same configuration our deletion jobs use, so what you read here is what the system does.
| Data | Kept for |
|---|---|
| Order name, phone, email, notes, delivery address, map point, distance and note for the driver, status token, wallet reference, a decline or cancel reason the business wrote in its own words | Removed 90 days after the order is completed, declined or cancelled; items, totals and the delivery fee stay |
| Our copy of contact and quote messages | 90 days |
| Newsletter sign-ups | Until you withdraw; then a hash only, for 30 days. A request you never confirmed: 14 days |
| Portal invitations never accepted | 90 days |
| Business and staff data after the contract ends | 90 days; export on request before that |
| Audit trail of administrative and assistant actions | 24 months |
| Session records | About two hours after your last request |
| Server and application logs | 14 days |
| Backups | 30 days, then overwritten. Data you asked us to delete disappears from backups within this window |
Under the GDPR and the Macedonian Law on Personal Data Protection you can ask us to give you access to the data we hold about you and a copy of it, to correct it, to delete it, to restrict processing while a request is handled, to object to processing based on a legitimate interest, and to receive your data in a portable format where we process it under a contract or your consent. You can withdraw any consent at any time, for example the newsletter, the map or remembered checkout details, without affecting what was done before. We make no decision about you based solely on automated processing that would significantly affect you (section 3).
Write to hello@stampomat.com, or to the business, which will forward your request to us. We answer within one month; for complex requests we may take up to two more months and will tell you. We need to be sure it is you: for orders, give us the phone number you ordered with, and expect a call-back or a code to confirm it is yours; for newsletter and contact requests, write from the email address concerned.
Complaints. You can complain to a supervisory authority at any time:
These websites are not directed at children. You must be at least 16 to sign up for a newsletter, and the sign-up form says so. If we learn that we hold a child's data without a parent's agreement, we delete it early.
We change this notice when the service or the law changes. The version and effective date at the top identify the current text, and the document versions page lists every earlier version with a summary of what changed. Businesses receive at least 30 days notice of material changes by email. No change applies to what happened before it took effect.
This notice is published in English, Macedonian and Slovenian; use the language switcher or the ?lang parameter on this page. A site may run in other languages; where this notice is not yet translated into one of them, the English version is served. If you are a consumer, the version in your language prevails once published. For businesses, the English version prevails.
Stampomat, operated by Daniel Ilievski, Ljubljana, Slovenia, SI. Privacy requests: hello@stampomat.com. Everything else: hello@stampomat.com.
Company details, supervisory bodies and our complaint handling are on the legal information page. The business that runs this site, and its own contact for complaints about an order, are on its Legal page at /legal.