Pastry by Lyuba
Legal information

Privacy Policy and Personal Data Processing

Updated: September 26, 2026

Operator / company details

Details for international users

Full company name
BEST MOMENT LLC
Tax ID
02895906
Country of registration
Armenia
Registered address
Yerevan, Armenia

1. General Provisions

This policy applies to the Pastry by Lyuba website and its related contact, order, and sign-in forms. It explains what personal data may be processed, for what purposes it is used, to whom it may be disclosed, and what rights the user has. Questions about personal data processing may be submitted through the Contacts page.

  • — Retention:
  • — Retention:

2. What Data May Be Processed

Depending on how the project is used, the following data may be processed: name, email, phone number, country, city, delivery address, message and request content, order data, collaboration request data, the recipe author's name, recipe photos and text, the chosen website language, as well as technical data and security logs including IP address, browser data, cookies, session ID, CSRF token, and the date and time of requests.

  • — Retention:
  • — Retention:

3. Data Sources

Personal data is received directly from the user through website forms, checkout, and recipe submission. Some data may also be collected automatically from the user's browser and device when visiting the site, as well as from the payment provider and technical services in relation to payment statuses, technical events, and error messages.

  • — Retention:
  • — Retention:

4. Purposes of Personal Data Processing

Personal data is used to respond to inquiries, fulfill orders, deliver merch, provide access to digital materials, moderate and publish recipes, sign users in to their account with an email code, preserve user actions when functional cookies are enabled, send email notifications (for example, about the decision on a submitted recipe), ensure project security, prevent abuse, and comply with legal requirements.

  • — Retention:
  • — Retention:

5. Legal Bases for Processing

The legal bases for processing may include the user's consent, the need to perform a contract or take steps before entering into one, compliance with legal obligations, and the operator's legitimate interest in maintaining security, stable service operation, internal record-keeping, and protection of the project against fraud and abuse.

  • — Retention:
  • — Retention:

6. Telegram Bot (Closed)

The project's Telegram bot is closed: it no longer collects any data or sends any messages; news is published on the website, and notifications arrive by email. Data received through the bot (Telegram account ID, name, username, interface language, news subscription status) is no longer used: it has been deleted or anonymized. Accounts created by the bot without a verified email have been closed and anonymized; published recipes, favorites (recipes saved with the “Save” button) and orders have been kept. Accounts with a verified email hold no Telegram data; only the language chosen in the bot remains, now as the account's website language. The project's public Telegram channel works separately from the website.

  • — Retention:
  • — Retention:

7. Cookies and Technical Identifiers

The site uses necessary cookies for technical operation, signing in, form protection and keeping the session; functional cookies for saving recipes without signing in and remembering the feed; analytics cookies for visit statistics (Google Analytics, Yandex Metrica). Functional and analytics cookies are used only with the user's consent, given separately for each category. Cookies are described in detail in the separate “Cookie Policy”.

  • — Retention:
  • — Retention:

8. Disclosure of Data to Third Parties

The operator does not sell personal data and does not disclose it for cross-context behavioral advertising. Data may be disclosed only to those persons and services necessary for the operation of the project: hosting and technical providers, email and notification services, the payment provider, delivery services, as well as other contractors and public authorities where required by law or contractual obligations.

  • — Retention:
  • — Retention:

9. Cross-Border Data Transfers

When certain technical services are used, data processing or transfer outside the user's country may occur to the extent necessary for the relevant feature to operate. The operator seeks to organize such processing in compliance with applicable law and to take into account any requirements for localization, notice, or other cross-border transfer conditions that may apply to the project.

  • — Retention:
  • — Retention:

10. Retention Periods

Personal data is retained no longer than necessary to achieve the purposes of processing, unless a longer period is required by law or to protect the rights and legitimate interests of the operator. Messages, requests, order data, technical logs, and internal records may be retained for the period needed to support users, fulfill obligations, resolve disputes, maintain records, prevent abuse, and comply with mandatory requirements.

  • — Retention:
  • — Retention:

11. User Rights

The user may request information about their personal data, clarification, correction, deletion, restriction of processing, withdrawal of consent where processing is based on consent, and may also submit privacy-related requests through the Contacts page. If special user rights under the laws of certain countries or states apply to the project, such requests may be submitted in the same way, and the operator will review them within the limits of applicable law and the actual status of the project.

  • — Retention:
  • — Retention:

12. Children and Teenagers

The project is not specifically intended for children under 13 and is not designed for the targeted collection of personal data from such users. If the operator becomes aware that data from a child below the age permitted by applicable law has been obtained without a proper basis, reasonable steps will be taken to delete such data or stop processing it.

  • — Retention:
  • — Retention:

13. Data Protection and Policy Updates

The operator takes reasonable organizational and technical measures to protect personal data from unlawful or accidental access, alteration, disclosure, destruction, and other unlawful actions. This policy may be updated as the project develops, as the functionality of the website changes, as connected services change, and as legal requirements evolve; the current version is published on the website.

  • — Retention:
  • — Retention:

For buyers outside Russia (international cards)

Updated: September 26, 2026

Payment Data for Purchases with International Cards

If you pay with an international card, your payment data (card number, expiry date, security code, billing address) is entered on the Lemon Squeezy page and processed by Lemon Squeezy as the seller (Merchant of Record) in accordance with its privacy policy. We do not receive or store your full card details.

What Data We Receive

From Lemon Squeezy we receive the data needed to fulfil the order and provide support: name, email, country, order number and contents, amount, currency, and payment or refund status. This data is used to provide the download link, support buyers, keep records and prevent abuse.

Who Is Responsible for the Data

Data on international purchases received by the website is processed by the Content Provider (details below). Please send any requests regarding your personal data to support.

Support

Support for buyers outside Russia: please contact us via the Contacts page, stating your order number and the email address used for the purchase.

Content Provider Details

Full company name
BEST MOMENT LLC
Tax ID
02895906
Country of registration
Armenia
Registered address
Yerevan, Armenia