Privacy notice

The controller of the personal data described here is Doro Caffe, Ulica 101, 1200 Tetovo, North Macedonia.

Company registration and tax details are not published here. We will provide them, and any other documentation a buyer reasonably needs for due diligence, on request — write to sales@dorospremium.com.

We are established in North Macedonia, which is outside the European Union. Because this site offers goods and services to businesses and people in the Union, the General Data Protection Regulation applies to us all the same, and we have written this notice accordingly.

For anything in this notice — including a request to see, correct or delete what we hold — write to sales@dorospremium.com. A person reads that address; it is the same one enquiries arrive at.

This site has no account, no login, no newsletter and no basket. There is one form, at the foot of the home page. It asks for your name, your email address, the country or market you are writing from, optionally a product, and your message.

Nothing on the form is collected as you type. It is sent when you press Send enquiry, and not before.

The form also carries a hidden field that people never see and automated submissions usually fill in. If it arrives filled in, the submission is discarded and nothing is sent or stored. It collects no information about you.

We use what you send to answer you: to reply to a distribution, wholesale, private-label or product question, and to carry on that conversation if it continues.

The legal basis is Article 6(1)(b) of the GDPR — steps taken at your request before entering into a contract — or, where an enquiry is not heading towards a contract, our legitimate interest under Article 6(1)(f) in responding to people who write to us. We do not rely on consent for this, so there is no consent for you to give and none for you to withdraw. If you would rather we did not hold your enquiry, ask us to delete it and we will.

We do not profile you, we do not make automated decisions about you, and we do not sell, rent or share your details with anyone for their own purposes.

Delivering the form. This site has no server of its own, so the form is delivered by EmailJS — EmailJS Pte. Ltd., a Singapore company whose servers are operated by Amazon Web Services in the United States. Your enquiry passes through their systems on the way to our inbox, and a copy of the request is held in our EmailJS account for 30 days as a delivery log, after which they delete it. EmailJS act only on our instructions under a data processing agreement, and they rely on the European Commission's Standard Contractual Clauses for the transfer to the United States. Their own sub-processors — Amazon Web Services, Cloudflare, Redis, Sentry, Coralogix and Zendesk — are listed in their privacy policy.

Hosting. The site is hosted by Vercel. Like every web host, their servers see the ordinary details of each request — including your IP address — and keep short-lived operational logs so the site can be served and abuse can be stopped. We do not use those logs to identify anyone and we do not build any record of visitors from them.

If delivery fails. If EmailJS cannot be reached — you are offline, or something is misconfigured at our end — the form does not silently lose your message. It opens your own email program with everything you typed already filled in, so you can send it yourself. In that case nothing passes through EmailJS at all, and the message travels through your own email provider exactly as any email you write does.

We keep an enquiry, and the correspondence that follows it, for 24 months after we last hear from you. Export conversations are slow and a distributor who goes quiet for a season is often back; that is the whole of the reason for the period.

EmailJS's own copy is deleted by them after 30 days, independently of anything we do.

If you ask us to delete your enquiry sooner, we will, subject to anything we are separately required to keep — for instance where a commercial transaction has taken place and tax or accounting law requires the record.

We would like to know which pages people read and roughly where in the world they are, so we can tell whether this site is doing its job. That is the only reason for measurement here, and we ask before we do any of it.

Nothing is measured unless you agree. When you first arrive you are asked once. Until you accept, no measurement event is sent at all — not held back and sent later, not sent without identifiers. Nothing is sent.

If you accept, we use Vercel Web Analytics. For each page view it records the time, the page address and the pattern it matched, the page you came from, filtered query parameters, an approximate location derived from your connection, your operating system, browser and device type, and the version of the measurement script.

It does not set cookies, and it does not write anything to your device. It does not store your IP address: your IP and browser string are combined into a short-lived value on Vercel's servers so that two page views in one visit can be counted as one visit, and that value is discarded within 24 hours. There is no identifier that follows you to another website, and no way for us to work out who you are from any of it. We see totals, not people.

You can change your mind at any time using the link in the footer of every page. Declining costs you nothing — the site behaves identically either way.

Three things, all of them first-party, none of them used to identify or track you.

Your answer about measurement, kept in your browser's local storage so that we do not ask again on every page. It records only that you were asked and what you said.

Whether you have seen the opening animation, kept for the length of the browsing session so that moving between pages does not replay it. It is discarded when you close the tab.

How many processor cores your device reports, read once and not stored anywhere. It is used to decide how much animation the page can afford to run, so that a modest phone is not asked to do desktop work.

None of these are advertising or profiling storage, and there is nothing here for a preferences panel to manage. If you clear your browser storage, the measurement question is simply asked again.

The WhatsApp button and the social links in the footer open other companies' services. Nothing is shared with them while you are here — a link is only a link — but once you follow one you are on their site, under their privacy policy, and what they collect is between you and them.

This site loads no third-party scripts, advertising tags, tracking pixels, embedded chat widgets or social buttons. The typefaces are served from this site's own domain rather than fetched from a font service, so no request goes anywhere else when a page loads.

Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict what we do with it, object to our processing where we rely on legitimate interests, and ask for it in a portable form. There is no charge, and we will answer within one month.

Write to sales@dorospremium.com. We may need to ask a question or two to be sure we are giving your data to you and not to somebody else.

If you think we have handled your data badly, please tell us first — it is usually a misunderstanding and always faster. You also have the right to complain to the data protection authority in the EU country where you live or work, and that right does not depend on asking us first.

This notice was last updated on 6 August 2026. If what we do with personal data changes, this page and that date change with it. We do not make changes quietly and backdate them.