Your cart is empty
Choose how this site looks for you. Your choices are saved in this browser and are not sent anywhere.
Scales the whole page, the way your browser zoom does.
How we handle your information when you shop with us, subscribe, or apply for a wholesale account. Effective September 12, 2026.
Last updated September 12, 2026
We sell bottled tea, so we need your name, your address and a way to reach you in order to get a box to your door. Here is where all of that actually goes.
When you add something to your bag, we create a cart at Shopify and store its identifier in a cookie on your device so your bag survives a page reload. The cookie holds an identifier, not your name or your items.
When you check out, you leave this site and finish the order on Shopify’s own checkout. Everything you type there, your name, your shipping and billing address, your email address, your phone number and your payment details, goes to Shopify and to the payment processor handling the transaction. It is governed by Shopify’s privacy policy as well as this one. Card numbers never pass through this website and are never stored by us.
We can see your orders in our Shopify admin, which is how we pack them, ship them and help you when something goes wrong.
If you enter your email address in one of the signup boxes, we record it in Shopify as a subscriber who has agreed to marketing email. That is the only thing the box collects. There is one hidden field on the form that a person never sees and never fills; it exists to catch automated signups, and if it is filled we quietly discard the submission.
Being honest about a technical detail: the way our storefront has to create that subscriber means a customer record is created in Shopify alongside your subscription. You can unsubscribe from any email we send you, and you can ask us to delete the record outright.
Wholesale is the part of this site that collects the most, because opening a trade account requires it.
When you apply for a wholesale account, we collect your first and last name, email address, a password you choose, your phone number, your business name, your business type, your tax identification number, your business street address, and any notes you add.
That information goes to two places. A customer account is created for you in Shopify, holding your name, email, phone and password. The application itself, including your business details and your tax identification number, is sent to the system we use to review applications, which runs on Supabase. A member of our team reads it, and approves or declines the account.
Applying also currently marks your account as accepting marketing email.
When you sign in to the wholesale portal, your email address and password are checked by Shopify, and we store the resulting session token in a cookie on your device so you stay signed in. That cookie cannot be read by scripts on the page, and it expires on the schedule Shopify sets. Signing out deletes it, along with the cookie holding your wholesale cart. We never store your password ourselves.
If you email us or reach out on social, we have whatever you chose to put in that message, and we keep it while we are answering you.
The message form on our contact page is not yet connected to anything. What you type into it is not sent to us and is not stored anywhere. Until that changes, please email us at cybelrestaurant@gmail.com instead.
Some cookies are simply how the site works. The cookie holding your shopping bag and the cookie keeping you signed in to the wholesale portal are both in that category, and the site cannot do its job without them.
Analytics is separate. We use Google Analytics 4 to understand how people move through the site: which pages get read, what gets clicked, roughly where in the world visitors are, and what kind of device they are on. Google receives your IP address as part of that. Analytics cookies only load after you accept them, and you can change your mind at any time through the cookie preferences on this site.
Two choices are stored on your own device rather than sent to us: your cookie preference, and any display preferences you set such as larger text, reduced motion, higher contrast or the dyslexia friendly font. We cannot read either one.
The maps that show where to find our drinks are drawn with map imagery from CARTO, built on OpenStreetMap data. Loading a page with a map on it means your browser requests those map tiles directly, so CARTO can see your IP address. Directions links open Google Maps, and review links open Yelp, at which point you are on their site under their rules.
Our web host records the ordinary technical details of every request: the IP address it came from, the browser and device it identifies as, which page was asked for, and when. That is how the site gets delivered and how abuse gets blocked. Our host keeps these logs for 30 days.
We use a small number of services to run the shop. They handle your information on our behalf, for the purpose we hired them for and nothing else.
We may also disclose information if the law requires it, for example a valid legal request, or where we need to in order to protect the business, our team or our customers. If the business is ever sold or merged, customer records would transfer with it.
Order records live in Shopify for as long as we need them for accounting, tax and customer service. Newsletter subscriptions last until you unsubscribe or ask us to delete you. Wholesale accounts and applications are kept while the account is open.
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email cybelrestaurant@gmail.com and tell us what you want. We will need enough detail to find you, usually the email address you used with us.
Every marketing email we send has an unsubscribe link, and using it stops the email without deleting your order history. You can refuse analytics cookies, or withdraw that consent later, through the cookie preferences on this site, and the shop will work exactly the same either way.
Depending on where you live you may have additional rights under your own state or national privacy law, including the right to know what is collected and the right not to be discriminated against for exercising those rights. Ask and we will do our best to honour them.
We aim to respond within 45 days.
This website is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us information through this site, email cybelrestaurant@gmail.com and we will delete it.
If what this site does changes, this page changes with it and the date at the top is updated. If a change matters to you, for example a new service receiving your information, we will say so plainly here rather than burying it.
Questions about this policy, or about anything on this page, go to cybelrestaurant@gmail.com.
Cybel Corp., trading as Lilya's
Lilya's Cafe, inside Cybel
2735 5th Ave N
St. Petersburg, FL 33713
