This Privacy Policy explains how nailshop-cyprus.com (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you visit our website, create an account, place an order, contact us, or otherwise use our services.

We respect your privacy and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Who We Are

The website nailshop-cyprus.com is operated by:

Company / Business Name: [LEGAL BUSINESS NAME]
Registered Address: [BUSINESS ADDRESS]
Email: nailshopcyprus@gmail.com
Website: nailshop-cyprus.com

For questions regarding this Privacy Policy or your personal data, please contact us using the email address above.

2. Information We Collect

Depending on how you use our website, we may collect the following information:

Information You Provide

When you place an order, create an account, contact us, or complete a form, we may collect:

  • First and last name
  • Billing and shipping address
  • Email address
  • Telephone number
  • Account information
  • Order and purchase information
  • Delivery preferences
  • Messages or information you provide when contacting us

Payment Information

Payments may be processed by third-party payment service providers.

We do not normally store complete credit or debit card details on our servers. Payment information is handled securely by the relevant payment provider according to its own privacy and security policies.

Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Pages visited
  • Date and time of visits
  • Referring website
  • Cookie identifiers
  • General interaction with the website

This information may be collected through cookies and similar technologies.

3. How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders
  • Process payments
  • Arrange delivery or collection of orders
  • Communicate with you regarding your purchases
  • Create and manage your customer account
  • Provide customer support
  • Respond to enquiries and requests
  • Prevent fraud and protect the security of our website
  • Maintain and improve our website and services
  • Comply with accounting, tax, and other legal obligations
  • Send marketing communications where you have provided consent or where otherwise permitted by law

We do not sell your personal information.

4. Legal Basis for Processing

Under the GDPR, we process personal data only when we have a valid legal basis.

Depending on the circumstances, this may include:

Performance of a contract
We need certain information to process your order, receive payment, deliver products, and provide customer service.

Legal obligations
We may need to retain and process information to comply with tax, accounting, consumer protection, or other legal requirements.

Legitimate interests
We may process certain information where necessary for legitimate business purposes, such as preventing fraud, improving our website, or protecting our business.

Consent
Where required, we will ask for your consent before using personal information for purposes such as marketing communications or non-essential cookies.

You may withdraw your consent at any time.

5. Orders and WooCommerce

Our website may use WooCommerce to operate the online store.

When you purchase from us, information necessary to process your order may be stored within our website’s order management system. This can include your name, contact information, billing and shipping addresses, purchased products, payment status, and delivery information.

We retain this information where necessary to fulfil orders and comply with legal, tax, accounting, and consumer protection obligations.

6. Delivery Services

To fulfil your order, we may share necessary personal information with delivery and logistics providers.

Depending on the delivery method selected, this information may include:

  • Your name
  • Telephone number
  • Email address
  • Delivery address
  • Pickup point or locker selection
  • Information required to identify and deliver your order

We only provide delivery partners with information reasonably necessary to complete the delivery.

7. Payment Providers

When you make a payment, certain personal and transaction information may be provided directly to our payment service providers.

These providers process your information according to their own privacy policies and applicable legal requirements.

We recommend reviewing the privacy policy of the payment provider you choose when completing your purchase.

8. Cookies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that help websites operate correctly and remember certain information.

We may use:

  • Essential cookies necessary for the operation of the website, shopping cart, checkout, and account features
  • Preference cookies that remember your choices
  • Analytics cookies that help us understand how visitors use the website
  • Marketing cookies used for advertising or measuring marketing campaigns

Where required by law, non-essential cookies will only be activated after you provide consent.

You can manage or withdraw your cookie consent through the cookie settings available on our website.

You can also configure your browser to block or delete cookies, although doing so may affect some website functionality.

9. Analytics and Third-Party Services

We may use third-party services to understand website traffic, improve our services, provide payment functionality, prevent fraud, or support marketing activities.

Depending on the services enabled on the website, these providers may process information such as your IP address, device information, browser information, website interactions, and cookie identifiers.

Where required, these services will only be activated after obtaining your consent.

10. Sharing Your Personal Information

We may share personal information with trusted service providers where necessary to operate our business, including:

  • Payment processors
  • Banks and financial service providers
  • Delivery and courier companies
  • Website hosting providers
  • IT and website maintenance providers
  • Analytics providers
  • Email and communication providers
  • Accounting and professional advisers
  • Government authorities where required by law

Service providers are only given access to information necessary to perform their services.

We may also disclose personal information where required by law, court order, or a competent public authority.

11. International Data Transfers

Some service providers we use may process personal information outside Cyprus or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the information receives an adequate level of protection as required by applicable data protection law.

These safeguards may include adequacy decisions issued by the European Commission or approved Standard Contractual Clauses.

12. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Certain information relating to orders, payments, invoices, and transactions may be retained for longer periods where required by tax, accounting, consumer protection, or other applicable laws.

Account information may be retained while your account remains active unless deletion is requested or continued retention is legally required.

13. Your Rights

Under the GDPR, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal data
  • Request restriction of processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with a competent data protection authority

These rights may be subject to certain legal limitations.

To exercise your rights, please contact us at [INSERT CONTACT EMAIL].

We may need to verify your identity before processing certain requests.

14. Marketing Communications

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your contact information to send you information about products, promotions, offers, or updates.

You can unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting us.

Withdrawing consent for marketing does not affect transactional communications necessary to process your orders.

15. Data Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

16. Children’s Privacy

Our website and products are not specifically directed at children.

We do not knowingly collect personal information from children where parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal information to us unlawfully, please contact us so that we can take appropriate action.

17. External Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites. We recommend reviewing their privacy policies before providing personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal obligations, or data processing practices.

The latest version will always be published on this page together with the date of the most recent update.

19. Contact Us

If you have questions about this Privacy Policy, how we process your personal information, or wish to exercise your data protection rights, please contact:

[LEGAL BUSINESS NAME]
Email: nailshopcyprus@gmail.com
Address: [BUSINESS ADDRESS]
Website: nailshop-cyprus.com

You also have the right to lodge a complaint with the competent data protection supervisory authority in Cyprus if you believe that your personal data has been processed in violation of applicable data protection law.