Privacy Policy

1. Data Controller

The company responsible for the processing of personal data is:

COFFEE CYCLE TECHNOLOGIES LTD
Trade Name: Coffee Goldy Cosmetics
Address: 187 Anexartisias Street, 3040 Limassol, Cyprus
Contact Email: [email protected]

The Company places special emphasis on the protection of personal data and fully complies with the General Data Protection Regulation (EU) 2016/679 – GDPR, as well as the applicable Cypriot legislation.

2. Policy Amendments

It is clarified that the Company may modify this policy at any time and without notice. For this reason, it is necessary for users/customers to review this policy before navigating the website or submitting any personal data. By browsing and using the services of the website and online store, the user/customer accepts the content of this policy.

3. Data We Process

The Company collects and processes personal data that you provide yourself, as well as certain data that is collected automatically.

 Data you provide to us:

  • Full name
  • Date of birth (where required)
  • Shipping & billing address
  • Email address
  • Phone number
  • Payment details (through third-party providers – we do not store card information)

For B2B / Wholesale sales:

  • Company name
  • Registration number
  • VAT number

Data collected automatically:

  • IP address
  • Device & browser type
  • Cookies & similar technologies
  • Date and time of access
  • Browsing information (logs)

4. Purpose Of Data Collection

The processing of your data is carried out for the following purposes and based on the corresponding legal bases under Article 6 of the GDPR:

  1. To contact the Company via the relevant form.
  2. For issuing invoices for retail and wholesale sales.
  3. To create an account in our online store.
  4. To provide consent to receive newsletters.
  5. To carry out transactions and payments.
  6. COOKIES

We use cookies for:

  • The proper functioning of the website,
  • improving the user experience,
  • statistical analysis.

Detailed information is provided in the Cookies Policy.

6. Data Recipients

Personal data may only be shared with absolutely necessary third parties, such as:

  • Courier companies,
  • payment providers,
  • IT & Hosting providers,
  • accounting and tax offices,
  • support partners.

All partners are contractually bound to comply with the GDPR.

7. Data Retention Period

Data are retained as follows:

  • Order & invoicing data: up to 7 years (tax obligation)
  • User accounts: as long as they are active
  • Marketing / Newsletter: until consent is withdrawn
  • Contact data: up to 24 months
  • Legal claims: until their final resolution

8. Data Subject Rights

You have the right to:

  • Access your data,
  • rectify or complete your data,
  • erase your data (where permitted),
  • restrict the processing of your data,
  • data portability,
  • object to the processing,
  • withdraw your consent at any time.

Requests can be submitted to [email protected]
We respond within 30 days, in accordance with GDPR.

9. Data Security

The Company implements appropriate technical and organizational measures to ensure the security and confidentiality of the data.

10. Complaints

If you believe that your rights are being violated, you have the right to contact the:
Office of the Commissioner for Personal Data Protection of Cyprus

11. Newsletter

Subscription to the newsletter is carried out only with explicit consent.
You can withdraw your consent at any time via the unsubscribe link or by email.