Privacy & Data Protection
Review edition · 15 October 2026
Controller and contact
Niki Agathokleous LTD · HE37958 · VAT 10037958Z
Triantafillou 5, 4860 Agros, Cyprus
[email protected] · +357 25 521400
Triantafillou 5, 4860 Agros, Cyprus
[email protected] · +357 25 521400
Contact us at the email above for privacy questions or requests.
What we collect and why
We process contact details, delivery/billing addresses, orders, transaction references and account details to take steps you request before a contract and to fulfil orders. Contact, basket and favours forms collect the details and preferences you submit so we can answer and prepare a quotation. Legal obligations may require accounting and transaction records. Our legitimate interests include proportionate security, fraud prevention, complaint handling and defending legal claims, subject to your rights. Optional tracking and future marketing subscriptions require an appropriate separate choice; agreeing to receive a quote is not newsletter consent.
Who receives data
Authorised staff and necessary service providers may access relevant data: hosting/IT and email providers, ACS for delivery, payment providers selected at checkout (JCC/Revolut when activated), and professional advisers where needed. Favours and basket enquiries are saved privately in WordPress and may be synchronised to our restricted Google Sheets for handling quotations. The contact form may use Cloudflare Turnstile for abuse prevention. We do not ask for complete card details through enquiry forms. Data sent to payment services is governed also by their own notices.
Storage, transfers and retention
Access is restricted to people who need it for their work. Service providers may process data outside the EEA; where relevant we must use an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses. We retain data only as needed for the stated purpose, mandatory accounting obligations and justified claims. Unsuccessful enquiries should be reviewed and removed when no longer needed. Account closure does not automatically erase records which must be retained by law. Backup copies follow their normal secure replacement cycle.
Your rights
Depending on the legal conditions, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Email [email protected]; we may need proportionate identity verification. We normally respond within one month; legally permitted extensions will be explained. You may complain to the Cyprus Commissioner for Personal Data Protection at gov.cy/dataprotection.
Marketing and optional services
No newsletter subscription is enabled in this review. We advertise through Facebook/Instagram; a social profile link does not itself install a Meta Pixel. This review does not add Google Analytics or Meta Pixel. If these services are added, the notice and consent controls must be updated before activation. The Google Maps visit-page map loads only when you allow it. The ACS pickup selector uses ACS point information and OpenStreetMap services, including address search, to help you choose a delivery point. Its map libraries are served through unpkg.com; map, address-search and ACS image services receive normal connection information such as your IP address. See our Cookie Policy and Cookie Settings.
