1. Who we are
This website is operated by Michael Lamidis (“we”, “us”, “our”), based at Alassa Village, Limassol, Cyprus. We are the data controller for the personal data described in this policy. Our full registered business details (including company registration and VAT number) are available on request.
Contact us about privacy at info@michaellamidisshop.com or +357 97 755914.
2. The information we collect
- Order details: your name, email, phone, delivery address, the items ordered and your chosen payment method, when you place an order.
- Enquiries & quote requests: your name, email, phone and any message you send through our contact, offers, quote or chat features.
- Newsletter: your email address, if you subscribe to deals and updates.
- Usage & technical data: with your consent, information about how you use the site (pages viewed, approximate location derived from your IP address, device and browser type, referring site, and the advertisement or channel that brought you), through analytics.
We do not knowingly collect special-category data, and we do not store full payment-card details. Orders are paid by bank transfer, cash on delivery, or in our showroom.
3. How we use your data & our legal bases
- To process and deliver your order and provide customer support. Legal basis: performance of a contract.
- To respond to enquiries and quote requests. Legal basis: your consent and/or steps taken at your request before entering a contract.
- To send marketing emails (newsletter). Legal basis: your consent, which you can withdraw at any time via the unsubscribe link.
- To measure and improve the site through analytics, including which of our advertising brings orders and messages. Legal basis: your consent (managed through our cookie banner).
- To measure the results of our advertising on Facebook and Instagram (Meta Pixel). Legal basis: your consent (managed through our cookie banner).
- To keep the site secure and meet legal/accounting obligations. Legal basis: legitimate interests and legal obligation.
4. Cookies & analytics
We use cookies and similar technologies as described in our Cookie Policy. Analytics and marketing cookies only load after you give consent, and you can change or withdraw consent at any time via the “Cookie Settings” link in the footer.
If you have accepted Analytics cookies and you send us an order request or a message, we note which of our advertisements or which channel brought you to the site, the page you arrived on, and the dates of that visit and of your first visit, so we can see which advertising works. We do not attach the list of pages you viewed or any visitor identifier to your order or message.
Our website host (Vercel) may also measure how fast our pages load. This uses no cookies and is not used to identify you.
5. Who we share your data with
We never sell your personal data. We share it only with service providers (“processors”) who help us run the business, under contracts that require them to protect it:
- Hosting & infrastructure: our website host (Vercel), database provider (MongoDB Atlas) and image delivery network (Cloudinary).
- Email delivery: our email provider (Resend), which delivers your order request or message to our shop mailbox so we can answer you.
- Analytics: Google Analytics (Google Ireland Ltd / Google LLC), only with your consent.
- Advertising measurement: Meta Platforms Ireland Ltd (Meta Pixel), only with your consent.
- Delivery partners: couriers we use to deliver your order, where applicable.
- Authorities: where we are legally required to disclose information.
6. International transfers
Some of our providers may process data outside the European Economic Area (for example in the United States). Where they do, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Order & transaction records: for as long as required by Cypriot tax and accounting law (typically up to 6 years).
- Enquiries, messages & quotes: for as long as needed to deal with your request and a reasonable period afterwards.
- Newsletter: until you unsubscribe.
- Analytics: in aggregated or pseudonymised form, per the retention periods in our Cookie Policy.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”), where applicable;
- restrict or object to our processing;
- data portability;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these rights, email info@michaellamidisshop.com. You also have the right to lodge a complaint with the Cypriot supervisory authority, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. How we protect your data
We serve the entire site over encrypted HTTPS, store data with reputable providers, restrict administrative access, and protect staff sessions with signed, secure, HttpOnly cookies.
10. Children
This site is intended for adults. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy from time to time. The “last updated” date above shows the latest revision.
12. Contact
For any privacy question or request, contact Michael Lamidis at info@michaellamidisshop.com or +357 97 755914.