Last updated: February 25, 2026

This Privacy Policy explains how O.M CYPSONIA (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit or shop on our website (the “Site”). We process personal data in line with the EU General Data Protection Regulation (GDPR).

1) Who we are (Data Controller)

O.M CYPSONIA
Address: Glinou 2 street, 6027, Larnaca, Cyprus
Phone: +357 95175988
Email: info@omcypsonia.com

2) Personal data we collect

Depending on how you use our Site, we may collect:

Contact details: name, email, phone number, billing address, and shipping address.

Order details: items purchased, order totals, delivery details, returns/refunds, and messages you send us.

Account details (if you create an account): username, password (stored securely), and order history.

Payment details: payments are processed by payment providers. We receive payment confirmation and limited details, such as a transaction ID.

Device and usage data: IP address, browser type, device information, pages viewed, and actions taken on the Site.

Customer support data: emails, chat messages, or other communications you send us.

Marketing preferences: if you subscribe to updates or opt out of marketing messages.

3) How we collect your data

We collect data when you:

• place an order or create an account
• subscribe to emails (if available)
• contact us for support
• browse the Site through cookies and similar technologies

4) Why we use your data

We use your data to:

• process and deliver orders, including returns and refunds
• communicate with you about your order, account, or support requests
• improve our Site, including performance, testing, and user experience
• keep the Site secure and prevent fraud or misuse
• meet legal obligations, including tax, accounting, and compliance requirements

5) Legal bases for processing (GDPR)

We process personal data under one or more of these legal bases:

Contract: to complete your purchase and deliver products or services.

Legal obligation: to keep records required by law.

Legitimate interests: to secure our Site, prevent fraud, and improve our services, while balancing these interests with your rights.

Consent: for marketing and certain optional cookies. You can withdraw consent at any time.

6) Cookies and similar technologies

Our Site uses cookies to make the store work, including cart and checkout features, remember preferences, and support basic site functions. Some cookies may also be used for analytics or marketing if these features are enabled on our Site. WooCommerce stores commonly use cookies for store functionality and related features.

You can control cookies through your browser settings and any cookie notice displayed on our Site.

7) When we share your data

We may share your data only when necessary to run the store and deliver services, such as with:

• payment providers, to process payments
• shipping or delivery partners, to deliver your order
• website hosting and IT providers, to host and maintain the Site
• analytics or marketing tools, only if enabled and permitted

We do not sell your personal data.

8) International transfers

If a service provider processes your data outside the European Economic Area (EEA), we use appropriate safeguards to protect it, such as approved contractual protections, as required by GDPR.

9) Data retention

We keep personal data only for as long as necessary for:

• order processing, support, and returns
• legal and tax obligations
• fraud prevention and security
• resolving disputes

Retention periods may vary depending on the type of data and applicable legal requirements.

10) Security

We use reasonable technical and organizational measures to protect personal data. No system is 100% secure, but we take appropriate steps to reduce risks and protect your information.

11) Your rights

Under GDPR, you may have the right to:

• access the personal data we hold about you
• correct inaccurate or incomplete data
• request deletion in certain cases
• restrict or object to certain processing
• request data portability in certain cases
• withdraw consent, where processing is based on consent

To exercise your rights, please email us at info@cypsonia.com.

You also have the right to lodge a complaint with the Cyprus supervisory authority: the Office of the Commissioner for Personal Data Protection.

12) Children’s privacy

Our Site is not intended for children, and we do not knowingly collect personal data from children.

13) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows when it was last revised.