Terms of Use

Welcome to the Privacy Policy of the website of Beauty Point Cyprus (www.beautypointcy.com). This policy explains how we collect, use, and protect your personal data when you interact with our website, including browsing, shopping in our online store, or creating an account. We are committed to handling your personal data with transparency, security, and in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Cypriot Law on the Protection of Personal Data (Law 125(Ι)/2018). By using our website, you agree to the practices described in this policy.

About Beauty Point Cyprus: The website is operated by Andri Petrou, trading as Beauty Point Cyprus. The website includes an online shop, customer accounts, and information about our beauty and wellness services. It does not currently include online contact or booking forms.

1. What Data Is Collected

1.1 Cookies & Usage Data

We collect limited technical data through cookies and similar technologies, such as device type, browser, pages visited and user interaction patterns. Please see Section 6 (Cookies and Tracking Technologies) for cookie categories and how to manage your preferences.

1.2 Account & Order Data

When you register for an account or place an order through our online shop, we collect your name, email address, password, billing and shipping address, telephone number, and order/purchase history. This information is used to process your order, manage your account, and arrange delivery. Providing this information is necessary to place an order or create an account; without it, we will not be able to process your order or provide the requested service.

1.3 Direct Communications

If you contact us by telephone, email, or WhatsApp using the details provided on the website, we process the information you choose to share (such as your name, contact details, and the content of your message) for the purpose of responding to your enquiry. Where you contact us via WhatsApp, your conversation also takes place on, and is subject to, WhatsApp’s (Meta’s) own platform and privacy policy.

2. Data Controller

Beauty Point Cyprus

81 Protara Avenue, 5288 Paralimni, Cyprus

Email: info@beautypointcy.com | Tel: +357 99 532144

2.1 Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent (Article 6(1)(a)): When you provide clear consent (e.g. via cookie acceptance, or agreeing to a treatment photograph being published).
Contractual Necessity (Article 6(1)(b)): When processing is required to take steps at your request prior to entering into a contract, or to perform a contract (e.g., processing and delivering your order, or managing your account).
Legal Obligation (Article 6(1)(c)): When processing is necessary to comply with a legal obligation (e.g., accounting and tax records).
Legitimate Interest (Article 6(1)(f)): When processing is necessary for our legitimate interests (e.g., secure and functional website operation, responding to enquiries), provided that such interests do not override your rights and freedoms.

2.2 Enquiries

For any data protection enquiries, contact info@beautypointcy.com. You may also contact the Office of the Commissioner for Personal Data Protection (Cyprus) at commissioner@dataprotection.gov.cy.

3. How We Use Your Data

Data collected automatically (cookies/usage data) and data you voluntarily share are used for:

Processing, confirming, and fulfilling your orders;
Creating and managing your account;
Arranging delivery via our courier partner(s);
Responding to and managing your enquiries (via email, phone, or WhatsApp);
Ensuring secure and efficient website operation;
Storing your cookie preferences (with consent, where applicable).

4. How We Protect Your Data

We take appropriate technical and organisational measures to protect the personal data processed in connection with our website, your account, and your orders. These include secure servers, encryption technologies, access controls, and periodic security reviews. We do not store full payment card details on our servers — online payments are processed directly by our third-party payment provider.

5. Your Rights

As a user of our website, you have the following rights under the General Data Protection Regulation (GDPR):

Right to Access (Article 15): You have the right to request access to the personal data we hold about you, including any data collected via cookies or usage data.
Right to Rectification (Article 16): You can request the correction of any inaccurate or incomplete personal data that we hold about you.
Right to Erasure (Article 17): You have the right to request the deletion of your personal data, provided that the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (where applicable).
Right to Restriction of Processing (Article 18): You can request that we restrict the processing of your personal data under certain conditions, such as if you contest the accuracy of the data or if the processing is unlawful.
Right to Data Portability (Article 20): You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.
Right to Object (Article 21): You can object to the processing of your personal data at any time, including the use of cookies or other tracking technologies.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

If you wish to exercise any of these rights, please contact us at info@beautypointcy.com. We will respond to your request in accordance with GDPR requirements, typically within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority, as described in Section 10 (Complaint Mechanism).

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and provide you with relevant content. We use both essential and non-essential cookies. Categories currently in use may include, but are not limited to:

Functional / Necessary (Essential — Always active): Required for basic site functionality, such as enabling the shopping cart and checkout. These cookies do not store personally identifiable information.
Functional Cookies: Enable specific features such as content display preferences or integration with third-party tools.
Statistics / Analytics Cookies: Used for anonymous statistical purposes to help us understand how visitors interact with the site. Used only with your consent.
Marketing / Advertisement Cookies: Used to create user profiles for advertising purposes or to track users across websites for marketing purposes. Used only with your explicit consent.
Social Media Cookies: Enable interaction with embedded social media content (e.g., Facebook, Instagram, TikTok) and may track engagement with such features. Used only with your explicit consent.

You can manage your cookie preferences at any time by clicking “Cookie Preferences” in the website footer. A settings panel will open where you can accept, deny, or adjust your preferences by category.

7. Third-Party Services, Links & Treatment Photography

7.1 Third-Party Services and Links

Our website uses Google Maps to display our location, and a WhatsApp Business chat widget for direct messaging, and may include links to our social media platforms (Facebook, Instagram, TikTok). These third parties may process data (e.g., IP address, interaction data) under their own privacy policies, independently of Beauty Point Cyprus. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective policies.

7.2 Treatment & Result Photography

Beauty Point may photograph treatments or results (including before-and-after images) to showcase our work. We will request your consent before any photograph featuring you is taken or published. Such photographs may be published on our website and/or social media channels on the basis of your consent (Article 6(1)(a) GDPR). If you have agreed to be photographed and wish to withdraw your consent, or request removal of an image already published, please contact us at info@beautypointcy.com and we will act on your request promptly. We do not publish your name or other identifying information alongside such images without your express agreement.

7.3 Social Media Pages

Beauty Point operates official pages on social media platforms including Facebook, Instagram, and TikTok. Where we maintain a presence on such platforms, the platform operator and Beauty Point Cyprus may act as joint data controllers with respect to certain data processed through your interaction with those pages (e.g., page insights, engagement statistics). Each platform processes your data under its own terms and privacy policy. We encourage you to review the privacy documentation of each platform you use.

8. Personal Data and Retention

8.1 Sensitive Data

We do not collect or record any special categories of personal data (such as health information) through this website. During in-person treatment sessions, you may be asked verbally about skin conditions, allergies, or other relevant information for safety purposes; this information is not recorded or stored in any digital system and is not connected to your website account or order history.

8.2 Data Sharing

We do not share your personal data with third parties for marketing or commercial purposes. Limited data may be shared with trusted service providers (processors), solely for operational reasons such as website hosting, courier delivery (currently ACS, or such other courier as we may use from time to time), or payment processing. These third parties act on our behalf and are bound by data protection agreements compliant with the GDPR. We do not sell or rent any personal data under any circumstances.

8.3 Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, unless a longer period is required by law. As a general guide:

Account and order data: for as long as your account remains active, plus the retention period required for accounting and tax purposes;
General enquiries and correspondence: up to 12 months from the date of last contact;
Cookie and analytics data: typically between 13 and 26 months, in accordance with the relevant cookie provider’s settings;
Data retained for legal or contractual purposes: for the period required under applicable law.

These are indicative periods only. When data are no longer needed, they are securely deleted or anonymised.

8.4 Automated Decision Processing

We do not engage in automated decision-making or profiling through the website.

8.5 International Data Transfers

Some of the third-party service providers we use (such as Google Maps, WhatsApp/Meta, or analytics tools) may process data in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure they are carried out in accordance with applicable data protection law, including through Standard Contractual Clauses (SCCs) or other appropriate safeguards.

8.6 Children’s Data

Our website and online shop are not directed at children, and we do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

9. Incident Response Policy

In the event of a personal data breach, we will promptly assess the situation and implement appropriate technical and organisational measures without undue delay. If the breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant Data Protection Authority within 72 hours, in accordance with Article 33 GDPR, and inform affected data subjects without undue delay where required under Article 34 GDPR.

10. Complaint Mechanism

If you have any concerns regarding the way we process your personal data, please contact us first at info@beautypointcy.com so we can attempt to resolve the matter promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) at commissioner@dataprotection.gov.cy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service offerings. The updated version will be posted on this page and effective from the date of publication.

12. Contact Us