Privacy Policy

Effective Date: October 21, 2025
Last Updated: November 20, 2025

This Privacy Policy explains how Takis Charalambous LTD (“we”, “our”, “us”) collects, uses, stores, and protects your personal data when you visit our website (https://www.takis.com), use our e-shop, or interact with our services. We are committed to compliance with the General Data Protection Regulation (GDPR) and applicable Cyprus and EU laws.

By using our website, you acknowledge that you have read this Privacy Policy. If you do not agree, please discontinue use of our website and services.

1. Data Controller

Takis Charalambous LTD
Vyzantiou 19, Strovolos
2064, Nicosia, Cyprus
Email: [email protected]

We are responsible for determining how and why your personal data is processed.

2. Personal Data We Collect

We collect only the data necessary for order processing, communication, security, and business operations.

2.1 Data You Provide Directly

• Name and surname

• Billing and shipping address

• Email address

• Phone number

• Payment information (processed by third-party gateways; we do not store full card numbers)

• Order details and purchase history

• Customer support communications

• Account information if you create an account

2.2 Data Collected Automatically

• IP address

• Browser and device details

• Cookies and tracking technologies

• Pages viewed and browsing activity

2.3 Data from Third Parties

• Payment providers (Stripe Gateway)

• Delivery partners (ACS Courier)

• Analytics providers

• Marketing platforms (if you opt in)

3. How We Use Your Personal Data

We process your personal data for lawful purposes as permitted under GDPR.

3.1 Contractual Necessity

• Process and deliver orders

• Provide order confirmations and updates

• Handle returns and customer support

• Manage customer accounts

3.2 Legitimate Interests

• Improve website functionality

• Prevent fraud and security threats

• Analyse anonymised usage data

• Maintain business records

3.3 With Your Consent

• Marketing communications, newsletters, or promotions

• Non-essential cookies
  You may withdraw consent at any time.

3.4 Legal Obligations

• Accounting and tax compliance

• Responding to lawful authorities

• Record-keeping requirements

4. Legal Bases for Processing (GDPR)

We process data under the following GDPR Articles:

• Article 6(1)(b) – Contractual necessity

• Article 6(1)(c) – Legal obligations

• Article 6(1)(f) – Legitimate interests

• Article 6(1)(a) – Consent

We do not sell personal data.

5. How We Store and Protect Your Data

We use appropriate technical and organisational measures including:

• SSL encryption on all pages

• Encrypted payment processing

• Restricted access to personal data

• Secure servers and maintained software

• Monitoring for malicious activity

No system is completely secure, but we take reasonable precautions to protect your data.

6. How Long We Keep Your Data

We retain data only as long as necessary for business, legal, or regulatory purposes.

• Order data: up to 7 years

• Customer accounts: until deleted or inactive

• Marketing data: until you unsubscribe

• Support records: based on operational need

7. Sharing Your Personal Data

We share data only with trusted GDPR-compliant processors.

7.1 Service Providers

• Courier and delivery partners (ACS)

• Payment processors (Stripe Gateway)

• Hosting, IT, and infrastructure providers

• Email and analytics partners

These third parties access data only as necessary and follow data protection laws.

7.2 Legal Requirements

We may disclose data in response to:

• Laws or legal processes

• Court orders

• Regulatory or government authorities

• Fraud or security investigations

We do not sell or rent your personal data.

8. Your GDPR Rights

You have the following rights:

• Right of Access

• Right to Rectification

• Right to Erasure (“Right to be Forgotten”)

• Right to Restrict Processing

• Right to Data Portability

• Right to Object (legitimate interests or marketing)

• Right to Withdraw Consent

• Right to Lodge a Complaint

Supervisory Authority (Cyprus)

Office of the Commissioner for Personal Data Protection
Website: https://www.dataprotection.gov.cy

Identity Verification

We may request proof of identity before fulfilling GDPR requests to protect your data.

9. Children’s Privacy

Our website is not intended for children under 16.
We do not knowingly collect data from minors. If such data is found, it will be deleted.

10. Cookies & Tracking Technologies

We use cookies to:

• Enable essential website functions

• Improve performance and user experience

• Analyse traffic and behaviour

• Support marketing activities (only with consent)

Cookie categories:

• Strictly necessary

• Functional

• Analytical

• Marketing

You can adjust cookie settings through your browser or our cookie banner.

11. International Data Transfers

We store and process all data within the EEA.
If transfers outside the EEA occur, we use:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• GDPR-compliant safeguards

12. Marketing Communications

You will only receive marketing emails if you explicitly opt in.

You may unsubscribe at any time via:

• The link in our emails

• Emailing [email protected]

Unsubscribing does not affect essential transactional emails.

13. Third-Party Links

Our website may link to external sites.
We are not responsible for their:

• Privacy practices

• Content

• Security measures

We recommend reviewing their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
The “Last Updated” date reflects the latest revision.
Continued use of the website indicates acceptance of the updated policy.

15. Contact Us

For questions or GDPR requests:

Email: [email protected]
Address: Takis Charalambous LTD, Vyzantiou 19, Strovolos, 2064, Nicosia, Cyprus
Customer Service Hours: Monday–Friday, 9:00 AM – 5:00 PM (EEST)