Clear information, considered choices. This policy explains what we collect, why we need it, and how you can exercise your privacy rights.
Who is responsible for your data?
Αρτιφέξ του Πεγάσιου is responsible for the personal information described in this policy. We are a furniture and interiors business based in Cyprus.
Β7 53, Μεσόγη 8280, Κύπρος
info@pegasiosart.com.cy
+357 26 952405 / +357 99 818690
This policy covers visits to pegasiosart.com and enquiries about our products and services. For a privacy question or a request about your information, please use the contact details above.
The information we collect
Information you give us. Our contact form asks for your name, email address and message. A telephone number is optional. We also receive information you choose to share by email, telephone or during discussions about a project, such as furniture requirements, measurements and delivery or installation details.
Information from using the website. Hosting and security services process technical information needed to deliver and protect the site, such as an IP address, browser information and requests made to the server. Google Analytics is currently disabled and does not load on this website.
Form privacy. Our enquiry form is configured not to use the WPForms visitor identification cookie or store the visitor’s IP address and browser details with a form entry. This does not prevent essential server or anti-spam processing.
We usually obtain information directly from you or automatically from your use of the site. If someone contacts us on your behalf, we may receive the details they provide for that enquiry.
How and why we use your information
We use a lawful basis appropriate to the purpose under the General Data Protection Regulation (GDPR).
Enquiries, quotations and projects. We use your contact details and project information to answer requests, prepare proposals and carry out agreed work. The basis is taking steps at your request before a contract, or performing a contract. General correspondence is handled in our legitimate interest in responding to people who contact our business.
Website operation and security. We process necessary technical information to deliver the site, prevent spam and investigate misuse. Our legitimate interest is maintaining a reliable, secure service. This does not replace consent where consent is required for cookies.
Website analytics. Google Analytics is currently disabled. If optional analytics is introduced, it will require a separate consent choice before loading. We will update the cookie information to reflect the tools in use.
Records and legal matters. Where applicable, we retain relevant business records to comply with legal obligations, or in our legitimate interest in establishing, exercising or defending legal claims.
Required form fields help us respond to your request. Without them we may be unable to reply. Providing an optional phone number is not a condition of making an enquiry. Sending an enquiry does not subscribe you to marketing.
Who may receive your information
Access is limited to people who need the information for the relevant task, including our team and service providers supporting website hosting, maintenance, email, communications and IT. Relevant details may also be shared with professional advisers or authorities where necessary for legal obligations or claims. We do not sell your personal information.
Contact forms. The website uses WPForms to collect enquiries. Submitted details may be stored in the website’s database and delivered to our business email so we can respond.
Google services. The site uses Google reCAPTCHA for contact-form security and Google Fonts to display typography. Google Analytics is currently disabled. Google may receive technical information such as your IP address when its services are requested. Google Fonts requests are separate from analytics.
Our Instagram gallery uses images hosted on this website and links to Instagram. If you follow a social-media, map, catalogue or other external link, the destination’s own privacy and cookie rules apply. See Google’s Privacy Policy for information about its services.
Processing outside the EEA
Some service providers, including Google, may process information outside the European Economic Area (EEA), including in the United States. Data-protection rules in those countries may differ from those in Cyprus.
Transfers must have an applicable GDPR transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. Google explains the mechanisms it uses in its international data-transfer information. Contact us if you would like further details about a provider or the safeguards relevant to your information.
How long we keep it, and how we protect it
We keep personal information for as long as needed for the purpose for which it was collected. The period depends on whether an enquiry leads to a project, the duration of our relationship, any necessary follow-up, and applicable accounting, legal or claims requirements.
We assess enquiry correspondence, project records and technical data according to those purposes, and delete or anonymise information when it is no longer required. Cookie lifetimes are explained separately in our Cookie Policy; a cookie’s expiry is not the same as the retention period for information already collected.
We use technical and organisational measures intended to protect information against unauthorised access, loss or misuse. No website or method of transmission is completely secure. Please avoid sending payment-card details, passwords or sensitive personal information through the general enquiry form.
Your rights and choices
Depending on the circumstances, you can ask to access or correct your information, have it erased, restrict its use, or receive eligible data in a portable format. You can object to processing based on legitimate interests and to direct marketing.
You can withdraw consent at any time, without affecting processing that was lawful before withdrawal. For requests, email info@pegasiosart.com.cy. We may need proportionate information to confirm your identity.
We normally respond within one month. If a lawful extension is needed for a complex request, we will explain it within that month. Rights are subject to the GDPR’s conditions and exceptions.
The website is not intended for children. Please contact us if you believe a child has supplied information inappropriately. We do not use enquiry information for decisions based solely on automated processing that produce legal or similarly significant effects. Automated anti-spam checks are used to protect the form.
If you have a concern
You are welcome to contact us so we can try to resolve a concern. You may also complain directly to a data-protection authority, including in the EEA country where you live, work or believe an infringement occurred.
In Cyprus, contact the Office of the Commissioner for Personal Data Protection:
www.dataprotection.gov.cy
commissioner@dataprotection.gov.cy
+357 22 818456
You do not have to contact us before making a complaint.
Related information and updates
Read our Cookie Policy for the cookies used on this site, their purposes and how to change your choices.
We may update this policy when the website, our practices or legal requirements change. The date at the top identifies the current version. Where a change requires fresh consent, we will ask for it.
