PRIVACY POLICY

Last updated: 3 August 2026

Μοναστήρι Αρχαγγέλου Μιχαήλ (Monastery of Archangel Michael) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how personal data is collected, used, stored and shared when you visit this website, contact us, submit a form, create an account or make a purchase.

1. Data Controller

The data controller responsible for the processing of personal data is:

Μοναστήρι Αρχαγγέλου Μιχαήλ

Monagri, P.O. Box 694746

Limassol, Cyprus

Email: info@filakasaggelos.org

2. Personal Data We May Collect

Depending on how you interact with the website, we may collect:

• your full name;

• email address;

• billing address;

• delivery address;

• telephone number, if voluntarily provided during checkout or communication;

• account login and profile information;

• order details and purchase history;

• payment and transaction information;

• delivery and tracking information;

• messages submitted through contact forms or email;

• customer-service and complaint records;

• marketing preferences;

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from technical information;

• pages viewed and actions taken on the website;

• referral source;

• cookie identifiers; and

• any other information that you voluntarily provide.

Complete payment-card details are normally processed directly by the payment provider and are not stored by us.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you place an order, create an account, contact us or submit a form;

• automatically through cookies and similar website technologies;

• from payment, delivery and technical service providers where necessary to complete an order or support the website; and

• from publicly available sources or social-media platforms when you interact with our public pages.

4. Purposes of Processing

We may use personal data to:

• operate and secure the website;

• process and confirm orders;

• collect and verify payments;

• deliver products;

• communicate order and delivery updates;

• process returns, refunds and complaints;

• provide customer support;

• maintain customer accounts;

• prevent fraud and unauthorised transactions;

• maintain accounting and transaction records;

• comply with tax, regulatory and legal obligations;

• establish, exercise or defend legal claims;

• understand how visitors use the website;

• improve products, services and website performance; and

• send marketing communications where consent has been provided or where otherwise permitted by law.

5. Legal Bases for Processing

Personal data may be processed on one or more of the following legal bases:

• performance of a contract, including processing an order, payment, delivery, return or refund;

• steps taken at your request before entering into a contract;

• compliance with a legal obligation;

• our legitimate interests in operating, improving and securing the website, preventing fraud and managing customer relationships;

• your consent, including consent for certain cookies or marketing communications; and

• the establishment, exercise or defence of legal claims.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing of Personal Data

We may share only the personal data reasonably necessary with:

• Squarespace and providers supporting the operation and hosting of the website;

• payment processors and financial-service providers;

• delivery, courier and postal-service providers;

• email and communication providers;

• accounting, tax and professional advisers;

• website security, fraud-prevention and technical-support providers;

• analytics and cookie-service providers where permitted;

• government, regulatory, law-enforcement or judicial authorities where legally required; and

• other parties where necessary to protect legal rights or comply with a lawful request.

These recipients may act as processors on our behalf or as independent data controllers under their own legal obligations.

We do not sell personal data.

7. International Data Transfers

Some website and service providers may process personal data outside Cyprus or outside the European Economic Area.

Where required, international transfers will be supported by an appropriate legal mechanism, such as an adequacy decision, standard contractual clauses or another safeguard recognised under applicable data-protection law.

8. Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected.

Order, payment, invoicing and accounting information may be retained for the period required by tax, accounting and other applicable legal obligations.

Customer-service and complaint records may be retained while necessary to resolve the matter and to establish, exercise or defend legal claims.

Marketing information will be retained until consent is withdrawn, the customer unsubscribes or the information is no longer required.

Technical and analytics data may be retained according to the settings and retention periods of the relevant website and analytics services.

When personal data is no longer required, it will be deleted, anonymised or securely restricted, subject to legal retention obligations.

9. Cookies

The website may use cookies and similar technologies.

Essential cookies may be used for:

• website security;

• shopping-cart operation;

• checkout;

• payment processing;

• customer login;

• language or display preferences; and

• other functions necessary to provide the website.

Analytics, preference or marketing cookies will be used only where permitted by law and, where required, after consent has been obtained.

Cookie choices can be managed through the cookie banner or through browser settings. Disabling certain cookies may affect website functionality.

10. Marketing Communications

Marketing emails will be sent only where permitted by law.

You may withdraw consent or unsubscribe at any time by using the unsubscribe option provided in the communication or by emailing info@filakasaggelos.org.

Order confirmations, delivery updates, security notices and responses to enquiries are service communications and may still be sent when necessary.

11. Data Security

Reasonable technical and organisational measures are used to protect personal data from unauthorised access, alteration, loss, misuse or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers are responsible for keeping account passwords confidential and for notifying us if they suspect unauthorised account access.

12. Your Rights

Subject to applicable data-protection law, you may have the right to:

• request confirmation of whether your personal data is being processed;

• request access to your personal data;

• request correction of inaccurate or incomplete data;

• request deletion of personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object to direct marketing;

• request the transfer of certain data in a structured, commonly used and machine-readable format;

• withdraw consent at any time where processing is based on consent; and

• lodge a complaint with a competent data-protection supervisory authority.

To exercise a right, contact info@filakasaggelos.org.

We may request information reasonably necessary to confirm your identity and protect personal data from unauthorised disclosure.

13. Complaints to the Supervisory Authority

You have the right to submit a complaint to the Office of the Commissioner for Personal Data Protection in the Republic of Cyprus if you believe that your personal data has been processed unlawfully.

We encourage you to contact us first at info@filakasaggelos.org so that we may have an opportunity to address your concern.

14. Children’s Data

The online store is not intentionally directed at children who are unable to enter into a valid purchase contract under applicable law.

We do not knowingly collect children’s personal data without appropriate authorisation from a parent or legal guardian.

15. Third-Party Websites

The website may contain links to third-party websites or platforms.

We do not control and are not responsible for the privacy, security or content practices of independent third parties. You should review their privacy policies before providing personal information.

16. Automated Decision-Making

We do not normally make decisions producing legal or similarly significant effects based solely on automated processing.

Payment or fraud-prevention providers may conduct automated security checks under their own policies and legal obligations.

17. Changes to This Privacy Policy

This Privacy Policy may be updated when necessary to reflect changes to the website, our practices or applicable law.

The updated version will be published on the website with a revised “Last updated” date.

18. Contact

For questions, requests or complaints concerning personal data, contact: