Privacy Policy

Last updated: October 21, 2026

Tsiropoulos Jewelry respects your privacy. This policy explains what personal data we collect through tsiropoulos.net and in connection with your orders, why we collect it, and the rights you have.

Who we are

The website and shop are operated by Aris Tsiropoulos Ltd, 3 John Kennedy Avenue, 1075 Nicosia, Cyprus. We are the data controller for your personal data.

Email: info@tsiropoulos.net
Telephone: +357 22 518130
WhatsApp (messages only)

What we collect

Orders and accounts: Name, billing and delivery address, email, telephone, order history, and your login details if you create an account.
Enquiries and consultations: The information you send us through our contact forms, email, telephone or WhatsApp.
Payments: Card payments are handled securely by our payment providers, JCC Payment Systems and PayPal. We do not see or store your full card details.
Technical data: IP address, browser type and device information, used for security and fraud prevention.
Cookies: See “Cookies” below.

Why we use it

Processing, delivering and supporting your order, including order confirmation and status emails. Legal basis: performance of a contract.
Answering your enquiries and booking consultations. Legal basis: your request and our legitimate interest.
Keeping invoices and accounting records. Legal basis: legal obligation under Cyprus tax and accounting laws.
Preventing fraud and keeping the site secure. Legal basis: legitimate interest.
Analytics and marketing cookies. Legal basis: your consent.
Sending our newsletter, with news, new collections and invitations, if you subscribe. Legal basis: your consent. You can unsubscribe at any time using the link in every email.

We do not sell your personal data. Order emails are service messages, not marketing. We will only send you promotional messages if you have agreed to receive them.

Who we share it with

We share only what is strictly necessary with:

Our website and email host, Cloudlayer8 Limited, in Cyprus
Couriers (ACS, Akis Express) to deliver your orders
Our payment providers, JCC Payment Systems and PayPal, to process payments
Our website developer for technical and security support
Google (Google Analytics), if you accept cookies, to help us understand how the site is used
Meta (Facebook/Instagram), through the Meta Pixel, if you accept marketing cookies
Our accountants and public authorities, where the law requires it
Mailchimp (Intuit Inc.), to send our newsletter if you subscribe

Your data is primarily stored in Cyprus. Where Google or Meta process data outside the EU/EEA, they rely on approved GDPR safeguards, including the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

Cookies

Essential cookies keep your shopping cart, login and preferences working and are always active. Google Analytics and the Meta Pixel load only if you accept them in our cookie consent banner. Nothing is tracked before you choose, and you can change your preference at any time through “Manage consent” at the bottom of every page.

How long we keep it

Order and invoice records: for the period required by Cyprus tax and accounting law (currently six years).
Account details: until you close your account.
Enquiries: for as long as needed to resolve your request, and no longer than two years.
Newsletter subscriptions: until you unsubscribe.

Your rights

Under GDPR, you have the right to:

access your personal data
correct inaccurate or incomplete data
request deletion, where we are not legally required to keep it
restrict or object to the processing of your data
receive a copy of your data in a portable format
withdraw your consent at any time

To make a request, contact us at info@tsiropoulos.net or via WhatsApp. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, Cyprus (dataprotection.gov.cy).

Security

Our website uses SSL encryption. Access to customer personal data is restricted to authorised staff who need it to do their work.

Children

Our website and services are not intended for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time to reflect operational or legal changes. The date at the top shows the latest version.