Who We Are

Magna Plumeria (magnaplumeria.com) is an online shop specializing in high-quality cosmetic products. We are committed to protecting your personal data and ensuring a secure shopping experience.

Data Controller (Seller Identification)

Controller: Sofi Michail (Trade name: MAGNA PLUMERIA)
VAT No.: 00985568T
Address: 71B Yiannou Kranidioti, 2220 Latsia, Nicosia, Cyprus
Phone: +357 22316278  |  Mobile: +357 99306158
Contact: via our Contact Us page

1. Personal Data We Collect

• Full name
• Email address
• Shipping and billing address
• Phone number
• Payment information (processed securely by third-party providers)
• Browsing and shopping activity (for analytics, fraud prevention, and security)

2. How We Use Your Data

• To process and deliver orders and provide customer support
• To send order updates and confirmations
• To send promotions and offers (only if you opt in; you can withdraw consent anytime)
• To prevent fraud and ensure security of our services

3. Legal Bases for Processing (GDPR Art. 6)

• Contract: to process and deliver your order and provide customer service.
• Consent: for marketing communications and optional cookies.
• Legitimate interests: to prevent fraud, secure our services, improve our website (balanced against your rights).
• Legal obligation: to comply with tax/accounting and consumer protection laws.

4. Sharing Your Data

We do not sell personal data. We may share limited data with:

• Payment processors to complete transactions
• Couriers/shipping partners to deliver your order
• IT/hosting/analytics and security providers acting as processors under contracts
• Public authorities when required by law

5. International Transfers

If data is transferred outside the EEA, we use appropriate safeguards (e.g., EU Standard Contractual Clauses) and perform transfer risk assessments as required by law.

6. Data Retention

We keep personal data only as long as necessary for the purposes collected, including legal/accounting obligations. Typical periods:

• Order/contract data: up to 7 years (tax/accounting obligations, depending on local law)
• Customer service communications: up to 3 years
• Marketing data (email consent): until you withdraw consent or after inactivity reviews

7. Cookies & Tracking

We use cookies to improve your experience and for analytics and security. You can manage cookies via your browser settings. Where required, we request consent for non-essential cookies.

8. Your Rights (GDPR)

You may have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (for processing based on consent)

To exercise your rights, please use our Contact Us page.

9. Complaints to the Supervisory Authority

You have the right to lodge a complaint with your local supervisory authority. In Cyprus:

Office of the Commissioner for Personal Data Protection, Nicosia, Cyprus.
Website: dataprotection.gov.cy

10. Children’s Data

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without appropriate consent where required by law.

11. Data Security

We use appropriate technical and organizational measures (e.g., encryption in transit, access controls, secure payment processing) to protect your data.

12. Policy Updates

We may update this policy as needed. Please check this page periodically for changes.

13. Contact Us

For privacy questions or to exercise your rights, please reach us via our Contact Us page.