Privacy notice

This notice explains what we do with your personal details when you use this website or buy from us online.

Who is responsible

Pakaian Butik Ltd is responsible for your details (the “controller”). Contact us at info@opal.cy, or write to us at the address below.

What we collect, and why

• When you order: your name, email address, telephone number (if you give it) and, for delivery, your address, with the pieces you ordered and what you paid. We use them to fulfil your order, to email you about it, to handle returns, and to keep the accounting records the law requires. The legal basis is our contract with you and our legal obligations.
• When you pay: our payment provider, Viva.com, handles your card details on its own payment page. We never receive or store your card number; Viva.com tells us only whether the payment succeeded.
• When you visit: our hosting provider records technical information such as your IP address and browser in its server logs, to keep the website running and secure. When you place an order we also note your IP address for a short time, to stop automated abuse of our checkout. The legal basis is our legitimate interest in a secure website.
• If you choose “Accept all” in our cookie banner: Google Analytics, Google Ads and the Meta pixel measure how the shop is doing. They are told which of our pages you opened, your IP address and what browser you are using, and they store cookies in your browser. Since October 2026 they are also told when a piece is looked at, when one goes into a basket, when a checkout is started, and when an order is paid for — and for a paid order, which pieces, what it came to and the order’s own number. They are not told your name, your email address, your telephone number, your address or anything else you typed, in any form. The legal basis is your consent, which you can withdraw at any time with the Cookie choices button at the bottom of any page; nothing of the sort is loaded at all until you have accepted. Our Cookies page lists what is stored and for how long.

We do not send marketing emails and we do not sell your details. The only tools on this website that are not our own are the ones named above, and they run only if you accept them.

Who else sees your details

Only the companies that help us run the shop, under contract with us:

• Viva.com, our payment provider — payments. We pass it your name, email address, telephone number (if you gave it) and the amount, so it can take the payment and guard against fraud; your card details go to Viva.com directly and never to us. Viva.com has its own privacy notice at viva.com/en-cy/privacy-notice.
• Hostinger — hosts our website, our shop system and our email.
• The courier, if you choose delivery — your name, address and telephone number, so they can deliver.
• Our accountant and the tax authorities, where the law requires it.
• Google — Google Analytics, which counts visits to our pages and the orders placed on them, and only if you accepted it. It receives which of our pages you opened, your IP address and what browser you are using, and, when you buy, the pieces, the amount and the order’s number. Google is based outside the European Union and may handle those details outside it. Its privacy policy is at policies.google.com/privacy.
• Google — Google Ads, which tells us which of our advertisements led to a sale, and only if you accepted it. When an order is paid for it receives the order’s number, its total and the currency, along with your IP address and what browser you are using. We have switched off the parts of it that would build an advertising audience out of our customers. Google may handle those details outside the European Union. Its privacy policy is at policies.google.com/privacy.
• Meta, the company behind Facebook and Instagram — the Meta pixel, which tells us whether our advertising reaches anybody and whether it leads to a sale, and only if you accepted it. It receives the fact that you opened a page here, your IP address and what browser you are using, and, when you buy, the pieces, the amount and the order’s number. Meta may handle those details outside the European Union. Its privacy policy is at facebook.com/privacy/policy.

How long we keep them

Order records are kept for as long as Cyprus tax and accounting law requires, and then deleted. Server logs and checkout IP notes are kept only briefly.

Your rights

You can ask us for a copy of your details, to correct them, to delete them (unless the law requires us to keep them), to restrict or object to how we use them, or to receive them in a portable form. Email info@opal.cy. If you are unhappy with how we handle your details, you can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

Cookies

See our Cookies page.

Last updated 3 October 2026.