Last Updated: February 02, 2026
Effective Date: February 02, 2026
1. INTRODUCTION AND IDENTITY OF THE CONTROLLER
SOK BEAUTY SALON LTD, trading as "ISEEME" ("we," "us," or "our"), is a limited liability company incorporated under the laws of the Republic of Cyprus.
● Registration Number: HE 452867
● Registered Office: Agiou Athanasiou, 59, D. VRACHIMIS BUILDING, 4102, Limassol, Cyprus
● Contact Email: sokbeauty.cy@gmail.com
● Contact Phone: +357 97 445 595
We act as the Data Controller regarding your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law 125(I)/2018 providing for the protection of natural persons with regard to the processing of personal data.
This Privacy Policy describes how we collect, use, and store your data when you visit our website and use our services, including our personalized sizing recommendations.
2. DATA WE COLLECT AND LAWFUL BASIS
We collect and process data only when we have a lawful basis to do so (Art. 6 GDPR).
2.1. Identity and Contact Data
● Data Points: Name, surname, date of birth, email address, phone number, shipping and billing address.
● Purpose: To register your account, verify your age (compliance with Art. 8 Law 125(I)/2018), and deliver your orders.
● Lawful Basis: Contractual Necessity (Art. 6(1)(b) GDPR) – `we cannot provide the service without this data.
2.2. Body Measurements (Special Feature)
● Data Points: Height, bust girth, under-bust girth, waist girth, hip girth, bra size, panty size.
● Nature of Data: We process these as standard personal data related to physical characteristics. They are not used for unique biometric identification.
● Purpose: To provide accurate clothing size recommendations and minimize returns.
● Lawful Basis:
○ For one-time size calculation: Contractual Necessity (Art. 6(1)(b) GDPR).
○ For saving measurements in your profile for future use: Consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time.
We guarantee that your body measurements are used solely for sizing. We do not use this data for health profiling or share it with third parties for marketing purposes, without limitation to fashion.
2.3. Financial and Transaction Data
● Data Points: Order history, payment confirmation details (we do not store full credit card numbers; these are handled by secure payment gateways like Stripe/PayPal), VAT/TIN number (if applicable).
● Purpose: Processing payments, issuing invoices, handling refunds, and tax compliance.
● Lawful Basis: Legal Obligation (Art. 6(1)(c) GDPR) regarding tax and accounting laws.
2.4. Technical and Usage Data
● Data Points: IP address, browser type, device information, interaction with the Site (via Cookies and Meta Pixel).
● Purpose: Site security, analytics, and personalized advertising.
● Lawful Basis: Legitimate Interest (for security) and Consent (for tracking/marketing cookies).
3. DATA RETENTION PERIODS
We adhere to the principle of storage limitation, retaining data only as long as necessary or required by law.
Data Category Retention Period Justification
Tax & Accounting Records (Invoices, Transaction Logs) 8 (Eight) Years from the end of the relevant tax year. Compliance with the Cyprus Assessment and Collection of Taxes Law (as amended by the 2026 Tax Reform).
Active User Account Data Until account deletion by user. To provide ongoing services.
Inactive User Data 2 (Two) Years after the last activity. Business limitation period for claims.
Body Measurements Until deleted by the user or after 2 years of inactivity.
Relevance of sizing data.
Marketing Consent Until consent is withdrawn (Unsubscribe). Respecting user choice.
4. SHARING OF DATA (PROCESSORS AND TRANSFERS)
We may share your data with trusted third parties (Data Processors) to provide our services:
● E-commerce Platform: Shopify (International) – Data may be transferred to Canada/USA under Adequacy Decisions and Standard Contractual Clauses (SCCs).
● Marketing: Meta Platforms Inc. (Pixel) – Used for advertising measurement.
● Logistics: Courier services (e.g., ACS, GAP Akis Express) for delivery within Cyprus.
● Authorities: The Tax Department or Police if legally required.
5. YOUR RIGHTS
Under the GDPR and Cyprus Law 125(I)/2018, you have the right to:
1. Access: Request a copy of your data.
2. Rectification: Correct inaccurate data (e.g., update body measurements).
3. Erasure ("Right to be Forgotten"): Request deletion of data (subject to our 8-year tax retention obligation).
4. Restriction: Limit how we use your data.
5. Portability: Receive your data in a structured format.
6. Object: Opt-out of direct marketing at any time.
To exercise these rights, please contact us at: sokbeauty.cy@gmail.com.
6. CHILDREN'S PRIVACY
In accordance with Article 8 of Cyprus Law 125(I)/2018, our information society services are intended for users aged 14 and above. We do not knowingly collect data from children under 14 without parental consent.
7. COMPLAINTS
If you believe your rights have been violated, you may lodge a complaint with the Supervisory Authority:
Office of the Commissioner for Personal Data Protection
● Address: Iasonos 1, 1082 Nicosia, Cyprus
● Postal Address: P.O. Box 23378, 1682 Nicosia
● Tel: +357 22818456
● Email: commissioner@dataprotection.gov.cy
● Website: www.dataprotection.gov.cy
