Website and Contact Form Privacy Notice

Effective date: 27 August 2026

This notice explains how Nikos Ioannou Jewellers handles personal information when you visit this website or send an enquiry through its contact form.

Who is responsible for your information

Nikos Ioannou Jewellers is the controller responsible for the personal information described in this notice.

Information we collect

When you use our contact form, we collect the information you provide:

• your name;
• your email address; and
• the content of your message.

When the website or contact form is used, our hosting provider and the third-party services described below may also process technical information needed to deliver and protect those services. This may include an IP address, browser and device information, the requested page, the date and time of a request, the referring page, and security or spam-prevention signals.

Please do not include sensitive or unnecessary personal information in your message.

Why we use this information

We use personal information to:

• respond to jewellery enquiries and other customer requests;
• take steps you request before a possible customer transaction; and
• operate and protect the website and contact form from spam, fraud, and misuse.

We do not use contact-form submissions for marketing, profiling, or automated decision-making.

Legal basis

Where your enquiry concerns a possible purchase, commission, appointment, or other customer transaction, processing is necessary to take steps at your request before entering into a possible contract under Article 6(1)(b) of the General Data Protection Regulation.

Where applicable, we rely on our legitimate interests under Article 6(1)(f) to respond to general enquiries and to keep the website and contact form secure and functioning properly. We consider these uses limited to what visitors reasonably expect when contacting or using the website.

Service providers and third-party services

Netlify provides our website hosting and contact-form service. Netlify receives and stores form submissions on our behalf and may use subprocessors to provide and secure its services. Information may be processed outside the European Economic Area subject to the safeguards in Netlify's applicable terms and Data Processing Agreement. See Netlify's privacy information.

The website also uses Google Fonts and embedded Google Maps, and loads icons through Iconify. When these resources are loaded or used, the visitor's browser may send technical request information to Google or Iconify. Those providers handle that information under their own terms. See Google's Privacy Policy and Iconify's Privacy Policy.

Who may access contact-form information

Access is limited to the business owner or Executive Director and specifically authorized website administrators who need the information to respond to enquiries or administer the website.

How long we keep information

Ordinary website enquiries are kept for no longer than 90 days and may be deleted earlier when they are no longer needed.

If an enquiry becomes part of an ongoing customer relationship or transaction, relevant information is handled as part of the business's normal customer records and kept only for as long as needed for that relationship, transaction, legal obligations, or the establishment, exercise, or defence of legal claims.

Your data-protection rights

Subject to the conditions in applicable law, you may have the right to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information that is no longer needed;
• request restriction of processing;
• object to processing based on legitimate interests; and
• receive or transfer information where the right to data portability applies.

To exercise a right or ask a privacy question, email info@ioannou-jewels.com.cy. We may request reasonable information to verify your identity before acting on a request.

You also have the right to lodge a complaint with the competent supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.

Changes to this notice

We may update this notice if our website, enquiry process, service providers, or legal obligations change. The effective date above shows when this notice was last updated.