Privacy Policy | Spice&Easy Cyprus

Effective Date: 1 January 2026

Business Name: Spice&Easy Cyprus

Spice&Easy Cyprus (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, and protect your information when you visit our website or place an order with us.

1. Information We Collect

We may collect the following types of personal data:

• Name • Billing and delivery address • Email address • Telephone number • Order history • Payment details (processed securely via third-party payment providers) • Website usage data (via cookies and analytics tools)

We only collect information necessary to process your order or improve your experience.

2. How We Use Your Information

Your information may be used to:

• Process and deliver your orders • Communicate regarding your order • Respond to enquiries • Send marketing emails (only if you opt in) • Improve website performance and user experience • Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

3. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contractual necessity (to fulfil your order) • Legal obligations (tax and accounting compliance) • Legitimate interests (improving services) • Consent (for marketing communications)

You may withdraw consent at any time.

4. Payment Information

Payments are processed securely via trusted third-party providers (e.g., Stripe, PayPal or other gateways used on our website). We do not store full payment card details on our servers.

5. Data Sharing

We may share your information with:

• Courier services (for delivery purposes) • Payment processors • Website hosting and analytics providers • Accounting services (as legally required)

All third parties are required to handle your data securely and in accordance with GDPR.

6. Data Retention

We retain order-related data for as long as required for tax, accounting, and legal obligations. Marketing data is retained only while consent remains active.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data • Request correction of inaccurate data • Request deletion (where legally permissible) • Restrict or object to processing • Request data portability • Withdraw consent at any time

To exercise these rights, contact us at info@spiceandeasycyprus.com.

8. Cookies

Our website uses cookies to:

• Enable essential website functionality • Analyse traffic and performance • Improve user experience

You may control cookie settings via your browser preferences.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.

10. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.

The Spice&Easy

way to health & wellness

​