PRIVACY POLICY
Phitos Christodoulou Central Woodworking Ltd – Online Furniture Shop
Last updated: 14 October 2026
1. Introduction
Phitos Christodoulou (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, purchase furniture or other products through our online shop, contact us, or use our services.
Our online shop operates on the WooCommerce platform and serves customers in Cyprus.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection legislation.
2. Who We Are
The data controller responsible for processing your personal data is:
Company name: Phitos Christodoulou Central Woodworking Ltd
Full registered legal name: Phitos Christodoulou Central Woodworking Ltd
Registered business address: 31 Mixalaki Savvide Str, Mesoyi Industrial Area, 8080 Paphos ,Cyprus
Email address: [email protected]
Telephone: 0035726935782
Website: www.phitoschristodoulou.com
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us using the details above.
3. Personal Data We Collect
We may collect and process the following categories of personal data when you use our website or purchase our products.
3.1 Personal and contact information
- Full name
- Email address
- Telephone number
- Billing address
- Delivery address
3.2 Order and purchase information
- Products purchased and order details
- Order number and purchase history
- Invoices and payment status
- Delivery arrangements and instructions
- Returns, refunds, warranty requests and complaints
- Communications with our customer service team
3.3 Payment information
We offer online payment. For online payments, transactions may be processed by an external payment service provider. We may receive transaction references, payment confirmations and payment status information.
We do not intend to store full payment card details on our own systems where these are processed directly by an external payment provider.
3.4 Technical and website information
When you visit our website, we may collect technical information such as your IP address, browser type, device information, website activity and cookie identifiers, depending on the website services you use and your cookie preferences.
3.5 Information you provide voluntarily
We may also process information that you provide when contacting us, requesting product information, subscribing to our newsletter or submitting a customer service request.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- To receive, process and confirm your orders.
- To arrange the delivery of furniture to addresses in Cyprus.
- To contact you regarding your order and delivery arrangements.
- To process payments, refunds and cancellations.
- To issue invoices and maintain accounting records.
- To respond to questions, complaints and warranty requests.
- To provide after-sales customer service.
- To prevent fraud and protect our website and business.
- To comply with applicable legal and regulatory obligations.
- To improve our website, products and customer experience.
- To send newsletters, promotional offers and information about new furniture collections, where permitted by law.
We only process personal data for purposes that are lawful and consistent with this Privacy Policy.
5. Legal Bases for Processing
Under the GDPR, we rely on the following legal bases, as applicable:
Performance of a contract: To process your order, arrange delivery, manage payment and provide services you have requested.
Legal obligations: To maintain invoices and accounting records and comply with applicable tax, consumer protection and other legal requirements.
Legitimate interests: To protect our business, maintain website security, prevent fraud, manage customer enquiries and improve our services, provided these interests do not override your rights and freedoms.
Consent: To send promotional communications where consent is required and to use non-essential cookies or similar technologies where prior consent is required.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
We do not require you to consent to promotional marketing as a condition of purchasing furniture.
6. Online Orders and Delivery in Cyprus
When you place an order through our WooCommerce online shop, we use the information you provide to process your purchase and arrange delivery within Cyprus if delivery is agreed to be done by the company with an extra charge.
Your name, telephone number, delivery address and relevant delivery instructions may be shared with our delivery personnel or an external transport company where necessary to complete the delivery.
We may contact you by telephone, email or other appropriate means to confirm delivery arrangements, resolve delivery issues or provide updates concerning your order.
Order-related communications are separate from promotional marketing communications.
7. Payments
Our online shop supports only online payments.
Online payments may be handled by an external payment service provider. Where applicable, that provider will process payment information under its own terms and privacy notice.
We may receive the information necessary to confirm that a transaction has been completed or declined and to manage refunds or payment disputes.
The payment providers currently used by our website are: JCC Payment System
8. Sharing Personal Data with Third Parties
We may share personal data with third parties where necessary for the operation of our business and the fulfilment of your order.
These may include:
- WooCommerce and website service providers: To operate the online shop and manage orders.
- Website hosting providers: To host and maintain our website.
- Payment service providers: To process online payments and refunds.
- Delivery and transport companies: To deliver furniture to customers in Cyprus.
- IT support and security providers: To maintain the functionality and security of our systems.
- Accounting and professional advisers: To assist with our legal and accounting obligations.
- Public authorities: Where disclosure is required by law.
We only share personal data that is reasonably necessary for the relevant purpose.
We do not sell your personal data to third parties.
Where third parties process personal data on our behalf, we will take appropriate steps to ensure that the processing complies with applicable data protection law.
9. International Transfers of Personal Data
Some website, hosting, analytics or payment service providers may process personal data outside the European Economic Area (EEA).
Where such transfers take place, we will ensure that the applicable GDPR requirements are met, including the use of an adequacy decision or appropriate safeguards where required.
Further information about relevant safeguards may be requested using the contact details provided in Section 2.
10. How Long We Keep Your Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of our legal obligations and any legitimate need to establish, exercise or defend legal claims.
In particular:
- Order and delivery records: For the period necessary to fulfil orders, handle returns, manage warranties and resolve disputes.
- Invoices and accounting records: For the period required by applicable Cyprus tax and accounting legislation.
- Customer service communications: For as long as necessary to resolve the matter and retain relevant records.
- Newsletter subscriptions: Until you unsubscribe or withdraw your consent, as applicable, subject to any records we need to retain to demonstrate compliance.
- Technical information and cookies: For the retention periods applicable to the relevant service, cookie and purpose.
When personal data is no longer required, it will be securely deleted or anonymised where appropriate.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide essential functions and improve your browsing experience.
These may include:
Essential cookies: Required for core website functions, such as the shopping basket, checkout and security.
Preference cookies: Used to remember your settings and preferences.
Analytics cookies: Used to understand how visitors use our website and help us improve it.
Advertising and marketing cookies: Used to measure advertising performance or personalise advertising, where applicable.
Non-essential cookies and similar technologies will only be activated after the required consent has been obtained.
You can manage your preferences through our cookie consent tool, where available, and change your choices at any time.
Further details about the cookies actually used on our website, their purposes and their retention periods should be provided in our Cookie Policy.
12. Newsletters and Promotional Communications
We may send newsletters, special offers, promotional messages and information about new furniture collections.
Where required by applicable law, we will obtain your consent before sending promotional communications. Consent will be requested separately and will not be a condition of placing an order.
You can unsubscribe at any time by using the unsubscribe link in our emails or contacting us directly.
We will stop sending promotional communications when you unsubscribe or withdraw your consent, as applicable.
We may retain limited information about your unsubscribe request to ensure that we respect your preferences.
Order confirmations, delivery updates, invoices and other necessary service communications are not promotional newsletters and may still be sent when required to fulfil your purchase or comply with our legal obligations.
13. Security of Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
These measures may include access controls, secure connections, software updates, restricted access to customer information and appropriate safeguards provided by our service providers.
Access to personal data is limited to authorised persons who need it for their work.
Although we take reasonable measures to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.
14. Your Rights Under the GDPR
Subject to the conditions and exceptions provided by law, you may have the right to:
- Access: Request confirmation of whether we process your personal data and obtain a copy.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Request restriction of processing in certain circumstances.
- Data portability: Receive certain personal data in a structured, commonly used and machine-readable format.
- Object: Object to processing based on legitimate interests in circumstances provided by law.
- Object to direct marketing: Request that we stop processing your personal data for direct marketing.
- Withdraw consent: Withdraw consent where processing is based on consent.
To exercise your rights, please contact us using the details in Section 2.
We will respond within the time limits required by the GDPR. The usual response period is one month, subject to applicable rules and permitted extensions.
Some rights are not absolute. For example, we may need to retain certain financial and accounting records even if you request their deletion.
15. Complaints to the Cyprus Data Protection Authority
If you believe that we have processed your personal data unlawfully or have not respected your rights, you may contact us to discuss your concerns.
You also have the right to lodge a complaint with the competent supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection
Official website: https://www.gov.cy/dataprotection/
The Commissioner supervises compliance with the GDPR and applicable data protection legislation in Cyprus.
16. Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices or content of external websites. We recommend reading their privacy policies before providing personal information.
17. Children’s Privacy
Our online shop is intended for customers purchasing furniture and related products. We do not knowingly collect children’s personal data in circumstances where such collection is not permitted by applicable law.
If you believe that a child has provided personal data to us inappropriately, please contact us so that we can review the matter.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, website functionality, service providers or applicable legal requirements.
The latest version will be published on our website with the updated revision date.
19. Contact Us
For questions about this Privacy Policy, your personal data or the exercise of your data protection rights, please contact:
Phitos Christodoulou Central Woodworking Ltd
Full registered company name: Phitos Christodoulou Central Woodworking Ltd
Business address: 31 Mixalaki Savvide str, Mesoyi Industrial Area, 8280 Paphos , Cyprus
Email: [email protected]
Telephone: 0035726935782
Website: www.phitoschristodoulou.com
Your contact information
Additional information
*Στις τιμές περιλαμβάνεται ο ΦΠΑ και η συναρμολόγηση. Η παραλαβή γίνεται από τον πελάτη από τις αποθήκες μας στην Βιομηχανικη Περιοχή Μεσόγης στην Πάφο.
Στις τιμές των προιόντων HOT BUY δεν συμπεριλαμβάνονται η συναρμολόγηση. Η παραλαβή γίνεται από τον πελάτη από τις αποθήκες μας στην Βιομηχανικη Περιοχή Μεσόγης στην Πάφο.
Prices include VAT and assembly. Customer to collect from our warehouse at Mesoyi Industrial Area , Paphos. Assembly not included in the prices of the HOT BUY products and Customer to collect from our warehouse at Mesoyi Industrial Area , Paphos.