Effective Date: 18/08/2025

This Privacy & GDPR Policy explains how A.M.FLOWLESS COMMS (“we,” “us,” “our”) collects, uses, and protects your personal data when you purchase our products or interact with us. We are committed to complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Cyprus.

1. Data Controller & Data Protection Officer (DPO)

• Data Controller: A.M.FLOWLESS COMMS
  
  
• Data Protection Officer (DPO): Adonis Michael
  
  
• Contact Email: addyshomemadepasta@gmail.com

2. Data We Collect

We may collect the following personal data:

• Name and surname
  
  
• Contact details (phone number, email, address)
  
  
• Order and delivery details
  
  
• Payment information (processed securely by third-party providers)
  
  
• Communication records (emails, messages, feedback)
  
  

We do not collect or store sensitive personal data unless required by law.

3. How We Use Your Data

Your personal data will be used for:

• Processing and delivering your orders
  
  
• Communicating about your purchases or inquiries
  
  
• Managing payments and invoices
  
  
• Improving our services and customer experience
  
  
• Fulfilling our legal obligations (e.g., tax regulations)
  
  

We will never sell or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process personal data only when:

• It is necessary to perform a contract with you (e.g., fulfilling an order)
  
  
• You have given consent (e.g., receiving newsletters)
  
  
• It is required to comply with legal obligations
  
  
• It is in our legitimate interests (e.g., improving services)
  
  

5. Data Sharing & Third Parties

We may share limited personal data with trusted third parties, such as:

• Delivery and courier companies
  
  
• Payment service providers
  
  
• IT and website hosting providers
  
  

All third parties are required to comply with GDPR.

6. Data Retention

• Order-related data: retained for up to 6 years to comply with accounting and tax obligations.
  
  
• Marketing communications: retained until you withdraw consent.
  
  
• After these periods, data will be securely deleted or anonymised.
  
  

7. Your GDPR Rights

You have the right to:

• Access your personal data
  
  
• Correct inaccurate or incomplete data
  
  
• Request deletion of your data (“right to be forgotten”)
  
  
• Restrict or object to processing of your data
  
  
• Request data portability to another provider
  
  
• Withdraw consent at any time (for marketing communications)
  
  

To exercise these rights, contact our DPO at addyshomemadepasta@gmail.com

8. Data Security

We implement appropriate technical and organizational measures to safeguard your data, including secure storage, encrypted communications, and restricted access.

9. Cookies & Online Tracking (if applicable)

If our website uses cookies, you will be informed through a cookie banner, with the option to accept or decline.

10. Governing Law & Complaints

This policy is governed by the laws of the Republic of Cyprus.
If you believe your data protection rights have been violated, you may lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).