Privacy Policy

1.Who We Are

Email: info@sushiexpresscy.com
Telephone: +357 26270506

I. P. Sushi Express Pafos Limited (“we”, “our”, “us”) is the controller of the personal data described in this policy. This means we decide how and why your data is used, and we are responsible for protecting it under the EU General Data Protection Regulation (GDPR) and the data protection laws of the Republic of Cyprus.

2.What This Policy Covers

This policy explains how we collect and use personal data when you:

• visit sushiexpresscy.com
• place an order online for collection or delivery
• call, email or message us
• contact us with a question, complaint or refund request

3.The Data We Collect

Information you give us

• your name, phone number and email address
• your delivery address and any delivery instructions
• the items you order, order notes and your order history
• allergy or dietary information, if you choose to tell us
• messages, complaints and photos you send us

Payment information

Card payments are processed by our payment provider over an encrypted connection. We do not receive or store your full card details. We may receive confirmation that a payment was made, along with limited details such as the card type and the last four digits, so we can match payments and handle refunds.

Information collected automatically

When you use our website we may collect technical information such as your IP address, browser and device type, the pages you visit and the time of your visit. This is collected through cookies and similar technologies and through our server logs.

4.How and Why We Use Your Data

We only use your personal data where the law allows us to. We use it to:

• take, prepare and deliver your order, or have it ready for collection (to perform our contract with you)
• take payment, issue refunds and prevent fraud (to perform our contract with you, and in our legitimate interest in protecting our business)
• contact you about your order, answer your questions and handle complaints (to perform our contract with you, and in our legitimate interest in providing good service)
• keep accounting, tax and other records we are required to keep (to comply with our legal obligations)
• keep our website secure and working properly, and understand how it is used (in our legitimate interest in running a reliable website)
• send you offers and news, only if you have agreed to receive them (with your consent, which you can withdraw at any time)

Allergy and dietary information

If you tell us about an allergy or dietary requirement, this may be health information. We use it only to prepare your order safely, on the basis of your explicit consent, which you give by providing it to us.

5.Who We Share Your Data With

We do not sell your personal data. We share it only where necessary, with:

• our payment providers, to process payments and refunds
• delivery partners, where your order is delivered by a third party
• providers of our website, online ordering system, hosting, email and IT services
• our professional advisers, such as accountants and lawyers
• public authorities, courts or regulators, where we are required to by law

Everyone we share data with must keep it secure and use it only for the purpose we gave it to them for.

6.International Transfers

Some of our service providers may process data outside the European Economic Area. When this happens, we make sure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision for the country concerned.

7.How Long We Keep Your Data

• Order, payment and invoice records: for as long as Cyprus tax and accounting laws require us to keep them
• Complaints and customer service messages: for as long as needed to resolve your request and deal with any follow-up
• Marketing preferences: until you unsubscribe or withdraw your consent
• Technical and website data: for short periods, unless it is needed to investigate a security issue

When we no longer need your data, we delete it or make it anonymous.

8.Cookies

Our website uses cookies, which are small files stored on your device. Some cookies are essential: they keep your basket and checkout working and help keep the site secure. Others help us understand how the site is used.

Where the law requires it, we ask for your consent before using non-essential cookies. You can also block or delete cookies in your browser settings, although parts of the site, such as the basket, may then stop working.

9.Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data deleted, where there is no reason for us to keep it
• restrict how we use your data
• object to us using your data on the basis of our legitimate interests, and to direct marketing at any time
• receive your data in a portable format
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email us at info@sushiexpresscy.com. We may ask you to confirm your identity, and we will reply within one month.

10.Complaints to the Regulator

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the data protection authority in Cyprus:

11.Keeping Your Data Secure

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections on our website and secure payment processing. Access to customer data is limited to people who need it to do their job.

12.Children

Our online ordering is intended for adults. If you are under 18, please ask a parent or guardian to place the order for you.

13.Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated.

14.Contact

For any question about this policy or your personal data:

Email: info@sushiexpresscy.com
Phone: +357 26270506