Privacy Policy
Privacy Policy
Last updated: 2026
1. Data Controller
WHOLY LTD
Apostolou Pavlou 16, 8046 Paphos
Cyprus
Email: office@w-holy.com
2. Data We Collect
We collect the following personal data when you use our online store:
- Name and contact information (email, phone, address)
- Payment information (processed securely via Shopify Payments)
- Order and purchase history
- IP address and browser information
- Cookies and tracking data
3. How We Use Your Data
We use your personal data to:
- Process and fulfill your orders
- Communicate with you about your orders
- Send marketing communications (with your consent)
- Improve our website and services
- Comply with legal obligations
4. Legal Basis (GDPR)
We process your data based on:
- Contract performance (to fulfill your orders)
- Legal obligations (tax and accounting requirements)
- Legitimate interests (fraud prevention, service improvement)
- Your consent (for marketing communications)
5. Data Sharing
We may share your data with:
- Shopify (our e-commerce platform provider)
- Payment processors (Shopify Payments)
- Shipping carriers
- Email service providers
We do not sell your personal data to third parties.
6. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Object to data processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at office@w-holy.com.
7. Data Retention
We retain your data for as long as necessary to fulfill orders and comply with legal obligations (typically 7 years for tax purposes in Cyprus).
8. Cookies
We use cookies to improve your browsing experience. You can manage cookie preferences in your browser settings.
9. Security
We implement appropriate technical and organizational measures to protect your personal data.
10. Contact
For privacy-related questions, contact us at:
Email: office@w-holy.com