Effective Date: 08-04-2025

At PanicSweets, we are committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and applicable Cyprus and EU data protection laws. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or make a purchase from us.

Data Controller: Panic Sweets, Griva Digeni 19, Kyperounta, 4876, Cyprus
Contact Email: support@panicsweets.com
Phone: +357 97 725563

1. Information We Collect

When you use our website, we may collect the following types of information:

a) Personal Information

Name
Email address
Phone number
Shipping and billing address
Payment details (processed securely via payment gateways)

b) Non-Personal Information

Browser type and version
IP address
Device type
Pages visited and time spent on the site

2. How We Use Your Information

We use the information we collect to:

Process and fulfill your orders
Communicate with you about your orders
Improve our website and services
Send marketing communications (only with your consent)
Comply with legal obligations

Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Contract Performance: To process your orders and deliver products
Consent: For marketing communications and non-essential cookies
Legitimate Interest: To improve our services, prevent fraud, and ensure website security
Legal Obligation: To comply with tax, accounting, and other legal requirements

3. Sharing Your Information

We do not sell your personal information. We may share your information with trusted third-party service providers who assist us in operating our business:

Mollie B.V. (payment processing) – Netherlands
Brevo (Sendinblue) (email marketing) – France
Shipping carriers (order delivery)
Google Analytics (website analytics)

All third-party processors are GDPR compliant and process data only as necessary to provide their services to us. Data transfers outside the EEA, if any, are protected by Standard Contractual Clauses or adequacy decisions.

4. Data Security

We take your privacy seriously and implement appropriate security measures to protect your personal information, including SSL encryption, secure payment gateways, and restricted access to personal data.

However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

4b. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

Order data: 5 years (for tax and accounting obligations)
Account data: Until you request deletion
Marketing data: Until you unsubscribe
Website analytics: 26 months

After the retention period, data is securely deleted or anonymised.

5. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights regarding your personal data:

Right of Access – Request a copy of the personal data we hold about you
Right to Rectification – Request correction of inaccurate or incomplete data
Right to Erasure – Request deletion of your personal data (“right to be forgotten”)
Right to Restriction – Request restricted processing of your data
Right to Data Portability – Receive your data in a structured, machine-readable format
Right to Object – Object to processing based on legitimate interest or direct marketing
Right to Withdraw Consent – Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at support@panicsweets.com. We will respond within 30 days.

Right to Lodge a Complaint: You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy) or with your local supervisory authority.

6. Cookies and Tracking Technologies

We use cookies to enhance your browsing experience and analyze website traffic. You can choose to disable cookies through your browser settings.

For more information, please read our Cookie Policy.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

8. Changes to This Policy

We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. The updated version will be posted on this page with the new effective date.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, feel free to reach out:

📧 Email: support@panicsweets.com
📞 Phone: [357 97 725563]
📍 Address: [Griva Digeni 19, Kyperounda]