Exotic Lives
Privacy Policy
How we collect, use, and protect your personal data.
1. Introduction
This Privacy Policy explains how Exotic Lives, a Cyprus-based business, collects and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. Data Controller
The data controller responsible for your personal data is:
CMS LTD (trading as Exotic Lives)
Thetidos 4, Kapsalos
3086 Limassol, Cyprus
Company registration number: HE128755
VAT number: CY10128755U
Email: support@exoticlives.com
Phone: +357 96 333647
CMS LTD (trading as Exotic Lives)
Thetidos 4, Kapsalos
3086 Limassol, Cyprus
Company registration number: HE128755
VAT number: CY10128755U
Email: support@exoticlives.com
Phone: +357 96 333647
3. Personal Data We Collect
We may collect and process the following data:
- •Identity data (name)
- •Contact data (email, phone number, address)
- •Transaction data (orders, purchases)
- •Technical data (IP address, browser type, device information)
- •Usage data (how you interact with our website)
4. Legal Basis for Processing
We process your data based on:
- •Contract performance (processing your orders)
- •Legal obligations (tax and accounting requirements)
- •Legitimate interests (improving our services)
- •Consent (for marketing, where applicable)
5. How We Use Your Data
Your data is used to:
- •Process and deliver orders
- •Manage payments
- •Provide customer support
- •Improve website functionality
- •Prevent fraud and ensure security
6. Data Sharing
We share data only with the specific providers needed to run our business and fulfil your order:
- •Stripe (payment processing)
- •Supabase (database, account, and order storage)
- •BoxNow (parcel locker delivery, for orders shipped to Cyprus or Greece)
- •Google Analytics (website traffic analytics — only if you accept analytics cookies)
Each provider is only given the data it needs to perform its specific function, and each is contractually required to process it securely.
7. International Transfers
Stripe and Google Analytics are based in the United States; data passed to them for payment processing and website analytics may therefore be transferred outside the EU. Where this happens, we rely on the safeguards these providers offer for such transfers (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses). Supabase and BoxNow process data within the EU/Cyprus for the purposes described above.
8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations.
9. Your Rights
Under GDPR, you have the right to:
- •Access your data
- •Correct inaccurate data
- •Request deletion (right to be forgotten)
- •Restrict or object to processing
- •Data portability
- •Withdraw consent at any time
You also have the right to lodge a complaint with a supervisory authority in Cyprus.
10. Cookies
We use cookies and similar technologies to enhance your experience and analyze traffic. You can manage your cookie preferences at any time.
11. Data Security
We implement appropriate security measures to protect your personal data against unauthorized access, loss, or misuse.
12. Updates
We may update this Privacy Policy periodically. Changes will be posted on this page.
13. Contact
For any privacy-related questions, contact: support@exoticlives.com or +357 96 333647