Exotic Lives

Privacy Policy

How we collect, use, and protect your personal data.

1. Introduction

This Privacy Policy explains how Exotic Lives, a Cyprus-based business, collects and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Data Controller

The data controller responsible for your personal data is:

CMS LTD (trading as Exotic Lives)
Thetidos 4, Kapsalos
3086 Limassol, Cyprus

Company registration number: HE128755
VAT number: CY10128755U

Email: support@exoticlives.com
Phone: +357 96 333647

3. Personal Data We Collect

We may collect and process the following data:
  • Identity data (name)
  • Contact data (email, phone number, address)
  • Transaction data (orders, purchases)
  • Technical data (IP address, browser type, device information)
  • Usage data (how you interact with our website)

4. Legal Basis for Processing

We process your data based on:
  • Contract performance (processing your orders)
  • Legal obligations (tax and accounting requirements)
  • Legitimate interests (improving our services)
  • Consent (for marketing, where applicable)

5. How We Use Your Data

Your data is used to:
  • Process and deliver orders
  • Manage payments
  • Provide customer support
  • Improve website functionality
  • Prevent fraud and ensure security

6. Data Sharing

We share data only with the specific providers needed to run our business and fulfil your order:
  • Stripe (payment processing)
  • Supabase (database, account, and order storage)
  • BoxNow (parcel locker delivery, for orders shipped to Cyprus or Greece)
  • Google Analytics (website traffic analytics — only if you accept analytics cookies)

Each provider is only given the data it needs to perform its specific function, and each is contractually required to process it securely.

7. International Transfers

Stripe and Google Analytics are based in the United States; data passed to them for payment processing and website analytics may therefore be transferred outside the EU. Where this happens, we rely on the safeguards these providers offer for such transfers (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses). Supabase and BoxNow process data within the EU/Cyprus for the purposes described above.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations.

9. Your Rights

Under GDPR, you have the right to:
  • Access your data
  • Correct inaccurate data
  • Request deletion (right to be forgotten)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

You also have the right to lodge a complaint with a supervisory authority in Cyprus.

10. Cookies

We use cookies and similar technologies to enhance your experience and analyze traffic. You can manage your cookie preferences at any time.

11. Data Security

We implement appropriate security measures to protect your personal data against unauthorized access, loss, or misuse.

12. Updates

We may update this Privacy Policy periodically. Changes will be posted on this page.

13. Contact

For any privacy-related questions, contact: support@exoticlives.com or +357 96 333647

We use cookies to analyze traffic and improve your experience. See our Privacy Policy for details.