Privacy Policy

Who we are

Georgia's Magic Cream ("we", "us", "our") operates the online shop at georgiascream.com. We are the controller of the personal data we collect through this website.

• Trade name: Georgia's Magic Cream
• Operated by: Marios Mintzis
• Address: Andrea Paraskeva 8, Chloraka, 8220 Paphos, Cyprus
• Email: info@georgiascream.com
• Country: Cyprus

Information we collect

We collect only what we need to take and deliver your order:

• Order details — your name, email address, delivery address and phone number, and the items you order.
• Payment confirmation — we receive confirmation and limited details of your payment from Stripe. We never receive or store your full card number.
• Messages — anything you send us through the contact form or by email.
• Technical data — your IP address and basic device and browser information, collected through cookies and our analytics.
• Marketing attribution — small tags in the link you arrived from (UTM parameters), so we can see which campaign or advert brought you to us.

How we use your information

We use your personal data for the following purposes, each with a legal basis under the GDPR:

• To process, fulfil and deliver your order and to contact you about it — to perform our contract with you.
• To handle returns, refunds, exchanges and customer support — to perform our contract and to meet our legal obligations.
• To keep accounting and tax records — to meet our legal obligations.
• To secure the website and prevent fraud or abuse — our legitimate interest in protecting the shop.
• To understand and improve how the site is used, through aggregated analytics — our legitimate interest in improving our service.
• To send you marketing messages — only where you have given consent, which you can withdraw at any time.

Payments

Payments are handled by Stripe. Your card details are entered directly into Stripe's secure systems and are never stored on our servers. Stripe processes payment data under its own privacy policy.

Cookies and analytics

We keep cookies to a minimum:

• Essential cookies that make the site work — your shopping cart, security, and your language choice.
• A first-party attribution cookie (UTM) kept for up to 90 days, so we can tell which campaign led to a sale.
• Privacy-friendly, aggregated analytics (Vercel Analytics) that measure site usage without identifying you.

You can block or delete cookies through your browser settings. Please note that essential cookies are required to complete checkout.

Who we share your data with

We share your data only with the service providers that help us run the shop, and only as far as needed:

• Stripe — to take and verify payment.
• Vercel and Supabase — website hosting and our database. Your order data is stored in the European Union (Frankfurt region).
• Resend — to send order confirmations and to reply to your messages.
• Shipping carriers (for example Cyprus Post and DHL) — your name, address and phone number, so your parcel can be delivered.
• Public authorities — only where we are required to by law.

We never sell your personal data.

Storing data outside the EU

Your order data is stored within the European Union. Some of our providers (for example Stripe and Vercel) may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep your data

We keep order and transaction records for as long as we need them to provide the service and to meet our legal, tax and accounting obligations — generally several years under Cyprus law. Contact messages are kept for a reasonable period and then deleted.

Your rights

Under the GDPR you have the right to access your data, to correct or delete it, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email us at info@georgiascream.com.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

Children

Our products and this website are intended for adults. We do not knowingly collect personal data from children under 16.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.

Contact us

Questions about this policy or your personal data? Email us at info@georgiascream.com.