Privacy Policy
This Privacy Policy explains how Geofra LTD (“Geofra”, “we”, “us”) collects, uses, stores and protects personal data when you visit geofra.com or contact us by phone, email, or in person. It is issued in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and the Cyprus Law 125(I)/2018.
1. Data Controller
The data controller is:
- Company: Geofra LTD
- Registered address: 18 Embas Avenue, Emba, 8250 Paphos, Cyprus
- VAT / Registration number: HE 32223 (VAT CY10032223T)
- Contact email: info@geofra.com
2. Personal Data We Collect
We collect only the data needed to respond to your enquiries, fulfil orders, deliver materials, and comply with our legal obligations.
| Category | Examples | Source |
|---|---|---|
| Contact data | name, email, phone | contact form, phone, email, in-store |
| Order data | products, quantities, delivery address, invoice details | provided by you when ordering |
| Financial data | VAT number, bank transfer reference | provided for invoicing |
| Technical data | IP address, browser, device, pages visited | collected via Google Analytics, only with your consent |
| Language preference | EN / EL / RU choice | stored in browser localStorage |
3. Purposes & Legal Bases (Art. 6 GDPR)
| Purpose | Legal Basis |
|---|---|
| Respond to enquiries | Art. 6(1)(b) — pre-contractual steps |
| Process orders, prepare quotes, deliver materials | Art. 6(1)(b) — contract performance |
| Issue invoices, keep accounting records | Art. 6(1)(c) — legal obligation (Cyprus tax law) |
| Site traffic measurement (Google Analytics) | Art. 6(1)(a) — consent (via cookie banner) |
| Defending legal claims | Art. 6(1)(f) — legitimate interest |
4. Retention Periods
- Contact enquiries: up to 12 months after our last interaction, then deleted.
- Invoices and accounting records: 6 years (Cyprus Income Tax Law).
- Order records: 6 years for warranty and tax purposes.
- Analytics data: 14 months in Google Analytics, then anonymised.
5. Recipients of Your Data
We do not sell your data. We share it only with:
- Our hosting and email providers (data processors under written agreement).
- Google LLC for analytics (only if you consent — see Cookie Policy).
- Logistics partners for delivery, limited to what they need to deliver.
- Cyprus tax authorities and auditors, where required by law.
6. International Transfers
Google Analytics may transfer data to the United States. Such transfers rely on the EU–US Data Privacy Framework and Standard Contractual Clauses approved by the European Commission.
7. Your Rights (Art. 15–22 GDPR)
You have the right to:
- Request access to your personal data.
- Request correction of inaccurate data.
- Request erasure (“right to be forgotten”), subject to legal retention duties.
- Request restriction of processing.
- Object to processing based on legitimate interest.
- Request portability of data you provided to us.
- Withdraw consent at any time without affecting prior lawful processing.
To exercise any right, email info@geofra.com. We respond within 30 days.
8. Security
We use reasonable technical and organisational measures (TLS encryption, access controls, secure invoicing software) to protect your data. No system is perfectly secure; we ask you not to send sensitive data (e.g. ID copies) through unencrypted email unless requested.
9. Children
The website is not intended for children under 16. We do not knowingly collect data from minors. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to This Policy
We may update this policy when our practices change or when the law requires. The “Last updated” date at the top reflects the most recent revision. Material changes will be highlighted on the site.