Privacy policy
Privacy Policy
Last updated: April 2026
Miss PAPA ("we", "us", "our") is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your information when you visit misspapa.com.
1. Who We Are
Miss PAPA is a handmade goods brand based in Limassol, Cyprus. Contact us at info@misspapa.com.
2. Data We Collect
- Name, email, phone number
- Billing and shipping address
- Payment information (processed by Shopify Payments — we never store card details)
- Order history and site browsing behaviour (via cookies)
3. How We Use Your Data
- To process and fulfil orders
- To communicate order and shipping updates
- To send marketing emails (with your consent only — unsubscribe any time)
- To improve our website and comply with legal obligations
4. Legal Basis
- Contract: order fulfilment
- Legitimate interests: fraud prevention, analytics
- Consent: email marketing
- Legal obligation: tax and accounting
5. Data Sharing
We share data only with Shopify Inc. (platform), shipping couriers, and payment processors. We never sell your data to third parties.
6. Cookies
We use essential cookies (required for checkout) and optional analytics cookies. Manage preferences via your browser settings.
7. Retention
Order data is retained for 7 years per Cypriot tax law. Marketing data until you unsubscribe.
8. Your Rights (GDPR)
You have the right to access, correct, delete, restrict, or export your data, and to withdraw consent at any time. Email info@misspapa.com — we respond within 30 days. You may also contact the Cyprus Commissioner for Personal Data Protection.
9. Security
All data is transmitted via SSL/TLS encryption. Shopify is PCI-DSS Level 1 certified.
10. Questions
Email info@misspapa.com.