Privacy policy

Privacy Policy

Last updated: September 2026

Miss PAPA Handmade Creations ("we", "us", "our") is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your information when you visit misspapa.com.

1. Who we are

Miss PAPA is the brand of Miss PAPA Handmade Creations, a handmade goods business based in Limassol, Cyprus. Contact: info@misspapa.com.

2. Data we collect

  • Name, email, phone number
  • Billing and shipping address
  • Payment information, processed by our payment providers — we never see or store your full card details
  • Order history and site browsing behaviour (via cookies)

3. How we use your data

To process and fulfil orders; to send order and shipping updates; to send marketing emails (with your consent only — unsubscribe any time); to improve our website and comply with legal obligations.

4. Legal basis

Contract: order fulfilment. Legitimate interests: fraud prevention, analytics. Consent: email marketing. Legal obligation: tax and accounting.

5. Who we share data with

We share data only with the services needed to run the shop: Shopify (our platform), shipping couriers, payment providers, and the tools embedded on our site (an Instagram feed and a wholesale ordering tool). We never sell your data.

6. Cookies

We use essential cookies (required for checkout and the cart) and, where you allow them, analytics and embedded-content cookies. You can manage cookies in your browser settings.

7. Retention

Order data is retained for 7 years under Cypriot tax law. Marketing data is kept until you unsubscribe.

8. Your rights (GDPR)

You have the right to access, correct, delete, restrict, or export your data, and to withdraw consent at any time. You can also opt out of data sharing for targeted advertising (see "Your Privacy Choices" in the footer). Email info@misspapa.com — we respond within 30 days. You may also contact the Cyprus Commissioner for Personal Data Protection.

9. Security

Data is transmitted over encrypted connections (SSL/TLS), and card payments are handled by PCI-DSS-certified payment providers.

10. Questions

Email info@misspapa.com.