Privacy policy

Privacy Policy

Last updated: August 15, 2026

Secret Wings CY operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").

Secret Wings CY is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described below.

Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies you or can reasonably be linked to you or another person.

Personal information does not include information that has been collected anonymously or de-identified so that it cannot reasonably identify or be linked to you.

Depending on how you interact with the Services, where you live and as permitted or required by applicable law, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, shipping address, phone number and email address.

  • Financial and payment information, including payment details, transaction information, payment method and payment confirmation. Payment card information may be processed directly by our payment providers and is not necessarily stored by Secret Wings CY.

  • Account information, including your username, password, preferences and account settings where applicable.

  • Transaction information, including products you view, place in your cart, add to a wishlist, purchase, return, exchange or cancel, as well as your previous transactions.

  • Communications with us, including information you provide when contacting us regarding an order, product or customer-support request.

  • Device information, including information about your device, browser, network connection, IP address and other technical identifiers.

  • Usage information, including information about how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you, including when you place an order, create an account, use the Services, contact us or otherwise provide information to us.

  • Automatically through the Services, including through your device, browser, cookies and similar technologies.

  • From our service providers, including companies that provide payment processing, website hosting, analytics, fulfilment, shipping and other services on our behalf.

  • From business partners or other third parties, where permitted by applicable law.

How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

Providing and Managing the Services

We use personal information to provide the Services, process and fulfil orders, process payments, arrange delivery, manage returns and refunds, maintain customer accounts, provide customer support and communicate with you about your purchases.

We may also use information to remember preferences, improve the shopping experience and provide relevant product recommendations.

Marketing and Advertising

Where permitted by law, we may use personal information for marketing and promotional purposes, such as sending promotional communications or displaying relevant advertising.

Where consent is required by applicable law, marketing or advertising activities that rely on consent will only take place after the necessary consent has been obtained.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Security and Fraud Prevention

We may use personal information to:

  • authenticate accounts,

  • maintain a secure shopping and payment environment,

  • detect and investigate fraudulent, illegal or malicious activity,

  • protect the Services and our customers,

  • and prevent misuse of our website or systems.

Communicating with You

We use your personal information to respond to questions, provide customer support, communicate about orders or deliveries and maintain our business relationship with you.

Legal and Regulatory Purposes

We may process personal information where necessary to:

  • comply with applicable laws,

  • meet tax and accounting obligations,

  • respond to lawful requests from authorities,

  • establish, exercise or defend legal claims,

  • resolve disputes,

  • and enforce our applicable terms and policies.

Legal Bases for Processing Personal Information

Where the General Data Protection Regulation (GDPR) or other applicable European data-protection legislation applies, we process your personal information only where we have a valid legal basis.

Depending on the purpose of the processing, we may rely on one or more of the following legal bases:

Performance of a Contract

We process personal information where necessary to perform our contract with you or take steps requested by you before entering into a contract.

This includes processing necessary to:

  • accept and process an order,

  • process payment,

  • arrange delivery,

  • communicate about your order,

  • manage cancellations, returns or refunds,

  • and provide the products or services you request.

Compliance with Legal Obligations

We may process and retain personal information where necessary to comply with legal obligations, including:

  • tax requirements,

  • accounting and record-keeping requirements,

  • consumer-protection obligations,

  • fraud-prevention requirements,

  • and other applicable regulatory or legal obligations.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

These interests may include:

  • operating and improving our online store,

  • providing customer support,

  • securing our website and systems,

  • preventing fraud and misuse,

  • analysing the performance of our business,

  • and managing our commercial operations.

Consent

Where required by law, we rely on your consent for certain processing activities.

This may include certain:

  • marketing communications,

  • advertising technologies,

  • analytics technologies,

  • cookies,

  • and similar tracking technologies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

How We Disclose Personal Information

In certain circumstances, we may disclose personal information to third parties for legitimate business purposes and subject to applicable data-protection law.

This may include:

  • Shopify, which provides the technology used to operate our online store.

  • Payment processors and financial-service providers.

  • Courier and shipping companies where necessary to deliver your order.

  • IT, cloud-storage, analytics and technical-service providers.

  • Customer-service or fulfilment providers where applicable.

  • Marketing or advertising partners, where permitted by law and subject to applicable consent requirements.

  • Professional advisers or service providers where reasonably necessary.

  • Government authorities, regulators, law-enforcement bodies or courts where disclosure is legally required.

We may also disclose information when you specifically request or authorise us to do so, for example where information must be provided to a courier to complete delivery.

Personal information may also be disclosed in connection with a legitimate business transaction or where necessary to protect our legal rights or the rights and safety of others.

Relationship with Shopify

Our online store is hosted and supported by Shopify.

Shopify collects and processes certain personal information about your access to and use of the Services in order to provide and improve its services.

Information submitted through our store may be transmitted to and processed by Shopify and relevant service providers, including providers located outside the country in which you reside, where necessary to provide the Services.

Certain Shopify features may use information relating to interactions with our store and other Shopify merchants in accordance with Shopify's own privacy practices.

For more information about how Shopify processes personal information, you may review the Shopify Consumer Privacy Policy:

https://www.shopify.com/legal/privacy/app-users

Shopify also provides a Privacy Portal through which certain privacy rights relating to data processed by Shopify may be exercised:

https://privacy.shopify.com/en

Third-Party Websites and Links

The Services may contain links to websites, applications or online platforms operated by third parties.

If you follow a link to a website that is not controlled by Secret Wings CY, you should review that third party's privacy and security policies.

We are not responsible for the privacy practices, security, accuracy or content of third-party websites or platforms.

The inclusion of a link does not by itself imply endorsement or a formal relationship with the operator of that platform.

Children's Data

The Services are not intended specifically for children.

We do not knowingly collect personal information from children below the age at which they can lawfully provide their own consent under applicable data-protection law.

If you are a parent or legal guardian and believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and, where appropriate, delete the information.

Security of Your Information

We take reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

We therefore recommend that you do not send highly sensitive or confidential information through unsecured communication channels.

Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required by applicable law.

The retention period may depend on factors including whether the information is necessary to:

  • fulfil or manage an order,

  • maintain an account,

  • provide customer service,

  • comply with tax, accounting or other legal obligations,

  • resolve disputes,

  • prevent fraud,

  • or establish, exercise or defend legal claims.

When personal information is no longer required, we may delete, anonymise or otherwise securely dispose of it in accordance with applicable law.

Your Rights and Choices

Depending on where you live and subject to applicable legal limitations and exceptions, you may have rights relating to your personal information.

These may include:

Right of Access

You may have the right to request confirmation as to whether we process your personal information and to obtain access to personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may have the right to request deletion of certain personal information, subject to legal exceptions and our obligations to retain certain records.

Right to Data Portability

In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format and to request its transfer where technically feasible.

Right to Restriction of Processing

You may have the right to request that processing of your personal information be restricted in certain circumstances.

Right to Object

Where processing is based on legitimate interests, you may have the right to object to such processing in certain circumstances.

You also have the right to object to the processing of personal information for direct-marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

Marketing Preferences

You may unsubscribe from promotional emails at any time by using the unsubscribe option included in our marketing communications.

Even if you opt out of promotional communications, we may still send non-promotional messages necessary for your orders, transactions or account.

Exercising Your Rights

You may exercise applicable privacy rights by contacting us using the contact details below.

We may need to verify your identity before fulfilling certain requests.

Where permitted by law, an authorised representative may submit a request on your behalf. We may require appropriate evidence of their authority and may also need to verify your identity directly.

We will respond to valid requests within the time period required by applicable law.

You will not be discriminated against for exercising your applicable data-protection rights.

Cookies and Similar Technologies

Our website may use cookies and similar technologies that are necessary for the operation of the online store.

With your consent where required by law, we may also use additional cookies or similar technologies for analytics, personalisation, advertising or marketing purposes.

Where applicable, you may manage your preferences through the cookie or privacy controls provided on our website.

Withdrawal or refusal of consent for non-essential cookies will not prevent the use of cookies that are strictly necessary for the operation and security of the Services.

Complaints

If you have a complaint about how we process your personal information, please contact us first using the contact details provided below so that we can investigate your concern.

If you are located in the European Economic Area, you also have the right to lodge a complaint with the competent data-protection supervisory authority.

For customers in Cyprus, the relevant supervisory authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

International Transfers

Personal information may be transferred, stored or processed outside Cyprus or outside the European Economic Area where our service providers operate internationally.

Where personal information is transferred outside the European Economic Area to a country that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used where required by law.

Such safeguards may include the European Commission's Standard Contractual Clauses or another legally recognised transfer mechanism.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our business practices,

  • the Services,

  • applicable technologies,

  • legal or regulatory requirements,

  • or other operational reasons.

When we make changes, we will publish the updated version on this website and update the Last updated date.

Where required by law, we will provide additional notice of material changes.

Contact

For questions about this Privacy Policy, our privacy practices, or to exercise your applicable data-protection rights, please contact:

Secret Wings CY
Trading name of Nicolas Nicolaou
Address: Timoleontos, 2039 Nicosia, Cyprus
Email: secretwingscy@gmail.com

For the purposes of applicable data-protection laws, Secret Wings CY / Nicolas Nicolaou is the data controller of personal information processed through this online store.