Privacy Policy & Cookies

1. Introduction

Panayiotis G. Loizou Pharmacy Ltd, operating the website epharmadora.com (“epharmadora.com”, “ePharmadora”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy & Cookies Policy explains how we collect, use, disclose, store and protect personal data when you visit epharmadora.com, create an account, place an order, contact us, subscribe to communications, use website features or otherwise interact with our services.

We process personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and applicable Cyprus data protection and electronic communications legislation.

2. Data Controller

The data controller responsible for personal data processed through epharmadora.com is:

Panayiotis G. Loizou Pharmacy Ltd / epharmadora.com

Telephone: +357 23258789
Email: [email protected]
Website: epharmadora.com

For questions about this Privacy & Cookies Policy or the processing of your personal data, please contact us using the details above.

3. What Personal Data We Collect

Depending on how you interact with epharmadora.com, we may process the following categories of personal data:

Identity and Contact Information

This may include:

First and last name.
Billing address.
Delivery address.
Postal code.
Country.
Telephone or mobile number.
Email address.

Customer Account Information

If you create an account, we may process:

Account login information.
Account preferences.
Saved addresses.
Order history.
Loyalty points or related account benefits, where applicable.

Order and Transaction Information

This may include:

Products purchased.
Order number.
Order value.
Delivery method.
Payment status.
Refund information.
Returns and cancellations.
Communications relating to an order.

Payment Information

Payments may be processed through third-party payment service providers.

Depending on the payment method used, we may receive limited information such as payment confirmation, transaction reference, payment status or limited card-related information.

Where payment is processed directly by an external payment provider, epharmadora.com may not receive or store your complete payment card details.

Delivery Information

We may process information necessary to fulfil your delivery, including:

Recipient name.
Delivery address.
Telephone number.
Email address where required.
Selected courier, pickup point or locker.
Tracking information.
Delivery status.

Communications

If you contact us by telephone, email, website form or another communication channel, we may process and retain information relating to your enquiry and our response.

Technical and Usage Data

When you visit or use epharmadora.com, we may process technical and usage information such as:

IP address.
Browser type and version.
Device type.
Operating system.
Date and time of access.
Pages viewed.
Referring website or source.
Website interactions.
Online identifiers.
Cookie identifiers and similar technologies.

The extent of this processing depends partly on your cookie preferences.

4. Health-Related Information

Because epharmadora.com operates in the pharmacy, health and wellbeing sector, customers may occasionally include health-related information in communications with us.

Health information is considered a special category of personal data under the GDPR.

Please avoid providing medical or health information that is not necessary for your enquiry.

Where health-related information is voluntarily provided, we will process it only where an appropriate legal basis and, where required, an applicable GDPR condition for special-category data exists.

We do not require customers to provide health information merely to purchase ordinary retail products unless such information is genuinely required for a particular service or legal obligation.

5. How We Collect Personal Data

We may obtain personal data:

Directly from you.
When you create an account.
When you place or manage an order.
When you contact us.
When you subscribe to communications.
Automatically through website use and permitted cookies.
From payment service providers.
From courier, postal or delivery providers.
From technical, hosting, security and other service providers where necessary.

6. Purposes for Which We Use Personal Data

We may process personal data for the following purposes:

Orders and Contract Fulfilment

To:

Receive and process orders.
Confirm or process payments.
Prepare products for dispatch.
Arrange delivery.
Provide order and delivery updates.
Process cancellations, returns and refunds.
Respond to enquiries concerning an order.

Customer Service

To respond to questions, complaints, requests and other customer communications.

Account Administration

To create, maintain and administer customer accounts and related account functionality.

Legal and Regulatory Compliance

To comply with obligations relating to areas such as:

Accounting.
Taxation.
Consumer protection.
Fraud prevention.
Product safety.
Regulatory requirements.
Legal claims.
Requests from competent authorities.

Security and Fraud Prevention

To protect our website, customers and systems against fraud, misuse, unauthorised access and other security threats.

Website Operation and Improvement

To operate, maintain, troubleshoot and improve epharmadora.com.

Where website analytics require cookie consent, those technologies will only be activated in accordance with your cookie choices.

Marketing and Advertising

Where permitted by applicable law and, where required, with your consent, we may process information for:

Marketing communications.
Advertising measurement.
Campaign performance.
Personalised advertising.
Remarketing or similar advertising functionality.

You may unsubscribe from direct marketing communications at any time.

7. Legal Bases for Processing

Depending on the purpose, we may rely on:

Performance of a Contract

Where processing is necessary to process and fulfil your order or take steps at your request before entering into a contract.

Legal Obligation

Where processing is required to comply with applicable law.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

Examples may include:

Website and network security.
Fraud prevention.
Customer service.
Managing legal claims.
Improving business operations.

Consent

We rely on consent where required by law, including for certain marketing communications and non-essential cookies or similar technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Sharing Personal Data

We do not sell your personal data.

Where necessary, we may share personal data with:

Payment service providers.
Banks or financial institutions.
Courier and postal services.
Hosting and IT providers.
Website and software providers.
Email or communications providers.
Security and fraud-prevention providers.
Analytics and advertising technology providers where permitted.
Professional advisers, including accountants and legal advisers.
Regulatory, tax, judicial, law-enforcement or other competent authorities where required by law.

We only share data reasonably necessary for the relevant purpose.

9. Couriers and Delivery Providers

To fulfil an order, we may provide the relevant courier, postal operator or delivery partner with information such as:

Recipient name.
Delivery address.
Telephone number.
Email address where required.
Pickup point or locker information.
Shipment and tracking information.

For international orders, information may also be provided to customs authorities, postal operators and local delivery partners where required for delivery or customs clearance.

10. Google Services

epharmadora.com may use services and technologies provided by Google.

Depending on website functionality, your cookie choices and the services active at a particular time, these may include:

Google Analytics

Google Analytics may be used to understand how visitors interact with our website, measure website traffic and generate usage statistics.

Analytics technologies that are not strictly necessary will only be activated where the required consent has been obtained.

Google Ads

Google Ads technologies may be used for advertising, conversion measurement, campaign performance and, where permitted and consented to, advertising personalisation or remarketing.

Google AdSense

Where Google AdSense functionality is used, cookies or similar technologies may be used for advertising delivery, measurement, fraud prevention and other advertising-related purposes.

DoubleClick / Google Marketing Technologies

DoubleClick and other Google advertising technologies may use identifiers or cookies for purposes including advertising delivery, campaign measurement, frequency management and personalisation where permitted.

YouTube

Some pages may contain embedded YouTube videos or other YouTube functionality.

YouTube or Google may receive information when embedded content is loaded or interacted with, and cookies or similar technologies may be used depending on your settings and consent.

Where consent is required, non-essential YouTube technologies should not be activated before consent.

Google reCAPTCHA

We may use Google reCAPTCHA to help protect forms or website functions against automated abuse, spam and fraudulent activity.

Where reCAPTCHA is technically required for security or for a service requested by the user, relevant processing may be treated differently from optional analytics or advertising technologies, subject to applicable law.

Google Sign-In and Functional Technologies

Where Google account or authentication functionality is available, Google-related functional cookies may be used when required to provide a feature specifically requested by the user.

Google may process information from websites using Google services, including IP addresses, website URLs, browser information and cookies or identifiers depending on the services used. Google Policies

11. International Transfers

Some service providers, including technology providers, may process personal data outside Cyprus or outside the European Economic Area (“EEA”).

Where a transfer outside the EEA requires safeguards under applicable data protection law, an appropriate transfer mechanism will be used, which may include:

A European Commission adequacy decision.
European Commission Standard Contractual Clauses.
Another legally recognised safeguard or applicable derogation.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, tax, accounting, consumer-protection and other regulatory obligations.

Different categories of personal data may have different retention periods.

Order, transaction and accounting records may be retained for the period required by applicable tax, accounting and legal requirements.

Customer service and complaint records may be retained for a reasonable period to manage disputes, complaints and possible legal claims.

Where information is processed solely on the basis of consent, we will stop using it for that purpose after consent is withdrawn unless another lawful basis applies.

13. Security

We use reasonable technical and organisational measures designed to protect personal data against:

Unauthorised access.
Accidental loss.
Misuse.
Alteration.
Unauthorised disclosure.
Accidental or unlawful destruction.

No online system or electronic transmission can be guaranteed to be completely secure.

Customers are responsible for keeping their account credentials confidential.

14. Your GDPR Rights

Subject to applicable law, you may have the right to:

Request access to your personal data.
Request correction of inaccurate or incomplete data.
Request deletion of your data in applicable circumstances.
Request restriction of processing.
Object to processing in applicable circumstances.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
Object at any time to processing for direct marketing.
Lodge a complaint with a competent data protection authority.

These rights are subject to applicable legal conditions and exceptions.

We may request information necessary to confirm your identity before acting on a request.

15. Marketing Communications

Where required, marketing communications will only be sent with the appropriate consent.

You may unsubscribe at any time by:

Using the unsubscribe link included in the communication, where available; or
Contacting us at [email protected].

Withdrawal from marketing does not affect transactional communications necessary for orders, refunds, security or customer service.

16. Complaints

If you have concerns regarding our processing of your personal data, please contact us.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For organisations established in Cyprus, the relevant supervisory authority is the:

Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

17. Children

epharmadora.com is intended for persons able to make purchases in accordance with applicable law.

We do not knowingly seek to collect children's personal data for advertising or marketing without any consent or authorisation required by law.

If you believe personal data relating to a child has been provided to us improperly, please contact us.

COOKIES POLICY

18. What Are Cookies?

Cookies are small files or similar technologies stored on or accessed from a user's device when visiting a website.

They may be used to:

Enable essential website functions.
Maintain website sessions.
Remember user choices.
Protect against fraud or abuse.
Analyse website usage.
Provide embedded content.
Measure advertising.
Personalise content or advertising where permitted.

19. Categories of Cookies Used

Depending on the functionality enabled on epharmadora.com, we may use the following categories.

Strictly Necessary Cookies

These cookies are required for core website functions.

Examples may include cookies necessary for:

Shopping cart operation.
Checkout.
Login and account security.
Session management.
Fraud prevention.
Cookie consent preferences.
Essential website security.

These cookies may be active without consent where they are technically necessary to provide the website functionality or service requested by the user.

Functional Cookies

Functional cookies support optional website features or remember choices.

They may include certain authentication, embedded-service or preference functionality.

Where consent is required by applicable law, these cookies will not be activated before consent.

Analytics Cookies

Analytics cookies help us understand how visitors use epharmadora.com.

They may be used to measure:

Visitor numbers.
Page views.
Website interactions.
Traffic sources.
Website performance.
Technical errors.

Google Analytics may be used for these purposes.

Analytics cookies are not treated as strictly necessary merely because they help improve the website. Where consent is required, they will only be activated after consent. Google Policies

Marketing and Advertising Cookies

Marketing cookies may be used for:

Advertising measurement.
Conversion tracking.
Campaign effectiveness.
Remarketing.
Advertising personalisation where permitted.
Managing advertising frequency.

These may include technologies associated with:

Google Ads.
Google AdSense.
DoubleClick / Google Marketing.
YouTube advertising functionality.

These technologies will only be activated where legally permitted and, where required, after consent.

20. Examples of Cookies and Technologies

The specific cookies present on epharmadora.com may change over time depending on website functionality and third-party services.

Examples identified in connection with services used by or accessible through the website may include cookies or technologies associated with:

Google Analytics.
Google Ads.
Google AdSense.
Google Tag Manager.
Google reCAPTCHA.
Google account or sign-in functionality.
DoubleClick / Google Marketing.
YouTube.
Google consent and preference functionality.

Examples of cookie identifiers that may appear include:

GA_OPT_OUT
AEC
CONSENT
SOCS
ACCOUNT_CHOOSER
Google account authentication cookies.
_gaexp
GCLB
test_cookie
PREF
YSC
DEVICE_INFO
LOGIN_INFO
_GRECAPTCHA
pm_sess
pm_sess_NNN
cookiePreferences

The purpose, provider and lifetime of a cookie may change as third-party services are updated.

For this reason, the website's Cookie Details or Cookie Settings tool should be regarded as the most current technical list of individual cookies currently detected or used.

Google itself documents that its cookies can serve different purposes, including functionality, analytics, security and advertising, and their duration varies according to the specific cookie. Google Policies

21. Cookie Consent

When you first visit epharmadora.com, you may be presented with a cookie consent banner or preference tool.

Where consent is required:

Non-essential cookies will not be intentionally activated before the appropriate consent.
You can accept optional cookies.
You can reject non-essential cookies.
You can manage individual cookie categories.
Optional categories should not be treated as consented to merely because you continue browsing.
You may withdraw or change your consent at any time through the available Cookie Settings.

The general rule is that cookies requiring access to or storage of information on a user's device require prior informed consent, with an exception for technically necessary cookies. European Data Protection Board

22. Rejecting Cookies

Rejecting analytics or marketing cookies will not prevent you from accessing the basic functionality of epharmadora.com.

Some optional features may work differently or may be unavailable if related functional cookies are rejected.

Strictly necessary cookies may remain active because they are required for functions such as security, shopping cart operation, checkout, login or remembering privacy preferences.

23. Changing or Withdrawing Consent

You may change your cookie preferences or withdraw consent at any time through the website's Cookie Settings or cookie preference mechanism.

Withdrawal applies to future use of the relevant optional technologies and does not make previous lawful processing unlawful.

You may also delete or block cookies using your browser settings.

24. Third-Party Cookies

Some cookies and technologies used on epharmadora.com may be provided by third parties.

These third parties may process information according to their own privacy policies and legal obligations.

Third-party services used on or integrated with epharmadora.com may include Google services such as Google Analytics, Google Ads, Google AdSense, YouTube and related Google technologies.

Google explains that sites integrating these services can transmit information such as the page URL, IP address and browser/device information to Google. Google Policies

25. Cookie Duration

Cookies may be:

Session cookies, which normally expire when you close your browser; or

Persistent cookies, which remain until their specified expiry date or until deleted.

The exact duration depends on the particular cookie and provider.

Current cookie duration information, where technically available, may be displayed through the Cookie Details or Cookie Settings tool.

26. Updates to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in:

Website functionality.
Cookies and technologies.
Service providers.
Business practices.
Legal or regulatory requirements.

The latest version will be published on epharmadora.com.

27. Contact Us

For privacy questions, cookie-related questions or requests concerning your personal data, please contact: