Privacy Policy

1. Data Controller

J.N. Perfectus Brands Ltd., registered in Cyprus, operating as the official distributor of Arosha products in Cyprus and Greece ("we", "us", or "our"), is the data controller responsible for your personal data collected through this website (aroshacyprus.com).

Contact: Natalia.lyko@onet.eu | +357 99 872 044

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information - name, email address, phone number, when you submit an enquiry form.
• Communication data - the content of messages you send to us via the website contact form or WhatsApp.
• Usage data - anonymised data about how you interact with our website, including pages visited, time spent, and browser/device type, collected via cookies and analytics tools.

We do not collect payment card data, government identification numbers, or sensitive personal data as defined under GDPR Article 9.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR) - for the use of non-essential cookies and analytics.
• Legitimate interests (Article 6(1)(f) GDPR) - to respond to your enquiries and improve our website.
• Contractual necessity (Article 6(1)(b) GDPR) - to process and respond to business enquiries that may lead to a commercial relationship.

4. How We Use Your Data

We use your personal data solely for the following purposes:

• To respond to enquiries submitted through our contact form or WhatsApp.
• To provide information about Arosha products, treatments, training, and partnership opportunities.
• To improve the performance and content of our website.
• To comply with legal obligations applicable to us in Cyprus and the European Union.

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

5. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers - we may share data with trusted third-party service providers who assist us in operating the website (e.g., hosting providers, email services), subject to appropriate data processing agreements.
• Legal obligations - we may disclose data where required by law, court order, or regulatory authority.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is retained for a maximum of 24 months from the date of last contact. Analytics data is retained in anonymised form.

7. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

• Right of access - to request a copy of the personal data we hold about you.
• Right to rectification - to request correction of inaccurate or incomplete data.
• Right to erasure - to request deletion of your personal data, subject to legal retention obligations.
• Right to restriction - to request that we restrict processing of your data in certain circumstances.
• Right to data portability - to receive your data in a structured, commonly used format.
• Right to object - to object to processing based on legitimate interests.
• Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at Natalia.lyko@onet.eu. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

8. Cookies

We use cookies to improve your browsing experience. For detailed information about the cookies we use, please refer to our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites (including Arosha Italy's official website and our social media profiles). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact

For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

J.N. Perfectus Brands Ltd.
25 Vasili Michaelides, 3025 Limassol, Cyprus
Email: Natalia.lyko@onet.eu
Phone: +357 99 872 044