Privacy Policy

EcoBites Ltd is the data controller responsible for your personal data. We are a dairy and halloumi producer registered in the Republic of Cyprus (company registration HE380522), based in Larnaca, Cyprus.

For any privacy question or to exercise your rights, contact us at [email protected]. We have not appointed a statutory Data Protection Officer, as our activities do not require one; this email reaches our data-protection contact.

We only collect what we need. Depending on how you use the site, this may include:

• Contact and enquiry details you give us — your name, email address, phone number (if provided), company and the content of your message when you use a contact or quote form.
• Newsletter details — your email address, name and language preference if you subscribe to marketing updates, plus your subscription status.
• Wholesale / private-label enquiry details — business contact details and the details of your enquiry.
• Analytics data — if you consent to analytics cookies, pseudonymous identifiers, device and browser information, approximate (city-level) location derived from a truncated IP address, and the pages and actions you take on the site.
• Technical logs — limited server and security logs (such as IP address and request metadata) needed to operate the site securely and prevent abuse.

We use your personal data for the following purposes, each with a legal basis under the GDPR:

• To respond to your enquiries and prepare quotes or wholesale arrangements — necessary to take steps at your request before entering a contract, and our legitimate interest in responding to you (Art. 6(1)(b) and (f)).
• To send you our newsletter and marketing updates — with your consent, which you can withdraw at any time (Art. 6(1)(a)).
• To measure and improve the website through analytics — with your consent to analytics cookies (Art. 6(1)(a)).
• To keep the site secure, prevent fraud and abuse, and maintain our records — our legitimate interests (Art. 6(1)(f)).
• To comply with our legal and accounting obligations — where required by law (Art. 6(1)(c)).

We use strictly-necessary storage to make the site work (for example, remembering your language and theme, keeping you signed in to the admin area, and recording your cookie choice). We use Google Analytics 4 only if you give consent, to understand how the site is used. Analytics cookies are off by default and are never used for advertising.

You can accept, reject or change your choice at any time through the "Cookie preferences" link in the footer. For the full list of cookies and how long they last, see our Cookie Policy.

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf under written data-processing agreements, and only as needed to run our business:

• Google (Google Ireland Ltd / Google LLC) — website analytics, only where you have consented.
• Our email and newsletter provider — to deliver enquiry replies and marketing emails you have opted into.
• Our hosting, content-delivery and file-storage providers — to operate the website and store media.

We may also disclose information where required by law, to protect our legal rights, or in connection with a business transfer.

Some of our providers, including Google, may process data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards — such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses, together with additional measures — to protect your data.

The adequacy of transfers to the US remains subject to legal developments; we keep our reliance on these safeguards under review.

We keep personal data only for as long as necessary for the purposes above, then delete or anonymise it. In general:

• Enquiry and contact-form data — kept for as long as needed to handle your enquiry and for a reasonable period afterwards (typically up to 24 months).
• Newsletter data — kept until you unsubscribe, after which we retain a minimal suppression record so we do not email you again.
• Analytics data — retained in Google Analytics for the retention period set in our account (14 months or less).
• Records we must keep for legal or accounting reasons — kept for the period required by law.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data;
• restrict or object to our processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing already carried out — for marketing, use the unsubscribe link in any email; for analytics, use the "Cookie preferences" link in the footer.

To exercise any of these rights, contact us at [email protected]. We will respond within the time limits set by law.

We send marketing emails only to people who have asked to receive them. Every marketing email includes an unsubscribe link, and you can opt out at any time. Unsubscribing from marketing does not stop essential service messages, such as a reply to an enquiry you sent us.

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access — including access controls, encryption in transit, and limiting access to those who need it. No online service can be guaranteed completely secure, but we work to protect your data and to respond promptly to any incident.

Our website and products are aimed at businesses and adult consumers. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

If you have a concern about how we handle your data, please contact us first so we can help. You also have the right to lodge a complaint with the Cyprus supervisory authority:

• Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus — [email protected] — +357 22818456 — dataprotection.gov.cy

We may update this policy from time to time. When we do, we will change the "last updated" date above and, where appropriate, tell you in another way. Please check back for the latest version.

Questions about this policy or your data? Contact EcoBites Ltd, Larnaca, Cyprus, at [email protected].