Privacy Policy
This policy explains what personal data Vivre Pearl collects when you visit vivrepearl.com, place an order or write to us, why, who helps us handle it, how long we keep it and what your rights are. We collect only what we need to run the shop, and we never sell your data.
Who is responsible
Polina Vorontsova, a sole trader in Cyprus trading as Vivre Pearl, is responsible for your personal data (the "controller" under the EU General Data Protection Regulation, GDPR). For anything about your data, write to [email protected].
What we collect
When you place an order
- Your name, email address and phone number.
- Your delivery address, or the pickup point you chose.
- What you ordered, the delivery and payment method, any coupon and any note you add.
- The IP address and browser type the order was placed from, to help us spot fraud.
If you pay with PayPal, you enter your payment details on PayPal's own site, not ours. We receive only the confirmation of the payment and PayPal's reference numbers; we never see or store your card or bank details.
When you write to us
The contact form sends us your name, email address, phone number if you give it, and your message, together with the IP address and browser type it was sent from. We keep the emails you send us in the same way.
When you browse
- Your cart is kept in a cookie in your browser. It holds only product numbers and quantities, nothing that identifies you.
- When you answer the cookie banner, we keep a record of your choice as proof: a random consent ID, the categories you allowed, the date, the page, your browser type and a scrambled (hashed) form of a shortened IP address, never the address itself.
- Our web server and Cloudflare, which protects the site, record technical data such as IP addresses to keep the site secure and working.
We do not create customer accounts, and we use analytics or advertising tools only if you allow them in the cookie settings. Our Cookie Policy lists every cookie the shop uses.
Why we use it, and on what basis
- To take, deliver and look after your order - confirming it, arranging delivery or pickup, payment, refunds, returns and your questions about it. Basis: the contract with you.
- To keep the records the law requires, such as invoices and accounting records. Basis: legal obligation.
- To answer your messages. Basis: our legitimate interest in replying to you, or steps you ask us to take before buying.
- To protect the shop and our customers from fraud and abuse. Basis: our legitimate interest.
- Cookies that are not strictly necessary, if we use any, only with your consent, which you can withdraw at any time in the cookie settings.
We send you emails about your order, such as its confirmation, dispatch or a refund. We do not send marketing emails.
Who helps us
We share your data only with the services we need to run the shop, and each only for its part:
- ACS Courier - your name, address and phone number, to deliver your parcel.
- PayPal - if you choose to pay with PayPal. PayPal handles your payment under its own privacy notice.
- SMTP2GO - sends our emails to you, such as your order confirmation.
- Cloudflare - protects the site against attacks and checks that the contact form is sent by a person (Turnstile).
- Our web hosting provider - the server where the shop and its data are kept.
- Anthropic (Claude) and OpenAI (ChatGPT) - we use these AI assistants to help run the shop. When we ask one about an order or a message, the details it needs to answer are processed by that service.
- Public authorities, where the law requires it.
Some of these providers are based, or process data, outside the European Economic Area. Where they do, we rely on the safeguards the GDPR provides for such transfers, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- Orders and invoices: for as long as Cypriot tax and accounting law requires us to keep them.
- Messages from the contact form and emails: for as long as we need them to help you. You can ask us to delete them at any time.
- Records of your cookie choice: 36 months, then they are deleted automatically.
- Server and security logs: a short time, as set by our hosting and security providers.
Your rights
You have the right to ask us for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive the data you gave us in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to [email protected]; we answer within one month. Some data, such as invoices, we must keep even if you ask us to delete it.
If you think we have not handled your data properly, you can complain to the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy) or to the data protection authority where you live. We would appreciate the chance to put things right first.
Security
The whole site uses an encrypted connection (HTTPS). Payment details never reach our server. Only the people who run the shop can see orders and messages, each with their own password.
Changes to this policy
We update this policy when the way we handle data changes. The date below shows the latest version.
Last updated: 6 October 2026.