1Who we are

online.cy is a service of Eregion Intelligence LTD, based in Cyprus.

2Two roles

For business owners who create a page, we are the controller of their data. For customers who book with a shop, the shop is the controller; we process the data on the shop's behalf.

3What we hold

Owners: name, email, phone, shop details and password (stored encrypted). Card details are held by Stripe, not by us. Shop customers: name, phone, email if given, the appointment and any note. If you write a review, it is shown publicly with your first name and the initial of your surname. Technical: one cookie for language and, for owners, login cookies. We use no advertising or tracking cookies. Visits: we count how often a shop's page is opened, without cookies. To count the same visitor once a day, the network address and browser type are scrambled with a random key that is deleted every night; the address itself is not stored, and yesterday's visitor cannot be recognised today.

4Why we use it

To run the page and the diary, to confirm and remind about appointments, to protect against abuse, and for the invoices the law requires. We do not sell data or use it for advertising.

5Who else handles it

Hostinger (hosting and email sending), Cloudflare (network) and Stripe (payments). Each receives only what it needs for its job.

6For how long

Appointments and customer details are deleted two years after the appointment. A shop's account stays until its owner deletes it, which they can do themselves from the panel at any time; invoices are kept for as long as the law requires.

7Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable form. If you booked with a shop, ask the shop or us. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus.