PRIVACY POLICY & SECURITY

 

NAPECH 5 GROUP

 

PRIVACY POLICY AND SECURITY

 

Napech 5 Group (the “Company”) operates in the field of perfumes and cosmetics and is the exclusive representative of Refan in Cyprus.

 

The company is committed to safeguarding your privacy and would like to reassure you that this is our first priority and that your data is safe and secure.

 

We therefore want to clarify that whatever personal information we require and how we use it, is in order to offer you a better and more personalized shopping experience.

 

Date of last update: 19th November 2020

 

What this Policy Covers

 

We are committed to acting in good faith and in your best interest when it comes to how we collect, use and protect your personal data.

 

That’s why we’ve developed this privacy policy (“Policy”), which:

 

  • sets out the types of personal data that we collect;
  • explains how and why we collect and use your personal data;
  • explains when and why we share personal data within the Napech 5 Group and 3rd parties, and
  • is clear about the rights and choices you have when it comes to your personal data

 

We offer a wide range of products and services. This Policy applies to you if you use our services:

 

  • shopping with us over the phone, or online

 

or

 

  • being a member of our myRefan Reward Program

This Policy also applies if you contact us or we contact you about our products and Services.

 

We safeguard and review the present personal data policy frequently to ensure it is updated and accurate

 

What types of personal data do we collect?

 

When you register with our myRefan Reward Program we ask for your personal data (such as first name, last name, gender, city, email, mobile and birthday).

 

This personal data is used for various purposes such as:

 

  • promotions
  • competitions
  • surveys or questionnaires about our services
  • newsletter sign ups
  • issuing invoices
  • complaints

 

Therefore, your feedback and contribution to customer surveys and questionnaires is collected and considered valuable to us.

 

Anytime you contact us about our services either by phone, email or post or when you send us your c.v., or speak with us through social media or when we issue an invoice we may also collect personal data you provide about yourself.

 

Sometimes we may collect details of the emails and other digital communication we send to you that you open, including any links in them that you click on.

 

If you sign up to our website, we will request your account login details, such as username and the password that you have chosen. We may also need to collect and process personal information about you including your address, email, date of birth and contact details such as your telephone number.

 

If you place an order with us, we will also ask for a delivery address and your payment details. We may ask you for this information through our website, or we may collect this information through your email or other communication with us.

 

Furthermore, we collect information about your online and in-store purchases (for example, what you have bought, when and where you bought it and how you paid for it) or we may obtain information about your usage of our website to help us develop and improve our services further through online surveys and other requests. Certain information is collected automatically, as described later in this Privacy Policy, through Cookies.

 

We may also ask you for other optional information such as what sort of device you use that is mobile telephone or tablet, how you heard about our website and what are your interests. If you choose to give us this information, it will enable us to provide you with the best possible service that is personalized to your needs and preferences. Although the collection of the information we may ask for is not compulsory, the more information you volunteer (and the more accurate it is), the better we can tailor our services to your needs and preferences.

 

When you use your myRefan Reward Program to shop with us, or Gift Vouchers or Gift Cards, we will collect transaction information.

 

We may also use personal data from other sources, such as specialist companies that supply information. This personal data helps us manage your myRefan Reward Program (including the allocation of points), review and improve the accuracy of data we hold; and improve and measure the effectiveness of our marketing communication including online advertising.

 

We may automatically collect non-personal information about you such as the type of internet browsers you use or the site from which you were linked to our Website. This information cannot identify you and it is only used to assist us in providing an effective service on our Website.

 

 

How and why we use personal data

 

We use personal data to make our products and services available to you. In this way we manage the accounts you hold with us, including your myRefan Reward Program.

 

Personal data assists us in processing your orders. We need to process your personal data so that we can manage your customer account, provide you with the goods and services you want to buy and help you with your order queries.

 

We use personal data to assist us in managing and improving our day to day operations. It is vital for us to effectively manage and improve our website. We process your personal data in this way through the use of cookies and other similar technologies on our Website to be able to provide you with the best possible shopping experience.

 

Processing of personal data also helps us to develop and improve our product range services, stores, information technology systems, know-how and the way we communicate with you. This allows us to offer better customer service.

 

It is important for us to monitor how our services are used in order to detect and prevent fraud, other crimes and the misuse of services. This reassures us that you can safely use our Services.

 

We use personal data to assist us in personalizing your shopping experience with us. We do this by using your online browsing experience as well as your in-store and online purchases (including myRefan Reward Program) and this helps us in better understanding you as a customer and providing you with personalized offers and services.

 

Online advertising may be displayed across our website. This will help us in measuring the effectiveness of our marketing communications and to be able to provide you with more relevant marketing communications (including by email, post or online advertising), relating to our products and services.

 

We do this because we want to ensure that we provide you with marketing communication, including online advertising, that are relevant to your interests. To achieve this we also measure your responses to marketing communications relating to products and services we offer, which also means we can offer products and services that better meet your needs as a customer.

 

In order to upgrade our service to you as a customer, we may contact you about our products and services, either by phone, email or post or by responding to social media posts that you have directed to us and use personal data to provide clarification or assistance in response to your communications.

 

We may also contact you in order to manage promotions and competitions you take part in or to invite you to take part in and manage customer surveys, questionnaires and other market research activities carried out by the Napech Group or by other organizations on our behalf. This in order to improve our Services

 

However, if we contact you about this, you are not obliged to take part in the activities. If you tell us that you do not want us to contact you for market research, we will respect this choice. This will not affect your entitlement to use our Services or Benefits.

 

You have absolute control over the receipt of newsletters and promotional materials. You have the option to stop at any time receiving any promotional material or to change the way the material is received by informing us via email (info@refancyprus.com).

 

We may process your personal data, provided that you have given us your specific consent for processing (other than for the reasons set out hereinabove) then the lawfulness of such processing is based on that consent. You have the right to revoke consent at any time. However, any processing of personal data prior to the receipt of your revocation will not be affected.

 

When and why we share personal data within the Napech 5 Group and with other organizations

 

We would like to let you know that we work with carefully selected Service Providers that carry out certain functions on our behalf. These include, for example, companies that help us with technology services, storing and combining data, processing payments and delivery orders. We would like to assure you that we only share personal data that enable our Service Providers to provide their services.

 

Some of the Service Providers we work with operate online media channels, and they place relevant online advertising for our products and services on those online media channels on our behalf. For example, you may see an advert for our products and services as you use particular social media sites.

 

We may share personal data with other organizations if the law or a public authority says we must share personal data, if we need to share personal data in order to establish exercise or defend our legal rights.

 

Other than the disclosures referred to in this policy, we will not disclose any personal information without your consent unless we are legally entitled or obliged to do so (for example, if required to do so by Court Order or for the purposes of prevention of fraud or other crime).

 

How we protect your personal data

 

At Napech 5 Group we are committed to respecting, protecting and maintaining your privacy and thus, we have a lot of measures in place, to ensure confidentiality.

 

For example we use computer safeguards such as firewalls and data encryption. We also enforce physical access controls to our buildings and files to keep this data safe. We only authorize access to employees who need it to carry out their responsibilities.

 

When you purchase goods on our website, you will be automatically directed to a secure server site that is managed and controlled by SIX. You can view their security policy here. Our retail shops will only pass information to SIX via secure server software (“SSL”) to encrypt and therefore protect ordering information. All personal data that you supply to SIX shall be governed by SIX’s data protection and privacy policy.

 

As part of our policies, we enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data. We may occasionally ask for proof of identity before we share your personal data with you.

 

If you select the option to allow us to store your card details, then we will do so using the SIX Token System). If you select a Repeat Purchase Product, then we will automatically store your card details via the SIX system The Token System is a safe way of keeping card details without actually storing them. SIX store and convert a customer’s sensitive payment information into a secure token or “alias”. This token is then us our website to process future transactions as and when required, without asking for your card details each time. When confirming an order, we will reveal only the last four digits of your credit card number.

 

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by companies operating outside the EEA who work for us or for one of our service providers. We would like to reassure you that we will enforce appropriate protection measures to make sure that your personal data remains adequately protected and is treated in line with this Policy.

 

Napech 5 Ltd is committed to offering you the best possible shopping experience; consequently, additional functions, features, products or services are incorporated into our website from time to time This may result in periodic changes to this Privacy Policy and you are advised to refer back to this Privacy Policy regularly to review any amendments.

 

Any questions regarding our Privacy Policy should be directed to Napech 5 Ltd Privacy Policy Manager at info@refancyprus.com or alternatively see the Contact Us page on this Site www.refancyprus.com/contactus

 

You should be aware that the internet is an insecure environment. Whilst we take appropriate technical and organizational measures to safeguard your personal data, please note that we cannot guarantee the security of any personal data that you transfer over the internet to us. However, we will continue to update these measures, as appropriate, when new technology becomes available.

 

Cookies and other similar technologies

 

A Cookie is a small data file that is stored by your web browser on your computer. We use cookies to keep track of your current shopping session, to enable you to proceed to checkout at any time and to personalize your online experience.

 

Some cookies are necessary so you should not disable these if you want to be able to use all the features of our Website. You can disable other cookies but this may affect your shopping experience.

Also, you can choose not to accept Cookies but certain functions of our website may not work correctly or at all if you set your browser not to accept cookies.

 

When it comes to Cookies you have a lot of choices, you can use your browser settings to accept or reject new Cookies and to delete existing Cookies. You can also set your browser to notify you each time new Cookies are placed on your computer or other device.

 

Cookies allow us to improve the way our Website works so that we can personalize your experience and allow you to use many of their useful features.

 

Without the use of cookies it would be impossible to remember your preferences and the contents of your shopping basket when you return to our Website. Also, cookies help us deliver online advertising that we believe is most relevant to you on our Website. Cookies used for this purpose are often placed on our Website by other organizations and always with our permission.

 

In addition Cookies can help us to understand how our Website is being used, for example, by telling us if you get an error message as you browse. The Cookles that collect data are mostly aggregated and anonymous.

 

When you visit our Website these Cookies automatically log your IP address (the unique address which identifies your computer on the internet) which is automatically recognized by our web server. We use IP addresses to help us administer the Site and to collect broad demographic information for aggregate use. Your IP address is also logged when you make a purchase as a fraud prevention measure required by the payment gateway.

 

In this way, we can measure the effectiveness of our marketing communication, including online advertising campaigns, for example, by telling us if you have opened a marketing email that we have sent you and the number of times you are shown an advert. Cookies can, also, tell us if you have seen a specific advert and how long it has been since you have seen it.

 

Children’s data

 

It is very important for us to protect children’s privacy. We may collect personal data in relation to children only provided that we have first obtained their parents’ or legal guardian’s consent or unless otherwise permitted under law. We do not provide any Benefit Loyalty Scheme services to children but we may allow children with their parents’ or legal guardian’s consent to use our Website and Social Media sites. For the purposes of this privacy statement, “children” are individuals who are under the age of eighteen (18).

 

How long do we keep your personal information for

 

We will keep your personal data for as long as you would like us to and as long as you are a customer at our shops. Once our business relationship with you has ended, we may keep your data for up to ten (10) years in accordance with the directive of the Data Protection Commissioner (http://www.dataprotection.gov.cy).

 

We may keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons.

 

Your rights

 

Under the General Data Protection Regulation (EU) 2018/679 which is applicable from 25 May 2018 you have various rights with regards to the personal data we hold about you.

 

These are:

 

Receive access to your personal data. This enables you to e.g. receive a copy of the personal data we hold about you and to check that we are lawfully processing it. In order to receive such a copy you can contact us at info@refancyprus.com or alternatively see the Contact Us page on this site.

 

Request correction (rectification) of the personal data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.

 

Request erasure of your personal information.

 

This enables you to ask us to erase your personal data (this is known as the ‘right to be forgotten’) where there is no good reason for us continuing to process it.

 

Objection to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

 

You also have the right to object where we are processing your personal data, for marketing purposes.

 

If you object to processing for marketing purposes, then we shall stop the processing of your personal data for such purposes.

 

Request the restriction of processing of your personal data.

 

This enables you to ask us to restrict the processing of your personal data, i.e. use it only for certain things, if:

 

  • it is not accurate,
  • it has been used unlawfully but you do not wish for us to delete it,
  • it is not relevant any more, but you want us to keep it for use in possible legal claims,
  • You have already asked us to stop using your personal data but you are waiting for us to confirm if we have legitimate grounds to use your data.

 

Request to receive a copy of the personal data concerning you in a format that is structured and commonly used and transmit such data to other organizations. You also have the right to have your personal data transmitted directly by ourselves to other organizations you will name (known as the right to data portability).

 

Withdraw your consent regarding the processing of your personal data at any time. Note that any withdrawal of consent shall not affect the lawfulness of processing based on consent before it was withdrawn or revoked by you. You have the right to withdraw your consent given to us, opt-out, unsubscribe or change preferences via a link in the footer of all non-transactional email messages. These options are made available when you sign-up for our email lists and in email messages delivered from us.

 

If, at any time, you believe that you have received an unsolicited commercial email from Napech 5 Ltd on behalf of somebody else, you may report it to us at info@refancyprus.com or alternatively see the Contact Us page on this site.

 

It is very important to us that we provide you with the highest level of service. In order to help us do this, from time to time we may contact you using one of the contact methods you have provided, with details of our newsletters, surveys, products and services which we think may be of interest to you. If at any time you do not wish to receive these details, then click on the ‘Unsubscribe’ link at the bottom of an email or via an sms message . Please note that active customers will continue to receive order and account communications from us.

 

We aim to keep our information about you as accurate as possible. If you would like to review or change the details you have supplied us with, or you would like to remove your published Submission from the site you may do so at any time by using the Contact Us page on this site.

 

Right to lodge a complaint

 

If you have exercised any or all of your data protection rights and still feel that your concerns about how we use  your personal data have not been adequately addressed by us, you have the right to complain by contacting us at info@refancyprus.com or alternatively see the Contact Us page on this site.

 

Changes to this privacy statement

 

We may modify or amend this privacy statement from time to time.

 

We will notify you appropriately when we make changes to this privacy statement and we will amend the revision date at the top of this page. We do however encourage you to review this statement periodically so as to be always informed about how we are processing and protecting your personal information.

 

Contacting us

 

To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us by sending an email to info@refancyprus.com or alternatively see the Contact Us page on this Site

 

You can also contact our Data Protection Office at info@refancyprus.com

 

Your concerns are very important to us and we endeavor to address all of your requests promptly.

Note:

 

The General Data Protection Regulation (EU) 2016/679 shall apply from 25 May 2018.