Legal
Privacy policy
This policy explains what personal data we collect when you use the iSell&Fix shop, why we use it, who we share it with and the choices you have.
Last updated
Who is responsible for your data
#The controller of your personal data is ISAF Trading Ltd, trading as iSell&Fix, registered in Cyprus with company registration HE 409036 and VAT number CY10409036R. Our registered address is Aristoteli Valaoriti 12, Larnaca 6017, Cyprus.
For privacy questions or requests, email [email protected] or call +357 24 323342. Please include enough information for us to identify your account or order, but do not send card details.
The data we collect
#We collect the data you give us, the data created when you shop, and limited technical data from your browser. We do not collect card numbers or card security codes on this site: card details are entered on JCC's hosted payment page.
- Account and contact data
- Name, email address, phone number, password credentials and email-verification status. Accounts must verify their email address before login or checkout.
- Order and delivery data
- Delivery address, items ordered, order value, chosen carrier, order status and the contact details needed to deliver the parcel.
- Payment data
- The payment method, transaction reference, amount, status and any response JCC returns to us. We do not receive or store full card numbers.
- Support data
- Messages you send through the contact form, by email or by phone, and the replies we send.
- Technical and analytics data
- IP address, browser and device information, pages viewed, referring page and approximate location derived from IP. Analytics data is collected only if you allow analytics cookies.
We do not ask for special-category data such as health information, and we do not sell personal data.
Why we use your data and our lawful bases
#| What we do | Data used | Lawful basis |
|---|---|---|
| Create and secure your account, verify your email and let you sign in | Account and contact data, technical data | Contract; legitimate interests in keeping accounts secure |
| Take, process and deliver your order, including carrier handover | Contact, order and delivery data | Contract |
| Take card payment and handle payment queries or refunds | Order and payment data | Contract; legal obligation for accounting records |
| Answer support questions and manage returns or warranty claims | Contact, order and support data | Contract; legitimate interests in resolving issues |
| Keep tax, accounting and company records | Order, payment and invoice-related data | Legal obligation |
| Prevent fraud, abuse and unauthorised access, and keep the shop reliable | Technical data, order patterns, rate-limit data | Legitimate interests in protecting the shop and customers |
| Measure site use with GA4 | Analytics data and analytics cookies | Consent, which you can withdraw at any time |
Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can object to that processing using the contact details below.
International transfers
#Some hosting, storage, email and analytics providers may process data outside the European Economic Area. Where that happens, we rely on an adequacy decision of the European Commission or on the Commission's Standard Contractual Clauses, together with any supplementary measures required by law.
You can ask us for more information about the safeguard used for a particular transfer by contacting us.
How long we keep data
#| Data | Retention period |
|---|---|
| Order and tax records | 6 years |
| Support messages and related correspondence | 24 months |
| Analytics data | 14 months |
| Account data | While your account remains open, then for as long as needed for the legal retention periods above |
| Cookies | For the periods shown in the Cookie Policy, or until you clear them |
When data is no longer needed, we delete it or anonymise it. Some records may be kept longer where a legal obligation, a dispute or a fraud investigation requires it.
Your rights
#Under the GDPR you have the right to access your data, correct inaccurate data, request erasure, restrict processing, object to processing, receive portable data and withdraw consent at any time. Withdrawing consent does not affect processing that happened before you withdrew it.
To exercise a right, email [email protected] or write to ISAF Trading Ltd, Aristoteli Valaoriti 12, Larnaca 6017, Cyprus. We may ask for information to verify your identity before acting. We respond within the time limits set by law.
You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus. We would appreciate the chance to resolve your concern first, but you can contact the Commissioner at any time.
If you have an account, you can update your profile and address details when signed in. You can also ask us to close your account.
How we protect data
#We use HTTPS, access controls, separate credentials for services, and restricted staff access. Card details are entered on JCC's hosted payment page and are not stored by us. We keep systems updated and review how personal data is handled.
No system is completely secure. If a personal-data breach creates a risk to your rights, we will notify the relevant authority and affected people as required by law.
Children
#The shop is intended for adults. It is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
#We may update this policy when our services or the law change. The date at the top shows when it was last updated. If a change materially affects how we use your data, we will take reasonable steps to bring it to your attention.
Contact us
#ISAF Trading Ltd (iSell&Fix), Aristoteli Valaoriti 12, Larnaca 6017, Cyprus. Email [email protected]. Phone +357 24 323342. Company registration HE 409036. VAT CY10409036R.