LEGAL & PRIVACY
Privacy Policy
Your privacy matters. Learn how EMAGCY collects, uses and protects your personal information when you visit our website, create an account or shop with us.
Last updated: September 2026
1. Who We Are
EMAGCY is an online consumer electronics store based in Cyprus. We are committed to protecting your privacy and handling your personal data in a transparent, secure and responsible manner.
This Privacy Policy explains how EMAGCY collects, uses, stores and shares personal information when you visit our website, create an account, place an order, contact us or otherwise interact with our services.
2. Information We Collect
Depending on how you use EMAGCY, we may collect the following categories of personal information:
• Identity and contact information: your name, email address, telephone number, billing address and delivery address.
• Account information: login details, account preferences and information associated with your EMAGCY account.
• Order and transaction information: products purchased, order history, delivery information, returns, refunds and related transaction details.
• Payment information: information necessary to process your payment. Payments may be processed securely by third-party payment providers, and EMAGCY does not store your complete payment card details where these are handled directly by the payment provider.
• Communications: information you provide when contacting us by email, telephone, contact forms or customer support.
• Technical and usage information: IP address, browser type, device information, operating system, pages visited and information about how you interact with our website.
• Cookie and preference information: information collected through cookies and similar technologies, subject to your choices and applicable consent requirements.
3. How We Use Your Information
We use your personal information only where necessary and for legitimate business and legal purposes, including:
• Processing and fulfilling orders: to confirm your order, process transactions, arrange delivery and provide order updates.
• Customer service: to respond to enquiries, provide technical or product support and manage returns, refunds and warranty requests.
• Account management: to create, maintain and secure your EMAGCY account and remember your preferences.
• Website operation and improvement: to maintain, analyse and improve the performance, functionality and user experience of our website.
• Security and fraud prevention: to protect our customers, website and business against fraudulent transactions, misuse, security threats and other unlawful activity.
• Legal and regulatory obligations: to comply with applicable laws, accounting requirements, tax obligations and requests from competent authorities.
• Marketing communications: to send promotional communications where permitted by law and, where required, with your consent. You can withdraw your consent or unsubscribe from marketing communications at any time.
• Personalisation and analytics: to better understand how customers use our website and improve our products, services and communications, subject to applicable cookie and consent requirements.
4. Legal Bases for Processing Your Personal Data
Under the General Data Protection Regulation (GDPR), we process your personal data only when we have a valid legal basis to do so.
Depending on the circumstances, we may rely on:
• Performance of a contract: when processing is necessary to process your order, take payment, arrange delivery, manage returns or provide services you have requested.
• Legal obligations: when we need to process or retain information to comply with applicable tax, accounting, consumer protection or other legal requirements.
• Legitimate interests: when processing is necessary for our legitimate business interests, such as improving our services, protecting our website and customers, preventing fraud and managing our business, provided that these interests do not override your rights and freedoms.
• Consent: where you have given us permission to process your personal data for a specific purpose, such as certain marketing communications or non-essential cookies. Where processing is based on consent, you may withdraw your consent at any time.
5. Payments and Payment Information
When you make a purchase through EMAGCY, your payment may be processed by authorised third-party payment service providers.
• Payment processing: information required to complete your transaction may be provided directly to the relevant payment provider in order to authorise and process your payment.
• Card information: where card payments are processed directly by our payment provider, EMAGCY does not receive or store your complete payment card number, security code (CVV/CVC) or other full card credentials.
• Transaction records: we may retain information relating to your transaction, such as the payment status, amount, date, order reference and payment method, where necessary for order management, accounting, refunds, fraud prevention and legal compliance.
• Payment security: payment providers operate their own security and privacy practices. We encourage you to review the privacy information provided by the relevant payment provider when completing your transaction.
We only process payment-related personal data where necessary to fulfil your order, comply with legal obligations and protect our customers and business from fraudulent or unauthorised transactions.
6. How We Share Your Personal Data
We do not sell your personal data. We may share personal information only where necessary to operate our business, provide our services or comply with legal obligations, including with:
• Payment service providers: to securely process payments, refunds and related transactions.
• Delivery and courier providers: to arrange and complete the delivery of your orders.
• Website, hosting and IT service providers: to operate, maintain, secure and support our website and related systems.
• Analytics and marketing providers: where applicable, to understand website performance and support marketing activities, subject to applicable consent and cookie requirements.
• Professional advisers: such as accountants, auditors, legal advisers or insurers where reasonably necessary.
• Public authorities and regulators: where disclosure is required by law, court order or a lawful request from a competent authority.
• Business transactions: where necessary in connection with a merger, acquisition, restructuring or transfer of all or part of our business, subject to appropriate safeguards.
We require service providers handling personal data on our behalf to process it only for authorised purposes and to apply appropriate data protection and security measures.
7. International Data Transfers
Some of the service providers we use may process or store personal data outside Cyprus or the European Economic Area (EEA).Where personal data is transferred outside the EEA, we take appropriate steps to ensure that it receives an adequate level of protection in accordance with applicable data protection law.
Where required, these safeguards may include:
• transferring personal data to countries recognised by the European Commission as providing an adequate level of data protection;
• using approved contractual safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs); or
• relying on another lawful transfer mechanism permitted under the GDPR.
Where applicable, additional safeguards may also be implemented depending on the destination, service provider and nature of the personal data involved.
8. How Long We Keep Your Personal Data
We keep personal data only for as long as necessary for the purposes for which it was collected and to meet our legal, accounting, tax and regulatory obligations.
The appropriate retention period depends on the type of information, the reason we collected it and any applicable legal requirements.
• Order and transaction records: may be retained for the period required under applicable accounting, tax and commercial laws.
• Account information: may be retained while your EMAGCY account remains active and for an appropriate period afterwards where necessary for legal, security or administrative purposes.
• Customer service communications: may be retained for a reasonable period to manage enquiries, complaints, warranties, disputes and provide appropriate customer support.
• Marketing information: is retained until you unsubscribe, withdraw your consent where consent is the applicable legal basis, or the information is no longer required for the relevant marketing purpose.
• Cookie and analytics information: is retained according to the duration and settings of the relevant cookies or technologies, as further explained in our Cookie Policy.When personal data is no longer required, we will delete or anonymise it where appropriate, unless continued retention is required or permitted by law.
9. Cookies and Similar Technologies
EMAGCY uses cookies and similar technologies to operate our website, remember your preferences, improve website performance and, where applicable, understand how visitors interact with our services.
Cookies may include:
• Strictly necessary cookies: required for essential website functions such as security, shopping cart functionality, checkout and account access.
• Preference cookies: used to remember certain choices and settings to improve your experience.
• Analytics cookies: used to help us understand how visitors use our website and how we can improve its performance and usability.
• Marketing cookies: where used, these may help us measure advertising effectiveness and provide more relevant marketing.
Where required by applicable law, non-essential cookies will only be used after you have provided your consent. You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.
10. Your Data Protection Rights
Under the GDPR and applicable data protection laws, you may have the following rights in relation to your personal data:
• Right of access: you may request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct personal data that is inaccurate or complete information that is incomplete.
• Right to erasure: in certain circumstances, you may request the deletion of your personal data.
• Right to restriction of processing: you may ask us to restrict the way we process your personal data in certain circumstances.
• Right to data portability: where applicable, you may request to receive certain personal data in a structured, commonly used and machine-readable format or ask for it to be transferred to another controller.
• Right to object: you may object to certain processing based on our legitimate interests and you have the right to object at any time to the use of your personal data for direct marketing.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
• Right to lodge a complaint: you have the right to lodge a complaint with a competent data protection supervisory authority, including the Office of the Commissioner for Personal Data Protection in Cyprus.
To exercise any of these rights, please contact us using the details provided at the end of this Privacy Policy. We may need to verify your identity before fulfilling certain requests.
11. Data Security
We take the security of your personal data seriously and use appropriate technical and organisational measures designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or misuse.
These measures may include:
• Secure connections: our website uses encrypted connections (HTTPS/SSL) to help protect information transmitted between your device and our website.
• Access controls: access to personal data is limited to authorised persons and service providers who require it for legitimate business purposes.
• System protection: we use appropriate security measures and maintain our website and systems with the aim of reducing the risk of unauthorised access or malicious activity.
• Trusted service providers: where third parties process personal data on our behalf, we take appropriate steps to work with providers that maintain suitable privacy and security safeguards.While we take reasonable measures to protect personal data, no website, electronic transmission or storage system can be guaranteed to be completely secure. We therefore continually review and improve our security practices where appropriate.
12. Children’s Privacy
EMAGCY is intended for a general audience and our products and services are not directed specifically at children.We do not knowingly collect personal data directly from children in circumstances where parental or guardian consent would be required under applicable data protection law.If you are a parent or legal guardian and believe that a child has provided personal data to EMAGCY without the appropriate authorisation, please contact us. Where appropriate and legally required, we will take reasonable steps to review and delete such information.
When purchasing products through EMAGCY, customers must have the legal capacity to enter into the relevant transaction or act with the appropriate authorisation of a parent or legal guardian.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technologies or applicable legal and regulatory requirements.When we make changes, we will publish the updated Privacy Policy on this page and revise the “Last updated” date shown at the top of the policy.
Where changes are significant and applicable law requires additional notice or consent, we will take appropriate steps to inform you before those changes take effect.We encourage you to review this Privacy Policy periodically to stay informed about how EMAGCY protects and processes your personal data.
14. Contact Us & Data Protection Requests
If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise any of your data protection rights, you can contact us using the details below.
EMAGCY is operated by MPCY Electronics Solution LTD, a company registered in Cyprus.
Legal Entity: MPCY Electronics Solution LTD
Trading Name: EMAGCY
Company Registration No.: HE 363627
VAT No.: 10363627M
Business Address: Jules Verne 1, Limassol, Cyprus
Email: info@emagcy.com
For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), MPCY Electronics Solution LTD is responsible for the processing of personal data as described in this Privacy Policy.When submitting a data protection request, please provide sufficient information for us to identify and understand your request. We may request additional information where reasonably necessary to verify your identity and protect personal data against unauthorised access or disclosure.
We will respond to valid requests within the time limits required by applicable data protection law.
15. Complaints to the Cyprus Data Protection Commissioner
If you believe that your personal data has been processed in a way that does not comply with applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.In Cyprus, the competent supervisory authority is:
Office of the Commissioner for Personal Data Protection
Kypranoros 15
1061 Nicosia, Cyprus
Postal Address: P.O. Box 23378, 1682 Nicosia, Cyprus
Telephone: +357 22 818456
Email: commissioner@dataprotection.gov.cyYou may contact the Commissioner if you have concerns regarding the processing of your personal data or the exercise of your rights under the GDPR.
We encourage you to contact EMAGCY first if you have a concern regarding your personal data so that we have an opportunity to address your request or concern directly. This does not affect your right to lodge a complaint with the supervisory authority.