Privacy Policy

Last updated: 18 August 2026

This Privacy Policy explains how SICLOPAY LTD, trading as SERAVELLO ("SERAVELLO", "we", "us" or "our"), collects, uses, discloses and protects personal data when you visit seravello.com, make a purchase, contact us or otherwise interact with our services.

1. Who is responsible for your personal data?

The data controller is:

SICLOPAY LTD, trading as SERAVELLO
Company registration number: HE 472015
Registered office: Spyrou Kyprianou Avenue 14, Floor 1, Office 101, 3070 Limassol, Cyprus
Email: contact@seravello.com

2. Scope of this Policy

This Policy applies to personal data processed through our online store, customer support, marketing communications and related services. It does not apply to third-party websites or services that have their own privacy policies.

3. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data: name, billing and delivery address, email address and telephone number.
• Order and transaction data: products purchased, order value, discounts, returns, refunds, delivery status and related correspondence.
• Account data: login details, account preferences, saved addresses and purchase history, if you create an account.
• Payment-related data: payment method, transaction identifiers and payment status. Complete card details are generally collected and processed directly by authorised payment providers and are not stored by us.
• Communications: messages, support requests, complaints, withdrawal requests, product reviews and other content you choose to send us.
• Device and usage data: IP address, browser and device type, operating system, pages viewed, referring pages, approximate location, session information and interaction with our store.
• Preference and marketing data: language, communication preferences, consent records and interactions with marketing messages.
• Security and fraud-prevention data: information used to identify suspicious activity, protect transactions and secure our store.

Please provide only the personal data necessary for your request. If you provide personal data about another person, you are responsible for ensuring that you are authorised to do so.

4. How we collect personal data

We collect personal data:

• directly from you, for example when you place an order, create an account, contact us or subscribe to marketing;
• automatically when you use our store, through cookies and similar technologies;
• from service providers involved in operating the store, such as Shopify, payment providers, delivery carriers, fraud-prevention providers and customer-service tools; and
• from advertising, analytics or social-media partners, where permitted by law and subject to your consent when required.

5. Why we use personal data and our legal bases

Purpose	Typical legal basis
Process payments, fulfil orders, arrange delivery, handle returns and refunds, and provide customer support	Performance of a contract or steps requested before entering into a contract
Maintain customer accounts and provide requested store functions	Performance of a contract
Maintain tax, accounting, consumer-protection and transaction records, and respond to lawful requests	Compliance with legal obligations
Protect our store, customers and transactions; detect fraud, abuse and security incidents; establish or defend legal claims	Our legitimate interests and those of our customers, or compliance with legal obligations where applicable
Administer, troubleshoot and improve our website, services and customer experience	Our legitimate interests, provided those interests do not override your rights; consent where required
Send promotional emails or personalised advertising and use non-essential analytics or advertising cookies	Your consent, where required by law; in limited cases, another lawful basis permitted by applicable law

Where processing is based on legitimate interests, we assess whether the processing is necessary and whether your interests, rights or freedoms override those interests.

6. Cookies and similar technologies

Our store uses cookies, pixels, local storage and similar technologies. These may be used to:

• operate essential store functions, such as checkout, security, language and session management;
• remember your preferences;
• measure site performance and understand how visitors use the store; and
• support marketing, attribution and personalised advertising, where enabled.

Where required, non-essential cookies and similar technologies are used only after you give consent through our cookie settings. You may change or withdraw that consent at any time through the cookie-preference tool available on our website. Withdrawal does not affect processing that occurred before your consent was withdrawn.

You can also manage cookies through your browser, although blocking essential cookies may prevent parts of the store or checkout from working correctly. Shopify provides additional information about cookies used on its platform in its Cookie Policy.

7. Marketing communications

We may send you marketing communications when you have consented or when another lawful basis is available under applicable law. You can unsubscribe at any time by using the link in a marketing email or by contacting us. Unsubscribing from marketing does not stop service messages relating to your orders, account, security or legal notices.

8. How we disclose personal data

We may disclose personal data only as reasonably necessary to:

• Shopify and store-technology providers that host and operate our online store;
• payment providers, banks and fraud-prevention services that authorise transactions and protect against fraud;
• warehouses, fulfilment partners, postal operators and delivery carriers that prepare and deliver orders;
• IT, cloud, communications, customer-support and security providers that help us operate our business;
• analytics, advertising and social-media providers where these services are enabled and the required consent or other legal basis exists;
• professional advisers, including lawyers, accountants, auditors and insurers;
• public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and
• a prospective buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not disclose personal data to third parties for their own unrelated purposes without a lawful basis.

9. Shopify

Our store is hosted by Shopify. Shopify processes personal data to provide its commerce platform and may also process certain information for its own purposes as described in its privacy documentation. You can learn more in Shopify's Consumer Privacy Policy.

10. International data transfers

Some service providers may process personal data outside Cyprus or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards as required by law, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where necessary. You may contact us for further information about the safeguards relevant to your data.

11. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including to:

• fulfil orders and maintain our relationship with you;
• comply with tax, accounting, company, consumer-protection and other legal requirements;
• resolve disputes, enforce agreements and establish or defend legal claims; and
• maintain security and prevent fraud.

Retention periods vary according to the type of data, the purpose of processing and applicable legal requirements. When personal data is no longer required, we delete or anonymise it, unless continued retention is required by law.

12. Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please protect your account credentials and contact us promptly if you suspect unauthorised use of your account or personal data.

13. Your data-protection rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• request access to your personal data and information about how it is processed;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller;
• object to processing based on legitimate interests, including profiling related to that processing;
• object at any time to direct marketing;
• withdraw consent at any time where processing relies on consent, without affecting the lawfulness of earlier processing; and
• lodge a complaint with a data-protection authority.

To exercise a right, email contact@seravello.com. Please identify the right you wish to exercise and provide enough information for us to locate your records. We may ask for reasonable proof of identity before responding. We will respond within the period required by applicable law and will explain if an exception applies. Exercising your rights is generally free of charge, although the law may permit a reasonable fee or refusal for manifestly unfounded or excessive requests.

14. Automated decision-making and fraud prevention

We and our service providers may use automated signals to assess transaction, account or security risk. This may result in an order being held for verification, declined or cancelled where there is a reasonable fraud or security concern. Where applicable law gives you rights in relation to a decision based solely on automated processing that produces legal or similarly significant effects, you may request human intervention, express your point of view and contest the decision by contacting us.

15. Children

Our store is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact us so that we can investigate and take appropriate action.

16. Third-party links

Our store may contain links to third-party websites, apps or social-media services. We are not responsible for their privacy or security practices. Please review the privacy policy of any third-party service before providing personal data.

17. Regional privacy choices

Residents of certain jurisdictions may have additional privacy rights, including rights relating to targeted advertising or certain disclosures of personal data. Where relevant to you, you may submit a request by contacting us. If our store makes a dedicated privacy opt-out page available for your region, you may also use the data-sharing opt-out page. We will not discriminate against you for exercising an applicable privacy right.

18. Complaints

If you have a concern about how we process personal data, please contact us first so that we can try to resolve it. You also have the right to lodge a complaint with the supervisory authority in Cyprus:

Office of the Commissioner for Personal Data Protection
15 Kypranoros Street, 1061 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia, Cyprus
Email: commissioner@dataprotection.gov.cy
Telephone: +357 22818456
Website: www.dataprotection.gov.cy

If you live elsewhere in the European Economic Area, you may also complain to the data-protection authority in your country of habitual residence, place of work or the place of the alleged infringement.

19. Changes to this Policy

We may update this Privacy Policy to reflect changes to our practices, services or legal obligations. The revised version will be posted on this page with a new "Last updated" date. Where required by law, we will provide additional notice or request renewed consent.

20. Contact us

For privacy questions or to exercise your rights, contact:

SICLOPAY LTD, trading as SERAVELLO
Company registration number: HE 472015
Spyrou Kyprianou Avenue 14, Floor 1, Office 101, 3070 Limassol, Cyprus
Email: contact@seravello.com