Privacy policy

Last updated: July 19 2026

This Privacy Policy describes how Byk Beauty Ltd ("Byk Beauty", "we", "us", or "our") collects, uses, and discloses your personal information when you visit or make a purchase from bykbeauty.com (the "Site") or otherwise communicate with us (collectively, the "Services").

For the purposes of applicable data protection laws, including the EU General Data Protection Regulation (GDPR), Byk Beauty Ltd, a company registered in Cyprus, is the data controller of your personal information.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. We will post the revised policy on the Site and update the "Last updated" date above.

What Personal Information We Collect

The personal information we collect depends on how you interact with our Site and Services.

Information you provide directly:

  • Contact details, including your name, address, phone number, and email address.
  • Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information, including your username, password, and other information used for account security.
  • Shopping information, including the items you view, add to your cart, or purchase, and any reviews, referrals, or gift cards associated with your account.
  • Customer support information, including any information you choose to include when contacting us.

Some features of the Services require certain information to function. You may choose not to provide it, but this may prevent you from using those features.

Information collected automatically: We automatically collect certain information about your interaction with the Services ("Usage Data") through cookies, pixels, and similar technologies. Usage Data may include device and browser information, network connection details, your IP address, and information about how you use the Site. See the Cookies section below.

Information from third parties: We may receive information about you from service providers who support our business, such as Shopify (our e-commerce platform) and our payment processors, who collect payment information (such as card details and billing address) to process your payments and fulfill your orders.

How We Use Your Personal Information — and Our Legal Bases

Providing our products and services. We use your personal information to process your payments, fulfill and ship your orders, manage returns and exchanges, maintain your account, and send you notifications related to your purchases. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Marketing communications. With your consent, we send you marketing emails about our products, offers, and brand. You can withdraw your consent at any time using the unsubscribe link in any marketing email. Where permitted by law, we may also send you marketing about similar products if you are an existing customer, and you may opt out at any time. Legal basis: your consent (Art. 6(1)(a) GDPR), or our legitimate interest in marketing to existing customers (Art. 6(1)(f) GDPR).

Security and fraud prevention. We use your personal information to detect, investigate, and take action against possible fraudulent, illegal, or malicious activity. If you create an account, please keep your credentials secure and contact us immediately if you believe your account has been compromised. Legal basis: our legitimate interest in keeping our Services secure (Art. 6(1)(f) GDPR).

Customer support and service improvement. We use your personal information to respond to you, provide effective support, and improve our Services. Legal basis: our legitimate interest in maintaining our relationship with you and improving our Services (Art. 6(1)(f) GDPR).

Legal compliance. We may use your personal information to comply with applicable legal obligations, enforce our terms of service, and protect or defend our rights and the rights of others. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR) and our legitimate interests (Art. 6(1)(f) GDPR).

Cookies

We use cookies and similar technologies on our Site. Essential cookies are required for the Site to function (for example, to keep items in your cart). With your consent, we also use analytics and marketing cookies to understand how the Site is used and to tailor our advertising. You can manage your preferences at any time through the cookie banner on our Site or your browser settings. For information about the cookies used to power our store through Shopify, see https://www.shopify.com/legal/cookies.

Blocking or removing cookies may affect your experience and cause some features to work incorrectly.

How We Disclose Personal Information

We do not sell your personal information. We may disclose your personal information to third parties in the following circumstances:

  • With vendors and service providers who perform services on our behalf, such as our e-commerce platform (Shopify), payment processors, shipping and fulfillment partners (including our delivery carriers), IT providers, analytics providers, and customer support tools.
  • When you direct or consent to a disclosure, such as providing your delivery details to a carrier to ship your order.
  • In connection with a business transaction, such as a merger or sale of the business.
  • To comply with legal obligations, respond to lawful requests, enforce our terms of service, or protect our rights and the rights of others.

Third parties who process personal information on our behalf do so under contracts that require them to protect your information in line with applicable law.

Third-Party Websites and Links

Our Site may link to websites or platforms operated by third parties (such as social media). We are not responsible for the privacy or security practices of those sites, and we encourage you to review their privacy policies. Information you share on public or third-party platforms may be viewable by others.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information about children. If you are a parent or guardian of a child who has provided us with personal information, please contact us using the details below to request its deletion.

Security and Retention

No security measures are perfect, and we cannot guarantee absolute security of information transmitted to us. We recommend not sending sensitive information through insecure channels.

We retain your personal information only for as long as necessary to provide the Services, maintain your account, comply with legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements.

Your Rights

Under the GDPR, you have the following rights in relation to your personal information. These rights are not absolute and may apply only in certain circumstances:

  • Right of access — to request a copy of the personal information we hold about you.
  • Right to rectification — to request that we correct inaccurate or incomplete information.
  • Right to erasure — to request that we delete your personal information.
  • Right to data portability — to receive your personal information in a portable format and have it transferred to a third party, in certain circumstances.
  • Right to restriction — to ask us to restrict our processing of your personal information.
  • Right to object — to object to processing based on our legitimate interests, including direct marketing.
  • Right to withdraw consent — where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding, and we will respond within the timeframes required by law. We will never discriminate against you for exercising your rights.

You can opt out of marketing emails at any time using the unsubscribe link in any email we send. If you opt out, we may still send you non-promotional emails, such as order confirmations.

Complaints

If you have a complaint about how we process your personal information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with your local data protection authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy); in Greece, the Hellenic Data Protection Authority (www.dpa.gr).

International Transfers

Your personal information may be transferred to, stored, and processed outside the country where you live, including by our service providers. Where we transfer personal information outside the European Economic Area, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, or transfers to countries deemed to provide an adequate level of protection.

Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Byk Beauty Ltd Email: shop@bykbeauty.com Address: Artas 1, 2020 Strovolos, Nicosia, Cyprus.