Privacy Policy

Who we are

Nostos Woodcraft is a bespoke woodworking business operated by Lewis Stainton in Mandria, Limassol, Cyprus. For the purposes of the General Data Protection Regulation (GDPR) and Cyprus data protection law, we are the data controller for the personal data described in this policy.

You can reach us about anything in this policy by email at lewis_stainton@nostos.cy or by phone on +357 99 905806.

What we collect and why

We collect personal data in two situations only.

• When you submit the quote form. We ask for your name and email address, and optionally your phone number, project type, and a description of what you have in mind. We use this solely to respond to your enquiry and to discuss a possible commission. We do not add you to a mailing list.
• When you browse the site. Our analytics records which pages are viewed, roughly where in the world visitors are, which language version they use, what site or search referred them, and general device and browser type. This is used to understand which work people are interested in and how the site is performing.

Our legal basis

• Quote enquiries are processed on the basis of taking steps at your request prior to entering a contract, and our legitimate interest in responding to people who contact us.
• Analytics is processed on the basis of our legitimate interest in understanding how our website is used so we can improve it. You can object to this at any time, and the section below explains how to stop it.

Cookies and analytics

We use Google Analytics 4 to measure website traffic. When you open any page, it sets two cookies in your browser — named _ga and _ga_EFCKJQNELF — which last up to two years and let us tell returning visits apart from new ones. These are set when the page loads.

We have chosen not to put a cookie consent banner in front of the site. We would rather tell you plainly what happens and give you working ways to prevent it than interrupt every visit with a dialog. We use no advertising, remarketing, or cross-site tracking features, we have not linked this site to any advertising product, and we do not sell, rent, or share your data with anyone for their own marketing.

If you would prefer not to be counted, any of the following will stop it, and none of them will break the site:

• Install Google's official opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
• Block or delete cookies for nostos.cy in your browser settings.
• Use a private or incognito window, which discards the cookies when you close it.
• Use a browser or extension that blocks trackers — most modern browsers block Google Analytics by default in their strict privacy mode.

Who your data is shared with

We do not sell your personal data, and we never will. It is shared only with the service providers who make the site work:

• Web3Forms — receives quote form submissions and delivers them to us by email.
• Google Analytics (Google Ireland Limited / Google LLC) — processes the website usage data described above.
• Hostinger — hosts the website and keeps standard server logs, which include visitor IP addresses, for security and troubleshooting.

Transfers outside the EEA

Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses, which are the safeguards EU law recognises for this purpose. Google LLC is certified under the EU–US Data Privacy Framework.

How long we keep it

• Quote enquiries and related correspondence: kept while we are in touch about your project and for up to 24 months afterwards, then deleted. If a commission goes ahead, records are kept for as long as tax and accounting law in Cyprus requires.
• Analytics data: retained by Google under their standard retention settings, currently up to 14 months for event-level data. The cookies themselves expire after two years, or sooner if you delete them.
• Server logs: kept for a short period for security purposes and then overwritten.

Your rights

Under the GDPR you have the right to:

• Ask what personal data we hold about you and receive a copy of it.
• Have inaccurate data corrected.
• Have your data deleted.
• Restrict or object to how we use it, including objecting to analytics.
• Receive your data in a portable format.
• Withdraw consent at any time, where we relied on consent.

How to exercise your rights, or complain

To exercise any of the rights above, email lewis_stainton@nostos.cy or call +357 99 905806. We will respond within one month, and there is no charge. We may ask you to confirm your identity before we act on a request about someone's data.

If you are not satisfied with how we have handled your data, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy), or to the supervisory authority in the EU country where you live.

Children

This website is intended for adults commissioning furniture. We do not knowingly collect personal data from children. If you believe a child has sent us their details, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.