Privacy Notice

This Privacy Notice describes how TriwerWorks Ltd collects, uses and protects your personal data. We process your data in compliance with the General Data Protection Regulation (GDPR) and the Cyprus Law 125(I)/2018 on the Protection of Natural Persons with regard to the Processing of Personal Data.

Data Controller

Personal Data We Process

Order Data

When you participate in our promotions and campaigns, we collect and process the data you provide, such as name, address, email address and date of birth. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract).

Server Log Files

When you access our websites, our servers automatically record information such as your IP address, browser type, operating system, referring URL, access date and time. This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in ensuring the security and proper operation of our systems).

Cookies

Our websites may use cookies and similar technologies. Cookies are small text files stored on your device. We use them to ensure the functionality of our sites, to analyse usage and, where you have consented, for marketing purposes. You can manage your cookie preferences in your browser settings.

Recipients of Personal Data

We may share your personal data with:

• Service providers who assist us in operating our websites and fulfilling orders (e.g. hosting, shipping)
• Authorities where required by law

We ensure that any third parties process your data only for the purposes we specify and in accordance with applicable data protection law.

Storage Period

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order data is typically retained for the duration of the contractual relationship and for a reasonable period thereafter for legal and accounting purposes. Server log files are generally retained for a limited period. You may request erasure of your data where we have no legal obligation to retain it.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption, access controls and secure processing procedures.

Your Rights

Under the GDPR and Cyprus Law 125(I)/2018, you have the following rights:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your data in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we use your data in certain situations.
• Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used format.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us at . We will respond within one month. You also have the right to lodge a complaint with a supervisory authority.

Contact for Data Protection

For any questions regarding the processing of your personal data or to exercise your rights, please contact:

Right to Lodge a Complaint

You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus if you believe that the processing of your personal data infringes applicable law.

Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
Website: www.dataprotection.gov.cy

Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or in the law. We will indicate the date of the last update at the bottom of this page. We encourage you to review this notice periodically.

Date: March 2026