Verano Upholstery and Restoration Works Limited ("Verano", "we", "our", or "us") is committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Cyprus Processing of Personal Data (Protection of Individuals) Law, and other applicable data protection legislation.
This Privacy Notice explains how we collect, use, store, and protect your personal data when you contact us, request quotations, engage our upholstery and restoration services, visit our website, or otherwise interact with us.
The Data Controller responsible for your personal data is:
We may collect and process the following categories of personal data:
Where applicable, we may collect your IP address, browser type and version, device information, website usage statistics, and cookie information.
We process your personal data for the following purposes:
| Providing upholstery and restoration services | Performance of a Contract |
| Preparing quotations and estimates | Pre-contractual Measures / Legitimate Interest |
| Customer support and communication | Legitimate Interest |
| Managing payments and invoicing | Contract and Legal Obligation |
| Maintaining business records | Legal Obligation |
| Improving our services | Legitimate Interest |
| Responding to enquiries | Legitimate Interest |
| Sending marketing communications (where applicable) | Consent |
We may share your personal data with accountants and professional advisers, payment processors and banking institutions, IT service providers and website hosting providers, insurance providers, and government authorities, regulators, or law enforcement agencies where legally required.
We do not sell, rent, or trade personal data to third parties.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented, including transfers to countries subject to a European Commission Adequacy Decision, Standard Contractual Clauses approved by the European Commission, or other safeguards permitted under the GDPR.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, accounting, tax, and regulatory obligations. Typical retention periods include:
Under the GDPR, you have the following rights:
To exercise any of these rights, please contact us at dpo@veranoworks.com.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
Our website may use cookies and similar technologies to improve website functionality, analyse traffic, and enhance user experience. Users can manage cookie preferences through their browser settings. Where required by law, consent will be obtained before non-essential cookies are used. For more detail, see our Cookie Policy.
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites and encourage users to review the privacy notices of those websites.
We may update this Privacy Notice from time to time to reflect changes in our business practices, legal requirements, or regulatory guidance. Any updates will be published on our website and will become effective immediately upon publication.
If you have any questions regarding this Privacy Notice or wish to exercise your data protection rights, please contact:
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection:
You may also seek a remedy through the competent courts of Cyprus.
This Privacy Notice is intended to comply with Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation).