Skip to main content

Pinelaki Privacy Policy & Terms of Use

Pinelaki Privacy Policy & Terms of Use

Welcome to Pinelaki Car Body Shop (Mesokeleos 15, Pallouriotissa 1042, Nicosia, Cyprus). This Privacy Policy explains what personal data we collect, why, the legal basis, how long we keep it, who we share it with, and your rights under the EU GDPR. By using our website and services you agree to this policy.

What we collect and why

  • Orders (shop): name, address, email and phone, to process and ship your order and provide tracking. Legal basis: performance of a contract. Kept for 7 years (tax and accounting).
  • AI Damage Estimator: the photos you upload, your name, phone, email and IP address, to generate a repair estimate and follow up. Photos and vehicle details are sent to our AI provider OpenAI (USA) to analyse the damage. Legal basis: legitimate interest in providing the estimate you requested. Kept for 90 days unless you book a repair.
  • Contact form: name, email and message, to answer your enquiry. Legal basis: legitimate interest. Kept for 12 months.
  • Feedback: your feedback and any identifiers you provide, to improve our service. Legal basis: legitimate interest. Kept for 24 months.
  • Appointments: name, phone, vehicle and chosen time slot, to schedule your visit and remind you by SMS or email. Legal basis: contract and legitimate interest.
  • Security: we use Cloudflare Turnstile (anti-bot) and short-lived IP-based rate limiting to protect our forms. Legal basis: legitimate interest. IP addresses are discarded after a 24-hour window.

Payments

Payments are processed by Stripe and PayPal. We do not see or store your card details; their processing is governed by their own privacy policies.

Analytics and cookies

We use Cloudflare Web Analytics, which is privacy-friendly and does not use tracking cookies or build cross-site profiles. We do not use Google Analytics, Meta Pixel, Pinterest, or Microsoft Clarity. Essential cookies are used only to remember your language and cart.

Who we share data with

OpenAI (AI estimate analysis, USA), Cloudflare (CDN, security and analytics), Stripe and PayPal (payments), Google Workspace (email delivery), Cyta (SMS delivery) and Telegram (our internal order and appointment notifications). Each processes data only as needed to provide its service.

International transfers

Some providers (for example OpenAI) are located outside the EEA; such transfers rely on Standard Contractual Clauses or equivalent safeguards.

Your rights

You have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise these rights email info@pinelaki.com and we will respond within one month. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).

Data protection

We implement technical and organisational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time and will post any changes on this page. Please review it periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us.

By using our website, you consent to this Privacy Policy.