Skip to main content

Pinelaki Privacy Policy, Terms of Sale & Terms of Use

Pinelaki Privacy Policy, Terms of Sale & Terms of Use

Welcome to Pinelaki Car Body Shop (Mesokeleos 15, Pallouriotissa 1042, Nicosia, Cyprus). This Privacy Policy explains what personal data we collect, why, the legal basis, how long we keep it, who we share it with, and your rights under the EU GDPR. By using our website and services you agree to this policy.

Who you are buying from

Pinelaki is a trading name of GK PSITHYRON LTD, a private limited company registered in the Republic of Cyprus under company registration number HE 495711. Our registered office is Armenias 48, Office 202, 2nd Floor, Strovolos, 2003 Nicosia, Cyprus. Our workshop, where you can visit us, is at Mesokeleos 15, Pallouriotissa 1042, Nicosia, Cyprus. You can reach us at info@pinelaki.com or +357 99228438.

"Pinelaki" is a trade mark of GK PSITHYRON LTD. GK PSITHYRON LTD is not registered for VAT in Cyprus, so no VAT is added to our prices and our receipts do not show a VAT line. Card payments appear on your bank statement as PINELAKI.

What we collect and why

  • Orders (shop): name, address, email and phone, to process and ship your order and provide tracking. Legal basis: performance of a contract. Kept for 7 years (tax and accounting).
  • AI Damage Estimator: the photos you upload, your name, phone, email and IP address, to generate a repair estimate and follow up. Photos and vehicle details are sent to our AI provider OpenAI (USA) to analyse the damage. Legal basis: legitimate interest in providing the estimate you requested. Kept for 90 days unless you book a repair.
  • Contact form: name, email and message, to answer your enquiry. Legal basis: legitimate interest. Kept for 12 months.
  • Feedback: your feedback and any identifiers you provide, to improve our service. Legal basis: legitimate interest. Kept for 24 months.
  • Appointments: name, phone, vehicle and chosen time slot, to schedule your visit and remind you by SMS or email. Legal basis: contract and legitimate interest.
  • Security: we use Cloudflare Turnstile (anti-bot) and short-lived IP-based rate limiting to protect our forms. Legal basis: legitimate interest. IP addresses are discarded after a 24-hour window.

Payments

Payments are processed by Revolut. We do not see or store your card details; Revolut processes them under its own privacy policy.

Analytics and cookies

We use Cloudflare Web Analytics, which is privacy-friendly and does not use tracking cookies or build cross-site profiles. We do not use Google Analytics, Meta Pixel, Pinterest, or Microsoft Clarity. Essential cookies are used only to remember your language and cart.

Who we share data with

OpenAI (AI estimate analysis, USA), Cloudflare (CDN, security and analytics), Revolut (payments), Google Workspace (email delivery), Cyta (SMS delivery) and Telegram (our internal order and appointment notifications). Each processes data only as needed to provide its service.

International transfers

Some providers (for example OpenAI) are located outside the EEA; such transfers rely on Standard Contractual Clauses or equivalent safeguards.

Your rights

You have the right to access, correct, delete, restrict or port your personal data, and to object to processing. To exercise these rights email info@pinelaki.com and we will respond within one month. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).

Data protection

We implement technical and organisational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Terms of sale

These terms apply to everything you buy from our online shop. Placing an order means you accept them. They do not affect your statutory rights as a consumer.

  • Who you contract with: your contract is with GK PSITHYRON LTD, trading as Pinelaki, at the address above.
  • Prices: all prices are in euro (EUR). No VAT is added, because GK PSITHYRON LTD is not registered for VAT. Any delivery charge is shown to you before you pay.
  • Your order: placing an order is an offer to buy. The contract is formed when we send you an order confirmation by email. If we cannot fulfil your order we will tell you and refund you in full.
  • Payment: payment is taken at checkout by our payment provider. We never see or store your full card details.
  • Paint mixed to your colour code: our paints, varnishes and sprays are mixed to order from your vehicle’s factory colour code, which makes them goods made to your specification. Article 16(c) of the EU Consumer Rights Directive 2011/83/EU excludes such goods from the standard 14-day right of withdrawal, so they cannot be returned or exchanged once mixed and shipped. Our Return and Refund Policy sets this out in full.
  • If something is wrong: a product that arrives defective, leaking or mixed to the wrong colour by us is replaced at no cost. Contact us within 14 days of delivery with your order number and photos. This is separate from the withdrawal right above and is not affected by it.
  • Governing law: these terms are governed by the law of the Republic of Cyprus, and the courts of Cyprus have jurisdiction. You may also raise a complaint with the Consumer Protection Service of the Cyprus Ministry of Energy, Commerce and Industry.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time and will post any changes on this page. Please review it periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us.

By using our website, you consent to this Privacy Policy.