Last updated: 12 November 2026
1. Who we are
This website, royalsmoke.cy, is operated by Cisales Trading LTD (registration number HE 431884, VAT CY10431884R), registered at Strovolou 77, Strovolos Center, Flat/Office 301, Strovolos 2018, Nicosia, Cyprus. Cisales Trading LTD is the data controller responsible for the personal data described in this policy.
Our store is located at Agiou Andreou 117, Limassol 3036, Cyprus. You can reach us at info@royalsmoke.cy or +357 99 870 857.
2. Who can use this site
Our products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
3. What data we collect and why
Orders and purchases
When you place an order we collect your name, billing and delivery address, email address, phone number, the delivery option and ACS locker or office you choose, and your order details. We use this to process, deliver and support your order, to issue invoices and to meet our accounting and tax obligations. The legal basis is performance of a contract and compliance with a legal obligation.
Payments
Card payments are processed by Viva.com on its secure payment page. We receive confirmation of the payment and limited transaction details, but not your full card number.
Contact and feedback forms
When you send us a message or store feedback we collect your name, email address, phone number if you provide it, and the content of your message. We use this only to answer you and improve our service. The legal basis is our legitimate interest in responding to enquiries.
Launch notification list
Before online ordering opened, we offered to notify visitors by email. Those email addresses were collected with consent only to announce the launch. Contact us at any time to have yours deleted.
Job applications
If you apply for a position, we collect the information you send us and keep it only for as long as needed to consider your application.
Technical and security data
Our hosting provider records standard server logs, including IP address, browser type and pages visited, and our website security software processes IP addresses to block malicious traffic and protect accounts. The legal basis is our legitimate interest in operating a secure website.
4. Cookies
We use only cookies and browser storage that are strictly necessary for the website and store to work, such as your shopping cart, sign-in and your 18+ confirmation. We do not use analytics, advertising or tracking cookies. Details are in our Cookie Policy.
5. Who we share data with
We do not sell your personal data. We share it only where necessary:
- ACS Courier (Cyprus), to deliver your order: your name, delivery address or chosen locker or office, phone number and email address. ACS uses your mobile number to send locker collection codes and delivery updates.
- Viva.com, our card payment provider, to process your payment.
- Hostinger International Ltd, which hosts this website and our email accounts within the EU.
- Google, which serves the fonts used on this website. When a page loads, your browser connects to Google’s font servers, which receive your IP address.
- Authorities, where we are legally required to disclose information.
6. Where your data is stored
Your order and account data is stored on servers within the European Economic Area. Where a service provider may process data outside the EEA, such as font delivery by Google, the transfer relies on appropriate safeguards such as the European Commission standard contractual clauses or an adequacy decision.
7. How long we keep it
Order and invoice records are kept for the period required by Cyprus tax and accounting law. Enquiries and feedback are kept for up to two years. Server and security logs are kept for a short period for security purposes.
8. Your rights
Under the General Data Protection Regulation you have the right to access your data, to have inaccurate data corrected, to have your data deleted, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@royalsmoke.cy. We will respond within one month.
If you believe we have handled your data improperly, you may complain to the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus (dataprotection.gov.cy).
9. Automated decision-making
We do not use your personal data for automated decision-making or profiling.
10. Changes to this policy
We may update this policy when our services or providers change. The date at the top shows when it was last revised.