Privacy Policy
Hearthforge
47 Makarios Avenue
1065 Nicosia, Cyprus
Our Commitment to Data Protection
At Hearthforge, we take your privacy seriously and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and the rights you have regarding your information. We comply with applicable data protection regulations and maintain transparency in all our data handling practices.
This policy applies to all services provided through our website and any communications you have with Hearthforge. By using our services, you acknowledge the practices described in this policy.
Last updated: December 15, 2025
Information We Collect
Information You Provide Directly
When you contact us or use our services, you may provide:
- Contact Information: Name, email address, phone number, and mailing address
- Inquiry Details: Information about your kitchen requirements, equipment needs, and project specifications
- Service Communications: Messages, feedback, and correspondence related to our services
- Payment Information: Billing details processed through secure payment systems (we do not store complete payment card details)
Information Collected Automatically
When you visit our website, certain technical information is collected automatically:
- Device Information: Browser type, operating system, device identifiers, and screen resolution
- Usage Data: Pages visited, time spent on pages, navigation patterns, and referral sources
- Location Data: General geographic location based on IP address (city and country level)
- Cookies and Similar Technologies: Data stored through cookies as described in our Cookie Policy
Information from Third Parties
We may receive information from business partners, analytics providers, and advertising networks to enhance our services and understand how users interact with our website.
How We Use Your Information
We process your personal data for the following purposes:
Service Delivery and Communication
Responding to inquiries, providing quotes, coordinating equipment selection, arranging installations, and maintaining ongoing customer relationships. This includes sending service updates, appointment confirmations, and maintenance reminders.
Website Improvement and Analytics
Understanding how visitors use our website to improve navigation, content, and overall user experience. We analyze usage patterns to identify technical issues and optimize performance.
Marketing Communications
With your consent, we may send information about new equipment offerings, maintenance programs, seasonal promotions, and kitchen design insights. You can opt out of marketing communications at any time.
Legal Compliance and Protection
Maintaining records for tax and accounting purposes, responding to legal requests, protecting against fraud, and enforcing our terms of service. We retain data as required by applicable laws.
Business Operations
Managing customer relationships, processing transactions, coordinating with suppliers and installation partners, and maintaining quality service standards.
The legal basis for processing your data includes contract performance, legitimate business interests, legal obligations, and your explicit consent where required.
How We Share Information
We may share your personal information with:
- Service Providers: Third-party companies that help us operate our business, such as website hosting providers, email services, payment processors, and analytics platforms. These providers are contractually obligated to protect your data.
- Installation Partners: Qualified technicians and contractors who perform equipment installation and maintenance services. We share only the information necessary to complete the service.
- Equipment Suppliers: Manufacturers and distributors when coordinating product orders, warranties, and technical support.
- Legal Authorities: When required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
We do not sell your personal information to third parties for their marketing purposes. Any data sharing is done with appropriate safeguards to protect your privacy.
How We Protect Your Data
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data transmitted between your browser and our servers is encrypted using SSL/TLS protocols. Sensitive information is encrypted at rest.
- Access Controls: Personal data is accessible only to authorized personnel who need it to perform their duties. We use authentication systems and role-based access limitations.
- Regular Security Reviews: We periodically assess our security practices, update software, and monitor for potential vulnerabilities.
- Data Minimization: We collect only the information necessary for stated purposes and retain it only as long as needed.
- Vendor Management: Third-party service providers are evaluated for their security practices and data protection commitments.
While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protections.
Data Retention Periods
We retain personal information for different periods depending on the purpose:
- Customer Records: Information related to equipment purchases and installations is retained for 7 years to comply with warranty obligations and tax requirements.
- Marketing Consent: Stored until you withdraw consent or request deletion.
- Website Analytics: Aggregated usage data may be retained indefinitely, while individual user data is typically retained for 26 months.
- Correspondence: Email communications and inquiry records are retained for 3 years unless longer retention is required for legal purposes.
When data is no longer needed, it is securely deleted or anonymized. You may request earlier deletion subject to our legal obligations.
Your Privacy Rights
Under data protection regulations, you have the following rights regarding your personal information:
Right to Access
Request a copy of the personal data we hold about you, including information about how it's being used and who it's shared with.
Right to Rectification
Request correction of inaccurate or incomplete personal information in our records.
Right to Erasure
Request deletion of your personal data when it's no longer necessary for the purposes collected, or when you withdraw consent (subject to legal retention requirements).
Right to Data Portability
Receive your personal data in a structured, commonly used format and transmit it to another service provider.
Right to Object
Object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Right to Restrict Processing
Request limitation of how we process your data in certain circumstances, such as while we verify data accuracy.
Right to Withdraw Consent
Withdraw consent for data processing activities that require consent, such as marketing communications. This doesn't affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, or inform you if additional time is needed.
International Data Transfers
Our operations are based in Cyprus. Some of our service providers may be located in other countries. When transferring personal data outside Cyprus or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or other legally valid transfer mechanisms.
These safeguards ensure your data receives protection equivalent to what is provided within the EEA, regardless of where it's processed.
Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.
Your Rights and Opt-Out Instructions
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- Avoid filling out contact forms, account registrations, or any data-submitting features
- Disable cookies through your browser settings (see our Cookie Policy for more details)
- Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly and confirm completion within 30 days.
For marketing communications, you can unsubscribe at any time using the link provided in our emails or by contacting us directly.
Changes to This Privacy Policy
We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, providing additional notice such as an email announcement or website banner.
We encourage you to review this policy regularly to stay informed about how we protect your information. Your continued use of our services after policy updates constitutes acceptance of the revised terms.
Contact Us About Privacy
If you have questions about this privacy policy or want to exercise your privacy rights, please contact us:
Email: info@domain.com
Phone: +357 22 847 361
Mail: Hearthforge, 47 Makarios Avenue, 1065 Nicosia, Cyprus
We aim to respond to all privacy inquiries within 5 business days and will work with you to address your concerns appropriately.