Privacy Policy

The data controller for this website is Arax | Armenian & Lebanese Bakery, Ermou 186, Larnaca 6022, Cyprus. You can reach us by phone on +357 24 046442, on Instagram @arax_bakery, or in person at the shop.

This policy follows the EU General Data Protection Regulation (GDPR), which applies in Cyprus.

We do not ask you to register, sign up, or fill in anything on this website.

We do not collect your name, email address, postal address, or payment details here. We do not run a newsletter and we do not build advertising profiles about you.

What may still be recorded automatically while the site loads:

• Technical access data kept by our hosting provider for security and diagnostics — IP address, browser and device type, the pages requested, and the time of the visit.
• The request your browser sends to Google when it loads our fonts and the map on the "Visit Us" section, which reveals your IP address to Google.
• Your place in line, order and payment details — but only inside Bolt Food, if you order through them. We never see your card number.

To keep the website working and secure, to spot and fix errors, to understand which pages and menu sections people actually read, and to answer enquiries you start yourself by calling us or messaging us. The legal basis for the automatic technical data is our legitimate interest in operating a secure, functioning website (GDPR Article 6(1)(f)). Anything that needs your consent — mainly third-party content — is explained in our Cookie Policy.

This website does not place its own cookies on your device. The only thing stored locally is a small marker in your browser's session storage that remembers which holiday-notice banners you dismissed; it disappears when you close the tab. Third-party services we link to (Google Fonts, the Google Maps embed, and Bolt Food) can store information in your browser once you use them. Full details, including how to control them, are in our Cookie Policy.

We never sell your data and never share it for advertising. We only work with the services needed to run the site and take orders:

• Google — serves our web fonts and the map on the "Visit Us" section.
• Bolt Food — handles delivery orders, including your contact details, order and payment, under Bolt's own privacy policy.
• Our hosting provider — stores and serves the website and keeps access logs.

Hosting access logs are kept for up to 30 days and then removed, unless we need them longer to investigate an abuse report. The banner-dismissal marker lives only for the browsing session. We keep nothing about you personally on this site beyond that.

Under the GDPR you can ask us to:

• confirm whether we hold personal data about you, and give you a copy;
• correct anything inaccurate;
• delete it;
• limit or stop certain processing;
• hand your data to someone else in a usable format;
• withdraw consent at any time where consent was the basis.

Asking costs nothing. Phone is the quickest route: +357 24 046442. We may need to confirm who you are before answering, and we will reply within one month.

If you think we have mishandled your data, tell us first — most things get solved at the counter. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy), the supervisory authority for GDPR matters.

This site is a shop front, not a service aimed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, call us and we will remove it.

We may update it, for example when we add a new service to the site. The date at the top of this page always shows the current version, so checking that date is enough.