Privacy policy

Last updated: 29 April 2026

This Privacy Policy explains how pluxena.com (the "Store") collects, uses, shares and protects your personal data, and what rights you have regarding that data. It also describes how we use cookies and similar technologies.

We respect your privacy and we want you to feel comfortable shopping with us. If anything is unclear, please write to us at hello@pluxena.com.

1. Who is the data controller?

The data controller of your personal data is:

Marotino CY LTD Evripidou 9A 3031 Limassol Cyprus VAT: CY60017620T

Contact e-mail for all data-protection matters: hello@pluxena.com.

References in this Policy to "we", "us" or "our" mean Marotino CY LTD.

2. Scope of this Policy

This Policy applies to personal data we collect when you:

visit, browse or interact with the Store,
place an Order or attempt to place an Order,
create an account or subscribe to our newsletter,
contact us by e-mail or through any form on the Store,
engage with us on third-party platforms linked to the Store.

The Store is intended for adults. We do not knowingly collect personal data of persons under 16 years of age. If you believe a child has shared data with us, please contact us so we can delete it.

3. What data do we collect?

We collect only the data we need. Depending on how you interact with the Store, this may include:

Identification and contact data: first and last name, billing and delivery address, e-mail, phone number (if provided for delivery), language and country of residence.

Order and transaction data: Products ordered, Order number, total amount, currency, delivery method, payment method, transaction date, returns and complaints history.

Payment data: information necessary to process payment is handled directly by our payment service provider. We receive only confirmation of the transaction (success/failure), partial card details (e.g. last four digits, card brand) and any related identifier needed for accounting and fraud-prevention purposes.

Account data: if you create an account: login e-mail, password (in encrypted form), preferences, saved addresses.

Communication data: content of e-mails, messages and forms you send to us, including any data you choose to include there.

Technical and usage data: IP address, device and browser type, operating system, language settings, time zone, referrer URL, pages visited, searches performed, items added to or removed from cart, time spent on the Store, and other diagnostic data collected through cookies and similar technologies (see Section 9).

Marketing data: marketing preferences, opt-in/opt-out status, interactions with our newsletters or marketing messages.

4. Where do we get your data from?

In most cases, we collect data directly from you when you fill in forms or interact with the Store. We may also receive data:

automatically through cookies and similar technologies,
from our service providers (e.g. payment, fraud-prevention, shipping, e-commerce platform, analytics),
from publicly available sources, where lawful.

5. Why do we use your data, and on what legal basis?

We process your data only for clearly defined purposes and with a valid legal basis under the GDPR or equivalent applicable law.

To execute your Order and the contract of sale (incl. processing payment, arranging delivery, handling returns, complaints and warranty) — legal basis: performance of a contract with you (Art. 6(1)(b) GDPR), or steps taken at your request prior to entering into a contract.

To run, operate and secure the Store (incl. account management, technical maintenance, fraud prevention, abuse prevention, security monitoring) — legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in operating a safe, reliable Store.

To comply with legal obligations (incl. accounting, tax, consumer-protection record-keeping, cooperation with public authorities) — legal basis: legal obligation (Art. 6(1)(c) GDPR).

To respond to your messages and requests (incl. customer service, complaints, withdrawal, data-subject requests) — legal basis: performance of a contract or our legitimate interest in providing customer service.

For direct marketing of our own similar Products (e.g. e-mail communications, where allowed under applicable law) — legal basis: our legitimate interest, or your consent where required.

For marketing requiring consent (e.g. newsletter subscription, marketing cookies, profiling for advertising) — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

To analyse and improve the Store (incl. analytics, A/B testing, performance monitoring) — legal basis: your consent for non-essential cookies, or our legitimate interest in improving our offering, where the law allows.

To establish, exercise or defend legal claims — legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

We do not sell your personal data.

We share your data only to the extent necessary, with categories of recipients such as:

the e-commerce platform that hosts the Store and provides related infrastructure,
the payment service provider(s) that process your payments,
shipping and logistics service providers that deliver your Order on our behalf,
communication and customer-service tools (e.g. e-mail, messaging),
analytics, marketing and advertising service providers, where permitted,
accounting, tax, audit and legal advisors,
public authorities, courts and regulators where we are legally required to share data,
a successor entity in case of a corporate transaction (e.g. merger, acquisition, restructuring), subject to applicable law.

We choose service providers that offer adequate guarantees of data protection and we conclude with them the data-processing agreements required by law.

7. International data transfers

Some of our service providers may be located outside the European Economic Area ("EEA"). Where this is the case, we ensure that an adequate level of protection is maintained, in particular by relying on:

adequacy decisions of the European Commission,
Standard Contractual Clauses approved by the European Commission,
other lawful safeguards required by applicable law.

You can request more information on these safeguards at hello@pluxena.com.

8. How long do we keep your data?

We keep your data only for as long as needed for the purposes for which it was collected, including legal, accounting and reporting obligations. As a guideline:

Order and transaction data — for the period required by accounting and tax law (typically up to 10 years from the end of the relevant fiscal year, depending on jurisdiction).
Account data — for as long as your account is active, plus a reasonable period after deletion to handle legal and security requirements.
Communication data — generally for up to 3 years from the last interaction, unless a longer retention period is needed for legal reasons.
Marketing data — until you withdraw consent or object, plus a short retention period to evidence the withdrawal.
Cookies and technical data — see the cookie table in Section 9 and your browser settings.
Data necessary for legal claims — until claims are time-barred under applicable law.

After these periods, we delete or anonymise your data.

9. Cookies and similar technologies

A cookie is a small text file placed on your device when you visit a website. We also use other similar technologies such as pixels, local storage and SDKs. We refer to all of these collectively as "cookies".

9.1 Categories we use

Strictly necessary cookies — required for the Store to function (e.g. shopping cart, checkout, login session, security, load-balancing). These cannot be turned off in our system; they are set in response to actions made by you. Legal basis: legitimate interest / contract performance.

Functional cookies — remember your preferences (language, currency, country, recently viewed Products) to personalise your experience. Legal basis: consent, where required.

Analytics cookies — help us understand how visitors interact with the Store, measure performance and improve usability. We use them in aggregated form whenever possible. Legal basis: consent, where required.

Marketing and advertising cookies — used to deliver advertising relevant to you on the Store and on third-party platforms, and to measure the effectiveness of campaigns. Legal basis: consent.

The exact list of cookies actually used in the Store, including names, providers, purposes and retention periods, is available in the cookie banner / preference centre on the Store.

9.2 Your choices

When you first visit the Store, we ask for your consent for non-essential cookies. You can:

accept all,
reject all non-essential cookies,
choose by category in the preference centre.

You can change your choices at any time through the cookie preference link available on the Store, or by deleting cookies and adjusting the settings of your browser. Disabling certain cookies may affect the functionality of the Store.

10. Marketing communications

If you sign up for our newsletter or otherwise opt in to marketing communications, we may send you information about Products, promotions, news and content we believe may interest you, by e-mail or other electronic channel.

You can unsubscribe at any time, free of charge, by:

clicking the "unsubscribe" link in any marketing e-mail,
adjusting preferences in your account, where available,
writing to us at hello@pluxena.com.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Your rights

Subject to applicable law (in particular the GDPR, where it applies to you), you have the right to:

access your data and obtain a copy,
rectification of inaccurate or incomplete data,
erasure ("right to be forgotten"), in certain cases,
restriction of processing, in certain cases,
data portability — to receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller, where applicable,
object to processing based on legitimate interest, including profiling, and at any time to processing for direct marketing,
withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal,
lodge a complaint with a supervisory authority, in particular in the EU country of your habitual residence, place of work, or place of the alleged infringement. In Cyprus, the supervisory authority is the Office of the Commissioner for Personal Data Protection.

To exercise any of these rights, please contact hello@pluxena.com. We may need to verify your identity before fulfilling your request. We respond within the deadlines required by applicable law (under the GDPR, normally within one month, with a possible extension where allowed).

12. Automated decision-making and profiling

We do not subject you to decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you, unless this is necessary for the conclusion or performance of a contract with you, authorised by law, or based on your explicit consent. We may use limited profiling for fraud prevention, personalisation and marketing analytics, in accordance with applicable law and your cookie preferences.

13. Security

We apply technical and organisational measures designed to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encryption in transit, access controls, regular reviews and contracts with our service providers requiring an appropriate level of security.

No method of transmission over the internet or electronic storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

14. Third-party links

The Store may contain links to third-party websites, services or platforms. This Policy does not apply to those third parties. We recommend that you review the privacy notices of any third-party services before sharing personal data with them.

15. Changes to this Policy

We may update this Policy from time to time. The latest version will always be available on the Store, with the "Last updated" date at the top. Where required by law, we will notify you of material changes in advance.

16. Contact

For any questions or requests regarding this Policy or your personal data, please contact us at:

E-mail: hello@pluxena.com
Postal address: Marotino CY LTD, Evripidou 9A, 3031 Limassol, Cyprus