Your data, handled with care.
This notice explains how Portara Hospitality Ltd. trading as Moments & Co (“we”, “us”, “our”) uses personal data when you enquire about or book a gift experience.
1. Who is responsible
Portara Hospitality Ltd. is the controller of the personal data described in this notice. Contact us at hello@moments.cy.
2. Data we collect
We may collect contact details, booking and event details, delivery details, communications, payment-related information supplied through our payment providers, and preferences relevant to a bespoke experience. Please do not share special-category data unless it is genuinely necessary; if allergies or dietary needs are relevant, provide only what is needed to keep recipients safe.
3. Why we use it
We use data to respond to enquiries, prepare proposals, provide and deliver services, manage payments and records, prevent fraud, improve our service, and meet legal obligations. Our lawful bases are taking steps before or performing a contract, legitimate interests in operating and protecting our business, consent where required, and legal obligations.
4. Who receives it
We share only what is necessary with suppliers, couriers, venues, payment providers, professional advisers and technology providers that help us operate. They must protect the data and use it only for the agreed purpose. We do not sell personal data.
5. International transfers
If a service provider processes data outside the European Economic Area, we will use an approved transfer mechanism or other safeguards required by applicable data-protection law.
6. Retention and security
We keep data only for as long as necessary for the purpose collected, including legal, accounting and dispute-resolution needs. We use reasonable technical and organisational measures to protect it, but no online system can be guaranteed completely secure.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to certain processing. Where processing relies on consent, you may withdraw it at any time. To exercise a right, contact us using the details above.
8. Complaints
You may contact us first so that we can help. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or the supervisory authority where you live or work.
9. Cookies
This prototype does not use analytics or advertising cookies. If tracking, analytics or non-essential cookies are introduced later, this notice and any consent mechanism must be updated before they are enabled.