Your data, handled with care.
This notice explains how Portara Hospitality Ltd. trading as Moments & Co (“we”, “us”, “our”) uses personal data when you enquire about or book a gift experience.
1. Who is responsible
Portara Hospitality Ltd. is the controller of the personal data described in this notice. Contact us at hello@moments.cy.
2. Data we collect
We may collect contact details, booking and event details, delivery details, communications, payment-related information supplied through our payment providers, and preferences relevant to a bespoke experience. Please do not share special-category data unless it is genuinely necessary; if allergies or dietary needs are relevant, provide only what is needed to keep recipients safe.
3. Why we use it
We use data to respond to enquiries, prepare proposals, provide and deliver services, manage payments and records, prevent fraud, improve our service, and meet legal obligations. Our lawful bases are taking steps before or performing a contract, legitimate interests in operating and protecting our business, consent where required, and legal obligations.
4. Who receives it
We share only what is necessary with suppliers, couriers, venues, payment providers, professional advisers and technology providers that help us operate. They must protect the data and use it only for the agreed purpose. We do not sell personal data.
5. International transfers
If a service provider processes data outside the European Economic Area, we will use an approved transfer mechanism or other safeguards required by applicable data-protection law.
6. Retention and security
We keep data only for as long as necessary for the purpose collected, including legal, accounting and dispute-resolution needs. We use reasonable technical and organisational measures to protect it, but no online system can be guaranteed completely secure.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to certain processing. Where processing relies on consent, you may withdraw it at any time. To exercise a right, contact us using the details above.
8. Complaints
You may contact us first so that we can help. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or the supervisory authority where you live or work.
9. Cookies and advertising measurement
We use the Google tag, Meta Pixel, Meta Conversions API and PostHog to understand how people use our website, measure completed enquiries and improve our advertising. With your permission, Google and Meta may store or read cookies and process information such as pages viewed, form engagement, approximate location, device information and advertising interactions. After you accept optional measurement, page views, contact-link clicks and questionnaire starts may be sent to Meta from both your browser and our server with browser identifiers, IP address and user agent. When you successfully submit an enquiry, the server event also includes your email address, phone number and name in hashed form to match the enquiry to advertising. We do not send Meta your questionnaire answers or free-text notes. Optional advertising and analytics storage is denied unless you select “Accept” in our privacy choices. If you decline, Google may still receive limited consent-mode signals without advertising or analytics cookies; the Meta Pixel, Meta Conversions API and PostHog do not run. PostHog measures campaign attribution, pages, clicks, scroll depth, questionnaire progress and successful enquiries, and provides heatmaps and session recordings with form inputs masked. We do not send enquiry answers or contact details to PostHog. Approximate country, region and city may be derived from your IP address; this is not precise GPS location. Meta and PostHog tracking starts only after you accept optional measurement. You can change or withdraw your choice using the “Privacy choices” button on the site. For more information, see Meta’s Privacy Policy, PostHog’s privacy notice and How Google uses information from sites or apps that use its services.