Privacy policy

Who we are

Jocelyne's Kitchen is operated by Jocelyne Thalassinou, Odos Petraki Giallourou 7, Ayios Dometios, 2373, Cyprus ("we", "us"). We are the controller of the personal data described here. Contact: jocelynethalassinou@hotmail.com.

What we collect

Account details: first name, surname, email address, password (stored only as a secure hash), preferred language and, if you add it, a telephone number.

Bookings: the appointment, date and time, your name, and any optional email address, telephone number or message you give. Guests need only a first name and surname.

Coaching agreements: your full legal name, address, chosen plan, dates, and a record of each electronic signature (typed name, date and time, IP address and browser, and a fingerprint of the signed text).

Payments: handled by Stripe. We receive the payment status, amount, a reference and, where Stripe provides it, a receipt link. We never receive or store your card number.

Technical data: security logs such as IP address for sign-in protection and rate limiting.

We do not ask for health or medical information on this website. Please do not include it in booking messages. Confirm how health information shared during consultations is recorded, stored and protected, and the lawful basis and explicit consent used for it.

Why we use it and our legal basis

To provide the services you request — accounts, bookings, coaching agreements and payments (performance of a contract, or steps before entering into one).

To keep accounting and contract records (legal obligation).

To protect the website and prevent abuse (legitimate interests).

To send occasional news only if you tick the optional box (consent, which you can withdraw at any time).

Who we share it with

Service providers who process data on our behalf: Vercel (website hosting), Supabase (database and private file storage), Stripe (payments) and our email delivery provider. Confirm data processing agreements and hosting regions; prefer EU regions.

We do not sell personal data and we do not use advertising or analytics trackers on this website.

International transfers

Confirm whether any provider processes data outside the EEA and the safeguards relied on (e.g. Standard Contractual Clauses).

How long we keep it

Signed agreements and payment records are kept for as long as the law requires. Confirm the retention period, e.g. the period required by Cyprus tax and accounting rules.

Account data is kept while your account is open. When you ask us to delete your account we remove your personal data except records we must keep by law.

Unpaid booking holds expire automatically.

Your rights

You may ask for access to, correction or deletion of your data, ask us to restrict or stop using it, ask for a copy in a portable format, and withdraw consent at any time. You can make requests from your account settings or by email.

You may also complain to the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

Children

Our services are intended for adults. Confirm the policy for clients under 18.

Changes

We will update this page when our practices change and show the date of the latest version above.