Privacy.
Last updated: 1 November 2026.
Who we are
Living Form is a small studio in Limassol, Cyprus, run by Rafaella Svenstrup. Contact: @livingform_cy on Instagram. We are the data controller for any personal information you share with us.
What we collect
When you order: your name, email, delivery address, phone number, and the order details. When you browse the site: anonymous analytics events (page views, clicks) via PostHog. We do not store payment card details. Stripe handles that and we never see your card.
Why we collect it
Order data is used to fulfil the order, deliver the vessel, send a receipt, and respond if you contact us about the order. Analytics are used to understand how the site is used and improve it.
Lawful basis
Under Article 6 of the GDPR: order data is processed on the basis of contract performance. Anonymous analytics are processed on the basis of our legitimate interest in understanding site use.
Who we share data with
Order processors: Stripe (payment), Supabase (database hosting in the EU). Analytics: PostHog (EU region). None of these processors sell your data; each is bound by GDPR-compliant data processing terms.
How long we keep it
Order records are kept for 7 years to satisfy Cyprus tax and accounting requirements. Analytics events are kept for up to 7 years and are anonymous.
Your rights
You have the right to access, correct, or delete the personal data we hold about you, to ask us to limit how we use it, to object to its processing, and to receive a copy in portable form. Message @livingform_cy on Instagram and we will respond within 30 days.
Cookies
We use a small cart cookie to remember what you have added to the basket. We use PostHog for anonymous analytics. We do not run advertising cookies or third-party trackers.
Complaints
If you believe we have not handled your data correctly, you can contact the Office of the Commissioner for Personal Data Protection in Cyprus at dataprotection.gov.cy.