Privacy & Cookie Policies

AGORATOPIA is committed to protecting your personal information. It’s your information, and we respect that. Our Privacy Policy gives you detailed information on when and why we collect your personal information, how we use it and how we keep it secure. This Privacy Policy also sets out your right to request that we delete, update, transfer or provide you with access to your personal information. This Privacy Policy should be read alongside our Terms & Conditions. Please also note that this Privacy Policy only applies to personal information obtained by us – not information collected from your interactions with third parties.

The Sites (Stores, Website and App), and our Services (e.g. Personal Shopping, Alterations, etc.) are operated by AGORATOPIA

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, please contact us by:

• Completing our online contact form: https://www.agoratopia.com/contact-us
• Sending an e-mail to dataprotectio[email protected] (Helen Soteriou, Data Protection Officer

AGORATOPIA is the data controller responsible for your personal information and is registered at the Cyprus Information Commissioner’s Office.

AGORATOPIA is a Cypriot company with registered company number: 12172175L and whose registered office is at 26 Georgiou A, 4047 Limassol, Cyprus.

Generally, we collect your information when you decide to interact with us. This could include purchasing online, over the phone, in person when you sign up to receive emails from us. We also look at how customers use our website, so that we can offer the best possible experience.

We collect information in a number of ways which are listed below:

• When you register or use agoratopia.com (the “Website”)
• When you register or use AGORATOPIA’s in-store WiFi (in any of our stores)
• When you register or use the AGORATOPIA’s App (the “App”)
• When you are registered on the AGORATOPIA customer relationship management system in store
• When you contact AGORATOPIA by telephone or email
• When you register or use AGORATOPIA’s in-store shopping services (e.g. personal shopping)
• When you enter any event, prize draws or competitions run by AGORATOPIA
• When completing any surveys that we send to you for research purposes (although you are under no obligation to complete these)
• When completing any forms for transactional, employment or other purposes
• When you buy products, gift certificates (details of transactions you make from AGORATOPIA (whether in-store or via the Website or App)
• When you make a booking at one of our restaurants, bars, beauty, or any other areas.
• When you visit our website: we may use cookies to help make the experience of using our website better and to personalize the service you receive from us – this means we will remember your previous visits and track the pages on our website that you visit. For more information please see our Cookie Policy. When you visit www.agoratopia.com the AGORATOPIA web server may automatically record your public internet protocol (‘IP’) address.
• From time to time, we may also get data about you from third parties. This could include other partners that we have run partnerships, competitions and events with.

We only collect the information that’s necessary to carry out our business, provide the particular service you’ve requested and to keep you up to date about all the latest exciting AGORATOPIA news.

Here are some examples of information we collect about you when you interact with us (as detailed in point 3):

• Title
• Name and Surname
• Email address
• Date of Birth
• Contact phone number(s)
• Purchase information
• Interactions with us e.g. contacting our Customer Service
• Payment details
• Delivery address(s)
• Billing address
• Attendance at events
• Preferred store, categories and brands
• Appointment booking and information given during appointment
• Alternations and repair requests
• Automatically populated IP address*
• Information from cookies**

* When visiting our website we may collect an automatically populated IP address. An IP address is a unique number which allows a computer, group of computers or other internet connected device (such as your mobile or tablet) to browse the internet. We may also record the time and date of your visit, the pages that were requested, the referring website (if provided) and your internet browser version.

** For further information about Cookies and how AGORATOPIA uses them, please read our Cookie Policy below (Section 2).

Information we obtain independently from you:

Your information may be shared with us by independent organisations, for example other organisations that AGORATOPIA has worked with. These independent organisations will only do so when there is a lawful basis to do so. You should check their Privacy Policy when you provide your information to them, to understand fully how they will process and safeguard your data. These independent organisations may include:

A. Third Party Organisations
We may combine information you have given to us with additional information made available from / shared with us by external sources. This will only be done when we both have a lawful basis to do so.

B. Information updates
From time to time we may screen our database against recognised data files such as National Change of Address file to help us keep our database up to date.

C. Social Media
Depending on your settings or the privacy policies for social media and messaging services like Facebook, WhatsApp or Twitter, you may give us permission to access information from those accounts or services.

D. Information available publicly
We may include information found in places such as Companies House and information that has been published in for example articles/newspapers/online.

In order for our use of your personal information to comply with applicable data protection law, that use by us needs to fall under at least one of the specific lawful reasons that are set out in applicable data protection law. Examples of these lawful reasons include our use of your personal information being necessary for the purchase of goods or services, or for compliance with a legal obligation

Where your personal information is completely anonymised, we do not require a legal basis to use it as the information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised personal information may be subject to other laws where your consent is required.

Where your personal information is not in an anonymous form, we will have a lawful reason to use your personal information in such a way to ensure that we provide the very best products to you and our other customers.

At AGORATOPIA we like to get to know our customers – after all, this is how we find new ways to provide you with an extraordinary experience. We use information about you in a number of ways, including providing services that you have requested, offering you a personalised experience and informing you about special events or exciting AGORATOPIA news. We might also use the information we have to contact you about any information we might need to process your orders, returns or queries.

1.6.1. To carry out our business and to provide a service or carry out a contract with you:

Fulfilment of and delivery of products and services you have ordered. We may share your personal information with our delivery partners and third party concessions.

• Process payments. AGORATOPIA does not store any payment card numbers once the transaction has been completed. We share your personal information with credit card companies and other payment providers.
• Contact you with important information relating to your booking or purchase, such as confirming your order, letting you know about returns and refunds. We share your information with our communication partners for this purpose.
• Process your tax free rebates. We share your personal information with HMRC.

1.6.2. Where we have your consent:

• Send you marketing updates via email about all the latest news, events and offers at AGORATOPIA. You can unsubscribe at any time by clicking the link in any email. We share your personal information with a variety of third party email marketing providers who assist us in delivering our email marketing campaigns to you. Third Parties include: Smart focus, Salesforce.
• Use your details to show you advertising on such Social Media platforms as Facebook and Instagram or via other third party advertising that may appear on other websites you use. Online advertising channels we may use are: digital display, video on demand, search engine marketing, paid social – these are all on third party sites or platforms.
• We may tailor emails and online advertising to the things you love, so they’re relevant to your location, what you have shown an interest in and the things you buy from us.

1.6.3. Where we have justifiable reason (legitimate interest):

• Events. We share your personal information with any applicable third party hosting the event and ticketing companies such as Eventbrite.
• Respond to customer service enquiries raised in the store, online, social media or on the phone. Ansaback operates our Customer Service and use case management systems such as Salesforce.
• Send an abandoned basket email via a third party supplier, Sales Cycle.
• Invite you to provide feedback about our products and services in the form of online, email, or in-store surveys. We use this information to help us improve the quality of service provided; to monitor the quality of our products and services and to assist with the selection of future product and service lines. We use a third party service provider to assist us with customer surveys and feedback requests. Our third party provider ‘Medallia’ is located in the USA and their use of your personal information is governed by EU Model Contracts and/or US Privacy Shield.
• Conduct postal marketing. We share your personal information with a variety of third party postal providers who assist us in delivering our postal marketing campaigns to you, including the post office.
• Analyse aggregated customer information with other interactions customers have with AGORATOPIA in order to continually improve the products and services we offer through our stores; website and app. We do this using Google Analytics, IBM Core Metrix, Maxymiser, Salesforce
• For classifying our audience into groups or segments, using shopping habits information regarding your personal or professional interests, demographics, experiences with our products and contact preferences. These segments help us to understand our audience better. We do this using Customer Relationship Management systems such as Salesforce.
• Use of our in-store Wi-Fi; automatic re-connection when you return into the store. A MAC address to monitor Sites traffic and volume. We do this using Iqunity.
• Anonymous track usage statistics on our Sites. By using this information, we are able to measure the effectiveness of our content and how visitors use our Sites and our Services. This allows us to learn what pages to target our adverts so that they’re more relevant to you. We do this using Iqunity.
• Measure and understand how our customers respond to a variety of marketing activity so we can ensure our activity is well targeted, relevant and effective. We share this information with DC Storm.
• To help us run the test version of our website that we use internally to pilot new features and ensure the smooth running of our web services. We do this using Maximiser.
• To keep our database accurate and relevant, we may do this for example, using National Change of Address.
• The use of CCTV recording equipment in and around our premises for monitoring and security purposes. We may share where necessary CCTV footage to the Police and HMRC in particular. This is very strictly controlled.
• Detect and reduce fraud and credit risk.

Where we have collected your contact details in the process of a sale (or negotiations of a sale) either in store or online, of a product or service, AGORATOPIA will have GDPR compliant permission to send you email marketings. We will only send you emails to market AGORATOPIA’s products and services.

You will be able to say no to receive these emails when we first collect your contact details and you will be able to unsubscribe in every subsequent communication from us.

We use third party platforms to manage and deliver customer relationship management (CRM); email marketing campaigns; online advertising, customer analytics, events; booking of appointments, fulfilment of orders, delivery, returns, refunds, IT services; etc. In providing the services, your personal information will, where applicable, be used by the service provider on our behalf.

We will check any third party that we use to ensure that they can provide sufficient guarantees regarding the confidentiality and security of your personal information. We will have written contracts with them which provide assurances regarding the protections that they will give to your personal information and their compliance with our data security standards and international transfer restrictions.

In certain circumstances, we share and/or are obliged to share your personal information for business administration and legal compliance purposes with third parties outside AGORATOPIA.

We may use your personal information in connection with a business transition (such as a merger, acquisition by another company, or a sale of all of or portion of our assets), to enforce our legal rights and or to protect the rights of third parties and it is in our legitimate interest to do so. In such instances it will be necessary to share your personal information with external professional advisors such as lawyers and accountants, or insurers or financial institutions.

We may use your personal information for legal compliance purposes and to enforce our legal rights. In such instances it will be necessary to share your personal information with external parties such as administrative authorities (HMRC), police and public prosecutors or to comply with a court order. It is our legal obligation to do so.

We would be sad to say goodbye, but if at any point you do not wish to hear from us there are a number of ways you can unsubscribe.

These are as follows:

• You can click onto the “unsubscribe” link in any communication that we send to you by email which will automatically unsubscribe you from that type of communication. Each “unsubscribe” link only relates to that specific type of communication (e.g. marketing communications or survey communications). This means that unsubscribing from marketing communications will not automatically unsubscribe you from our survey communications (or vice versa). Please also note that you may continue to receive communications which are already on route to you for a short period of time while your relevant unsubscribe request is being processed.
• In relation to the App, you can manage your preferences and select to opt out from one or all of the different push notifications by disable in phone settings.
• Alternatively, you can contact our customer services by calling 25322570 (+357 25322570 from overseas), during opening hours or by using our online form: https://www.agoratopia.com/contact-us.

Please note that in relation to our in-store CRM system, you can ask a team member in any one of our stores to update your preferences (e.g. you can specify that you are happy for us to send you e-receipts, but that you would prefer not to be included on our marketing mailing list, or vice versa). However, should you wish for your details to be removed from our CRM system completely, then you will need to contact our customer services using the contact details above.

The Website and App may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and AGORATOPIA does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal details to these websites.

Our website, app and emails contain certain cookies, pixels, records and other technologies of which you should be aware.

Our website, app and emails contain links to third party websites and services. Please remember that when you use a link to go from our Sites to another website or you request a service from a third party, this Privacy Policy no longer applies.

Your browsing and interaction on any other websites, or your dealings with any other third party service provider, is subject to that website’s or third party service provider’s own rules and policies.

We do not monitor, control, or endorse the privacy practices of any third parties.

We encourage you to become familiar with the privacy practices of every website you visit or third party service provider that you deal with and to contact them if you have any questions about their respective privacy policies and practices.

This Privacy Policy applies solely to personal information collected by us through our Service and does not apply to these third party websites and third party service providers.

Customers need to be over 18 years old to create an account with us and to sign up to receive our newsletter. We do not knowingly collect Personal Data from children under the age of eighteen (18). If you are under the age of eighteen (18), please do not submit any Personal Data through the Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data through the Services without their permission. If you have reason to believe that a child under the age of 18 has provided Personal Data to us through the Services, please email us at, [email protected] (Helen Soteriou, Data Protection Officer); and we will endeavour to delete that information from our databases.

We keep your personal information in line with our company retention policy. We only retain information for as long as it is required.

We are committed to keeping the personal information you provide to us secure and we will take reasonable precautions to protect your personal information from loss, misuse or alteration. We do not sell your personal information for any purpose.

We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:

• unauthorised access;
• improper use or disclosure;
• unauthorised modification; and
• unlawful destruction or accidental loss.

All of our employees and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of the personal information of all users of our Services.

You have the following rights in relation to the personal information we hold about you:

1.16.1. Your right of access

If you ask us, we’ll confirm whether we’re processing your personal information and, if so, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.

1.16.2 Your right to correct information

You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

1.16.3. Your right to delete information

You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If we’ve shared your personal information with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

1.16.4. Your right to restrict information

You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances such as where you contest the accuracy of that personal information or you object to us processing it. It won’t stop us from storing your personal information though. We’ll tell you before we lift any restriction. If we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

1.16.5. Your right to data portability

With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

1.16.6. Your right to object

You can ask us to stop processing your personal information, and we will do so, if we are:

• Relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or
• Processing your personal information for direct marketing.

1.16.7. Your rights in relation to automated decision-making and profiling

You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us

1.16.8. Your right to withdraw consent

If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.

1.16.9. Your right to lodge a complaint with the supervisory authority

If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the CY Information/Data Protection Commissioner’s Office (www.dataprotection.gov.cy).

We may make changes to this Privacy Policy from time to time.

To ensure that you are always aware of how we use your personal information we will update this Privacy Policy from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. We will notify you by e-mail of any significant changes. However, we encourage you to review this Privacy Policyperiodically to be informed of how we use your personal information.

A cookie is a small amount of information that’s downloaded to your computer or device when you visit certain websites. We use a number of different cookies on the Shopify website, including strictly necessary, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor. Read more about cookies (and other similar tracking technologies) and how we use the data collected through these technologies, in our Privacy Policy.

Some cookies are necessary to allow you to browse our website, use its features, and access secure areas. The use of these cookies is essential for the website to work. For example, we use user-input cookies for the duration of a session to keep track of a user’s input when filling in forms that span several pages.

We also use functional cookies to remember choices you’ve made or information you’ve provided, such as your username, language, or the region you are in. This allows us to tailor your website experience specifically to your preferences. For example, authentication cookies are functional cookies that are used for the duration of a session (or persistent, if you agree to the “remember me” function) to allow users to authenticate themselves on subsequent visits or to gain access to authorized content across pages. The functional cookies we use include:

• User-centric security cookies to detect authentication abuses for a limited persistent duration, like repeated failed login attempts. These cookies are set for the specific task of increasing the security of the service.
• Multimedia content player session cookies (flash cookies) are used for the duration of a session to store technical data needed to play back video or audio content (e.g. image quality, network link speed, and buffering parameters).
• Load balancing session cookies are used for the duration of the session to identify the same server in the pool in order for the load balancer to redirect user requests appropriately.
• User interface customization persistent cookies are used to store a user’s preference regarding a service across web pages.

AGORATOPIA is dedicated to user experience and we use many tools to help us improve our website and our commerce platform. To this end, we use reporting and analytics cookies to collect information about how you use our website or our merchants’ storefronts, and how often. These cookies only gather information for statistical purposes and only use pseudonymous cookie identifiers that do not directly identify you. The performance cookies we use include:

• First party analytics cookies – We use these cookies to estimate the number of unique visitors, to improve our websites and our merchants’ websites, and to detect the most searched for words in search engines that lead to a webpage. These cookies are not used to target you with online marketing. We use these cookies to learn how our websites and our merchants’ websites are performing and make relevant improvements to improve your browsing experience.
• Third party analytics cookies – We also use Google Analytics and other third-party analytics providers listed below to help measure how users interact with our website content. These cookies “remember” what our users have done on previous pages and how they’ve interacted with the website. For more information on Google Analytics, visit Google’s information page. For instructions on how opt out of Google Analytics, see below.

Advertising cookies are used on our website to tailor marketing to you and your interests and provide you with a more personalized service in the future. These cookies remember that you visited our website and we may share this information with third-parties, such as advertisers. Although these cookies can track your device’s visits to our website and other sites, they typically cannot personally identify you. Without these cookies, the advertisements that you see may be less relevant and interesting to you. Read more about how companies use cookies to conduct targeted or retargeted advertising here. We do not set advertising cookies through our merchants’ storefronts ourselves, though merchants may choose to do so independently.

Finally, Social and Content cookies are placed by many social media plugins (for example the Facebook ’like’ button), and other tools meant to provide or improve the content on a website (for example services that allow the playing of video files, or that create comments sections). We integrate these modules into our platform to improve the experience of browsing and interacting with our websites. Please note that some of these third party services place cookies that are also used for things like behavioural advertising, analytics, and/or market research.

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device. See the section below on how to control cookies for more information on removing them before they expire.

You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.

Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.

Many of the third party advertising and other tracking services listed above offer you the opportunity to opt out of their tracking systems. You can read more about the information they collect and how to opt out through the privacy policy links listed above.