GDPR & Your Rights

1. Introduction

Beef & Bones processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. Cyprus, as an EU member state, is subject to GDPR.

2. Legal Basis

We process your data based on:

• Contract: To fulfil orders and provide services you request
• Consent: For marketing communications (you can withdraw at any time)
• Legitimate interest: To improve our services and prevent fraud

3. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing at any time

4. Data Protection Officer

For any requests regarding your data rights, please contact us. We will respond within 30 days.

5. Complaints

You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus if you believe our processing of your data violates applicable law.