GDPR & data protection
Updated 30 September 2026
Your rights
Under the GDPR, you can request access to your personal data, correction, deletion, restriction of processing and, where applicable, a portable copy. You may object to processing based on legitimate interests and to direct marketing. Rights depend on the circumstances and may be subject to legal exceptions.
Make a privacy request
Contact ICON Beauty Space at 36 Hellados Avenue, 8020 Paphos, Cyprus, or call +357 96 644496. You can also message us on WhatsApp. Describe the request and the contact details used for your appointment. Do not send identity documents or sensitive information unless specifically requested through an appropriate channel. Reasonable identity checks may be needed to protect your information.
Response times and consent
GDPR requests normally require a response within one month. Complex or numerous requests may allow an extension of up to two further months, with notice and reasons within the first month. Requests are normally free. If processing relies on consent, you can withdraw it at any time without affecting processing that was lawful before withdrawal.
Website choices
ICON does not add separate advertising pixels or analytics scripts. Booking buttons take you to Altegio’s website. External social and map links open their own services. Brand logos hosted on external image servers can send those servers your IP address and browser request information when loaded. This website does not make automated decisions with legal or similarly significant effects.
The homepage uses a locally hosted background video. It attempts muted inline autoplay and provides a pause control. Visitors who prefer reduced motion can choose to play it. The optional “Watch film” link opens YouTube only when selected.
Raise a concern
You may complain to the Cyprus Commissioner for Personal Data Protection or the supervisory authority where you live or work, or where you believe an infringement occurred. You do not need to contact ICON first. This page explains your rights and the website’s current features; it is not a certification of the salon’s overall GDPR compliance.