Privacy Policy

1. Who we are

The data controller responsible for this Site is:

SMM LUXURY DEVELOPERS LTD
Georgiou Christofidi, 1, PARSON COMPLEX NO. 2, Flat/Office 11, 6022, Larnaca, Cyprus
Registration number: HE 364855
Email: [email protected]

2. What this Site does and doesn't collect

This Site has two forms.

The sign-up on /signup (also shown inline on the Home and Boutique pages). If you use it, we store the email address you enter, the interests you tick (Kamaya Festival 2027, Kamaya Boutique), the city you give for Boutique presales, the page you signed up from and any campaign tags in the link you arrived with. We use this to write to you about the things you asked for and for nothing else; you can unsubscribe from every email.

The contact form on /contact. If you use it, we store the topic you pick, your name, your email address and your message, and send them to our team so we can reply. We use these details only to answer you.

Both forms are protected by Cloudflare Turnstile, which checks in the background that a submission comes from a person and not a bot. It does not use cookies to track you; the check is processed by Cloudflare. Learn more at Cloudflare's Privacy Policy.

There is no account creation and no checkout on this Site.

Ticket sales are handled entirely by our third-party ticketing partners (rsrvin.com for Cyprus; the partner named on each event page), which have their own privacy policies governing any information you provide during purchase. We encourage you to review their policy separately before buying tickets.

This Site also collects technical and behavioural information through cookies and similar tracking technologies, described below.

3. Cookies and tracking technologies

We only load the tools below after you give consent via the cookie banner on this Site. If you decline, none of the following are loaded, with the technical caveat noted in Section 7.

Google Tag Manager is a tag management system that can, in turn, load additional measurement tags such as Google Analytics. It does not itself collect personal data but acts as a delivery mechanism for the other tools listed here.

Google Ads is used to measure the effectiveness of our advertising campaigns and to show you relevant ads about KAMAYA on other sites you visit, via cookies and similar identifiers. Data collected is processed by Google Ireland Limited. Learn more at Google's Ads Privacy & Terms.

Meta Pixel is used to measure the effectiveness of our advertising on Facebook and Instagram, and to show you relevant ads about KAMAYA on those platforms. Data collected is processed by Meta Platforms Ireland Limited. Learn more at Meta's Privacy Policy.

TikTok Pixel is used to measure the effectiveness of our advertising on TikTok, and to show you relevant ads about KAMAYA on that platform. Data collected is processed by TikTok Information Technologies UK Limited / TikTok Pte. Ltd. Learn more at TikTok's Privacy Policy.

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR) and the ePrivacy Directive, we rely on your consent (Article 6(1)(a) GDPR) as the legal basis for the sign-up list and for loading any non-essential cookies described in Section 3. You can withdraw consent at any time: unsubscribe from any email, use the "Cookies" link in the Site footer, or clear your browser's cookies/local storage for this Site.

For messages sent through the contact form, we rely on our legitimate interest in answering your enquiry (Article 6(1)(f) GDPR).

5. International data transfers

Google and Meta may transfer the data collected via the tools above to servers located outside the European Economic Area, including the United States. Both companies self-certify compliance with recognised transfer mechanisms (such as Standard Contractual Clauses). We do not control these transfers directly; please refer to Google's and Meta's own documentation for details.

6. How long we keep data

Sign-up details are kept until you unsubscribe or ask us to delete them. Contact form messages are kept for as long as we need them to deal with your enquiry. Retention periods for cookies set by Google and Meta are governed by those companies' own policies (typically ranging from 90 days to 2 years depending on the cookie), and can be found in the links provided in Section 3.

7. A note on browsers with JavaScript disabled

Our consent mechanism is JavaScript-based. A small number of visitors who have disabled JavaScript in their browser may not see the cookie banner, and in rare edge cases a single no-script tracking pixel may still load as a fallback. This affects a negligible fraction of visitors; if this applies to you and you have concerns, please contact us using the details in Section 11.

8. Your rights under GDPR

If you are located in the EU/EEA, you have the right to:

• Access the personal data held about you
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection, or your local supervisory authority

Requests relating to Google's or Meta's processing should generally be directed to them, though we're happy to assist in facilitating this. Contact us using the details below.

9. Children's privacy

Kamaya events are 18+ and this Site is not directed at children. We do not knowingly collect data from anyone under the age of 16.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact us

Questions about this Privacy Policy can be sent to [email protected].