Legal

Privacy

GDPR Article 13 notice for Shopify, reviews, support, analytics, and processors.

Controller identity and data contact

[TRADING NAME] is the trading name of [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS], Greece (AFM/VAT [AFM / VAT NUMBER], GEMI [GEMI NUMBER], tax office [TAX OFFICE (DOY)]). [COMPANY LEGAL NAME] is the data controller for personal data collected through this website. For any question about this policy or how your data is handled, contact us at [DATA PROTECTION EMAIL] or [SUPPORT EMAIL], or by phone at [SUPPORT PHONE] during [SUPPORT HOURS].

Purposes, legal bases, recipients, transfers, and retention

We process personal data such as your name, contact details, delivery address, and order history to operate the storefront, fulfil orders, respond to enquiries, and meet legal obligations. The legal bases we rely on are performance of a contract (processing your order), legal obligation (invoicing, tax, and accounting records), legitimate interest (fraud prevention, site security, and improving our service), and consent (optional marketing communications, which you can withdraw at any time).

Recipients of your data may include our shipping carriers, IT and hosting providers, and Shopify, which hosts our checkout and processes payment and order data on our behalf. Some of these providers may process data outside the European Economic Area; where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep order and invoicing data for as long as required by Greek tax and accounting law, generally at least five years, and other personal data only for as long as necessary for the purpose it was collected, after which it is deleted or anonymised.

Data-subject rights and Hellenic DPA complaint route

You have the right to access, correct, or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting prior processing. To exercise any of these rights, contact us at [DATA PROTECTION EMAIL]. If you believe your data has been processed unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, contact.gr@dpa.gr), or with the supervisory authority in your own EU member state.

Shopify and installed app processor disclosures

Checkout, payment processing, and order storage for [TRADING NAME] run on Shopify's platform, which acts as a data processor for that part of your purchase; Shopify's own privacy policy, available on the checkout pages it hosts, describes how it and the payment providers enabled in Shopify checkout handle your data. We may also use additional Shopify apps for functions such as shipping, analytics, or customer support, each of which processes only the data needed to perform its function and is bound by data-processing terms consistent with this policy and applicable law.

Version 1 approved 2026-07-10.