Privacy Policy
[PLACEHOLDER TEXT β GDPR skeleton for legal review.]
1. Data controller
[BUSINESS LEGAL NAME], [ADDRESS], [EMAIL], [PHONE].
2. What data we collect
To fulfil your order: full name, email, phone, shipping address, personalization details (e.g. your child's name). Payments are processed by Stripe β we never store card details.
3. Purpose & legal basis
We process this data to perform the sales contract (art. 6(1)(b) GDPR), to communicate about your order, and to comply with tax obligations.
4. Retention
[TO BE COMPLETED β retention periods for orders and invoices.]
5. Your rights
You have the right to access, rectify, erase, restrict, port and object. Contact us at [EMAIL]. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
6. Cookies
The store uses only technically necessary cookies (cart, language, admin login). [TO BE COMPLETED if analytics are added.]