Privacy Policy

Last updated: July 2026

Protecting your personal data is important to us. This policy explains what data we collect through pennyslove.gr, why, and what rights you have, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

Zlatintsi Parthena, Thessalonikis 17, Kilkis 611 00, Greece. VAT no. 122141517, G.E.MI. 184916235000. Contact email for personal data matters: orders@pennyslove.gr.

2. What data we collect

• Order details: full name, email, phone, shipping address — necessary to fulfill your order.
• Shopping cart: stored via a necessary session cookie and local storage so you don't lose your products while browsing.
• Account (if you create one): email and an encrypted password.

3. Cookies & local storage

We use strictly necessary cookies for the store to function (cart, sign-in, privacy choices). Optional statistics cookies (Google Analytics 4) are enabled only with your consent.

• Guest cart: temporarily remembers your products while you browse (up to about 30 days).
• Account sign-in: securely keeps you signed in when you have an account (up to about 7 days).
• Cart contents: keeps your products locally in the browser until you complete or empty your cart.
• Privacy choices: stores only the cookie categories you selected, with no unique identifier (up to about 12 months).

Statistics (optional): with your consent, Google Analytics 4 (Google Ireland Limited / Google LLC) is enabled to measure visits, product views, and completed purchases. IP addresses are anonymized where supported. Statistics cookies/identifiers remain disabled until you select "Statistics" or "Accept all."

Marketing (optional): not currently used. If added in the future, they will remain disabled until explicit consent.

You can change or withdraw your choice at any time via the "Cookies" link in the footer.

4. Purpose & legal basis for processing

• Fulfilling and shipping your order — based on the sales contract.
• Communicating about your order's progress (confirmation email, status updates) — based on the contract.
• Compliance with tax/accounting legislation (issuing documents) — based on legal obligation.

5. Who has access to your data

Your data is not sold or transferred to third parties for advertising purposes. Access is limited to service providers necessary for the store's operation: our hosting and email provider (Pointer.gr), and — when card payment is enabled — the payment provider Viva Wallet, exclusively for processing the transaction.

6. Retention period

Order data is kept for as long as required by tax legislation. Account data is kept for as long as the account remains active or until you request its deletion.

7. Your rights

You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your data. To exercise any of these rights, contact orders@pennyslove.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

8. Security

We take reasonable technical and organizational measures (password encryption, secure connection) to protect your data from unauthorized access.