Privacy Policy

Privacy Policy

This policy explains what personal data GRAVEKNIT collects, why, and the rights you have. The data controller is [LEGAL NAME], sole proprietor, [STREET ADDRESS, CITY, POSTCODE], Greece. Contact us any time via our contact page.

1. What we collect

  • Order data: name, email, phone, shipping and billing address, items bought, payment status (card details are handled by our payment providers, never stored by us).
  • Account and support data: messages you send us through the contact form or email.
  • Marketing data: your email if you sign up for our newsletter or the 10% welcome offer.
  • Device and usage data: IP address, browser, pages viewed and cookies, as described below.

2. Why we use it (legal basis)

  • To process, ship and support your order: performance of a contract.
  • To keep tax and accounting records: legal obligation.
  • To prevent fraud and keep the site secure: legitimate interest.
  • To send marketing emails and to use advertising cookies and pixels (for example Meta and TikTok): your consent, which you can withdraw at any time.

3. Who we share it with

Only with the service providers we need to run the store: Shopify (store platform), payment providers, our fulfilment partner and shipping carriers, email marketing tools, and, with your consent, advertising platforms. Some of these providers are located outside the EU/EEA; transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision. We do not sell your personal data.

4. Cookies

We use essential cookies to make the cart and checkout work. Analytics and advertising cookies are only set if you accept them in our cookie banner. You can change your choice at any time from the banner or your browser settings.

5. How long we keep it

Order and invoice records are kept as long as Greek tax law requires (typically 5 years). Marketing data is kept until you unsubscribe. Support messages are kept for up to 2 years.

6. Your rights (EU / GDPR)

You can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or the authority in your country.

7. Your rights (United States)

Depending on your state (for example California), you may have the right to know, access, correct and delete your personal information, and to opt out of "sale" or "sharing" for targeted advertising. We honour Global Privacy Control signals. We will not discriminate against you for using these rights.

8. Children

Our store is not directed at children under 16, and we don't knowingly collect their data.

9. Security

We use Shopify's secure, encrypted infrastructure and limit access to personal data to what is needed to run the store.

10. Changes

We may update this policy. The latest version is always on this page.