Last updated: [Insert Date]
At [Business Name], we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit or use our website, browse our coffee products, create an account, place an order, contact us, or otherwise interact with our services.
This Privacy Policy is intended to provide information about our personal-data practices in accordance with applicable data-protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), where applicable.
1. Who We Are
The website is operated by:
Business Name: [Insert Business Name]
Business Address: [Insert Business Address]
Country: Greece
Email: [Insert Contact Email]
For questions about this Privacy Policy or your personal data, you can contact us using the details above.
2. What Personal Data We Collect
Depending on how you use our website, we may collect different types of personal information.
Information you provide directly
For example, when you create an account, place an order, contact us, or submit a form, we may collect:
- Full name
- Email address
- Telephone number
- Billing address
- Shipping/delivery address
- Order information
- Information you provide when contacting us
- Account login information, where applicable
We only request information that is reasonably necessary for the relevant purpose.
Payment information
When you make a purchase, payment information may be processed by the payment provider you choose.
Depending on the payment method used, your payment information may be handled directly by a third-party payment service provider.
We generally do not need to store your complete payment-card details ourselves.
Payment providers used: [Insert payment providers]
Please refer to the relevant payment provider’s privacy policy for information about how it processes your payment information.
Information collected automatically
When you visit our website, certain information may be collected automatically, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Pages visited
- Date and time of visits
- Referring website
- Website interaction information
- Technical information necessary for website security and operation
The exact information collected depends on the technologies and services installed on our website.
3. How We Use Your Personal Data
We may use personal data for purposes including:
- Processing and fulfilling orders
- Delivering products
- Processing payments
- Managing customer accounts
- Responding to questions and requests
- Providing customer support
- Sending important information regarding orders
- Maintaining and improving our website
- Preventing fraud and unauthorized activity
- Protecting the security of our website
- Complying with legal and regulatory obligations
- Sending marketing communications where you have provided the required consent
- Understanding how visitors use our website where appropriate
We do not use personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by law.
4. Legal Bases for Processing
Where GDPR applies, we process personal data on one or more of the following legal bases:
Performance of a contract
We may process information necessary to:
- Process your order
- Take payment
- Deliver your products
- Manage your customer account
- Provide services you have requested
Legal obligations
We may process personal data when necessary to comply with legal, tax, accounting, regulatory, or other legal requirements.
Legitimate interests
We may process certain information where necessary for legitimate business interests, such as:
- Maintaining website security
- Preventing fraud
- Improving our services
- Managing our business
- Responding to customer enquiries
Where we rely on legitimate interests, we consider the potential impact on your rights and interests.
Consent
Where required, we may ask for your consent before processing personal data for specific purposes, such as certain marketing activities or non-essential cookies.
You may withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Cookies
Our website may use cookies and similar technologies.
Cookies may be used for purposes such as:
- Essential website functionality
- Remembering preferences
- Maintaining shopping-cart functionality
- Website security
- Analytics
- Understanding website usage
- Marketing or advertising, where applicable
Some cookies may be necessary for the website to function and cannot be disabled through certain cookie settings.
Where applicable, we will request consent before placing non-essential cookies on your device.
For more information, please see our:
Cookie Policy: [Insert Cookie Policy Link]
6. Online Shopping and Orders
If you purchase products through our website, we may process information necessary to complete your order.
This can include:
- Your name
- Contact information
- Billing information
- Delivery address
- Products purchased
- Order number
- Payment status
- Shipping information
- Communications relating to your order
This information allows us to process your purchase, arrange delivery, provide customer service, and comply with applicable legal and accounting obligations.
7. Customer Accounts
If our website allows customers to create accounts, we may process information associated with your account, including your name, email address, login credentials, order history, and other information you provide.
You should keep your account credentials confidential and notify us if you believe your account has been accessed without authorization.
8. Search and Website Functionality
Our website may use search functionality and third-party plugins to help visitors find products.
Depending on the technology used, search requests and related technical information may be processed to provide search results and improve website functionality.
Search service/plugin: [Insert relevant service if applicable]
9. Who We Share Personal Data With
We may share personal data with trusted third parties where necessary to operate our website and provide our services.
Depending on the services used by our website, these may include:
- Payment providers
- Delivery and courier companies
- Website hosting providers
- Website maintenance providers
- E-commerce service providers
- Email service providers
- Analytics providers
- Security and fraud-prevention services
- Professional advisers
- Government authorities or other organizations where legally required
We only share information where there is an appropriate legal basis for doing so.
Important: The specific third parties used by your website should be listed here before publication.
10. International Data Transfers
Some of our service providers may process personal data outside Greece or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data-protection laws.
Depending on the circumstances, this may include the use of adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards.
11. How Long We Keep Personal Data
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required by law.
For example, information relating to purchases may need to be retained for accounting, tax, legal, or dispute-resolution purposes.
When personal data is no longer required, we will delete it or anonymize it where appropriate.
Specific retention periods may vary depending on the type of information and the reason it was collected.
12. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
However, no online service can guarantee absolute security.
You should also take reasonable steps to protect your own information, including keeping account passwords confidential and using secure devices and connections.
13. Your Data Protection Rights
Where GDPR applies, you may have rights regarding your personal data, including:
- The right to access your personal data
- The right to correct inaccurate or incomplete information
- The right to request deletion of personal data in certain circumstances
- The right to request restriction of processing in certain circumstances
- The right to object to certain processing
- The right to data portability in applicable circumstances
- The right to withdraw consent where processing is based on consent
These rights are subject to applicable legal conditions and exceptions.
To exercise your rights, contact us at:
Email: [Insert Contact Email]
We may need to verify your identity before processing certain requests.
14. Marketing Communications
If we send marketing communications, we will do so in accordance with applicable law.
Where consent is required, we will only send marketing communications after receiving the appropriate consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the message or by contacting us.
Unsubscribing from marketing communications will not prevent us from sending essential communications relating to orders, transactions, or services you have requested.
15. Children’s Privacy
Our website is not intentionally designed to collect personal information from children.
We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.
If you believe that a child has provided us with personal information, please contact us so that we can take appropriate action.
16. Third-Party Websites
Our website may contain links to third-party websites or services.
We are not responsible for the privacy practices, security, or content of websites that we do not operate.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in:
- Our services
- Our website
- The technologies we use
- The way we process personal data
- Applicable legal requirements
When changes are made, the updated version will be published on this page together with the new “Last updated” date.
18. Supervisory Authority
If you are located in the European Union and believe that your data-protection rights have been violated, you may have the right to lodge a complaint with the relevant data-protection supervisory authority.
For a business established in Greece, the relevant supervisory authority is the:
Hellenic Data Protection Authority (HDPA)
You can find information about the authority and how to contact it through its official website.
19. Contact Us
If you have questions about this Privacy Policy, how we process personal data, or your privacy rights, please contact us:
Business Name: [Insert Business Name]
Email: [Insert Contact Email]
Address: [Insert Business Address]
Country: Greece
We will consider and respond to privacy-related requests in accordance with applicable data-protection laws.
Important: This Privacy Policy is a general template based on the information currently provided. Before publishing it, replace the placeholders and adapt the policy to the actual technologies and services used by your website, including your hosting provider, WooCommerce (if used), payment providers, analytics, cookies, contact forms, email services, FiboSearch, and any other third-party services. For GDPR compliance, consider having the final version reviewed by a qualified legal professional.