Privacy Policy

Prism Candles & Co. respects the privacy of its website visitors and customers and processes personal data in accordance with the General Data Protection Regulation (GDPR), Greek Law 4624/2019 and other applicable Greek and European data protection legislation.

1. Data Controller

The data controller responsible for processing your personal data is:

Trading Name: Prism Candles & Co.

Legal Name: ALEXANDROU GEORGIA TOU MICHAIL

Business Address: 52 Aischylou Street, Aigaleo, Western Athens Sector, 12244, Greece

VAT Number: 165321381

GEMI Registration Number: 194984703000

Email: prismcandlescogr@gmail.com

Telephone: +30 697 679 2577

2. What Personal Data We Collect

Depending on how you use our website and the services available, we may collect the following categories of personal data:

• Full name.
• Shipping and billing address.
• Email address.
• Telephone number.
• Order details.
• Payment-related information and transaction reference numbers.
• Information you provide when contacting us.
• Information about how you use our website.
• Technical information, such as IP address, browser, operating system and device.
• Data collected through cookies and tracking technologies, where the required consent has been obtained.

3. Why We Process Your Data

We may process your personal data for the following purposes:

a. Order fulfilment

To receive, manage, process, pay for, dispatch and provide customer support for your orders.

b. Order-related communications

To send order confirmations and shipping updates, resolve order issues and respond to customer enquiries.

c. Accounting and tax compliance

To maintain the accounting and tax records required by law.

d. Website security

To protect our online store against malicious activity, unauthorised access and unlawful use.

e. Analytics

With the required consent, we use Google Analytics 4 to understand website traffic and how visitors use our website.

f. Marketing and advertising

With the required consent, we use Meta Pixel to measure and optimise Prism Candles & Co.'s advertising activities.

4. Legal Bases for Processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

• Performance of a contract or taking steps at your request before entering into a contract.
• Compliance with a legal obligation.
• Our legitimate interests, where permitted by law.
• Your consent, where required.

Consent to analytics, marketing cookies or newsletter communications is optional where applicable and may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Service Providers and Third Parties

To operate our online store, we may use the following service providers and services:

• Hostinger: Website hosting and domain services.
• WordPress and WooCommerce: Website and online store management.
• Stripe: Card payment processing.
• National Bank of Greece: Banking transactions.
• IRIS and relevant payment providers: Processing payments made through IRIS.
• Google: Google Analytics 4 and Google Search Console.
• Meta: Meta Pixel and related advertising services.

The information shared with each provider depends on the service used and how it is configured. Each provider may process data according to its role, contractual terms and applicable law.

Where required, appropriate safeguards are used to protect personal data, including where data may be transferred outside the European Economic Area.

6. Analytics and Marketing

Google Analytics 4 and Meta Pixel are not activated before the required user consent has been obtained.

Through the website's cookie management mechanism, users can choose independently between the available categories of non-essential cookies and tracking technologies.

Accepting analytics or marketing cookies is not a condition for browsing our website or making a purchase.

Users may withdraw or change their consent choices through the available cookie settings.

7. Newsletter

If you choose to subscribe to the Prism Candles & Co. newsletter, your email address will be used to send updates, offers and other marketing communications.

Subscription is optional. You may unsubscribe at any time using the unsubscribe link included in the relevant emails or by contacting us at prismcandlescogr@gmail.com.

Marketing communications are sent in accordance with applicable law and the consent requirements that apply in each case.

8. Cookies

For more information about the cookies and tracking technologies used on our website, please refer to our separate Cookie Policy.

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected and for any additional period required by tax, accounting or other legal obligations.

Order and transaction records may be retained for the period required by applicable law.

When personal data is no longer necessary, it will be deleted or anonymised where feasible and legally permitted.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or unlawful processing.

Despite these measures, no method of electronic storage or transmission can guarantee absolute security.

11. Your Rights

Subject to the conditions set out in the GDPR, you may have the right to:

• Access your personal data.
• Request the correction of inaccurate or incomplete data.
• Request erasure of your data, where applicable.
• Request restriction of processing.
• Request data portability, where applicable.
• Object to certain types of processing.
• Withdraw your consent at any time where processing is based on consent.

These rights are subject to the conditions and exceptions provided by law.

12. Exercising Your Rights and Contacting Us

To exercise your rights or ask questions about how we process your personal data, you may contact us at:

Prism Candles & Co.

Email: prismcandlescogr@gmail.com

We will review your request and respond within the time limits required by applicable law.

13. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.

Website: https://www.dpa.gr/

14. Changes to This Privacy Policy

This Privacy Policy may be updated when necessary, for example due to changes in our website services or applicable legislation.

The latest version will be published on our website and will state the date of the last update.

If you have any questions about this Privacy Policy, please contact us at prismcandlescogr@gmail.com.