Privacy Policy
Data handling rules for thymovita.site: Thymovita Μονοπρόσωπη Ι.Κ.Ε. ("Thymovita") details our collection reasons, storage limits, third-party access, and user rights under the General Data Protection Regulation (GDPR).
1. About this privacy policy
Scope covers thymovita.site, store orders, and incoming customer inquiries. Outbound external links follow their own individual privacy policies.
2. Data controller contact details
Thymovita Μονοπρόσωπη Ι.Κ.Ε. at Thivon 170, Peristeri, 121 34, Greece controls data handling. Direct all privacy requests to [email protected] or phone +30 274 786 269.
3. Categories of data collected
We store minimal records, restricted strictly to the stated task.
3.1 Information you provide directly
Ordering requires full name, shipping address, email, and phone. Reviews and support messages stay saved up to 3 years from last contact, while order records match statutory accounting terms.
3.2 Payment and transaction data
Receipt records include order IDs, purchased supplements, total cost, payment selection, and tracking status. This site collects no payment card or banking logins. Retained for statutory tax requirements.
3.3 Automatically collected information
System logs track IP details, browser specifications, page visits, referral sources, and timestamps via cookies. Log files delete after 30 days; grouped analytics persist up to 14 months.
3.4 Marketing and advertising data
Referral ad tags and inbound campaign links attribute purchases directly. Records purge after 90 days.
3.5 Third-party partner updates
Couriers provide parcel milestones; payment systems confirm settlement for each corresponding purchase.
3.6 Children
Users must be at least 18. We do not deliberately register minors; guardians should contact [email protected] to remove accidental submissions.
4. Mandatory order information
Name, shipping address, active email, and phone number are required for order dispatch and fulfillment notices. Without this info, orders cannot clear. Other fields remain optional.
5. How your information is used
- Fulfill orders, arrange parcel shipments, issue billing documentation, and manage product returns or refunds.
- Reply to customer tickets and transmit delivery progress reports via email or SMS.
- Maintain store safety, block fraudulent transactions, and evaluate web performance metrics.
- Distribute promotional product notifications on opt-in request only. Every dispatch provides an opt-out link.
- Comply with mandatory tax rules and commercial record-keeping laws.
6. Third-party data distribution
Customer records are never sold. We pass data solely to contracted service partners operating under strict direct instructions.
6.1 Payment processing
Selected payment processors obtain necessary identifiers to settle, balance, and verify your checkout transaction.
6.2 Shipping and fulfilment partners
Freight couriers receive your name, physical address, and phone number for parcel dispatch and drop-off updates.
6.3 Service providers
Web servers, transactional mail relays, and helpdesk systems process data under operational service contracts.
6.4 Advertising and analytics partners
Performance and promotional trackers activate upon consent, relaying site interaction details to analytical vendors per Cookie Policy terms.
6.5 Legal and regulatory disclosures
Data disclosure occurs solely under legal compulsion or to protect company rights during billing and order disputes.
6.6 Business transfers
Corporate asset sales or business mergers transfer customer files to the successor subject to these exact security terms.
7. International data transfers
When infrastructure operates outside Greece, we enforce data protection via adequacy findings or standard contractual clauses.
8. Your rights and choices
According to the General Data Protection Regulation (GDPR), you hold data subject rights under Articles 15-22 GDPR.
8.1 Data access, updates, deletion, portability
Request access to your stored files, amend inaccuracies, demand deletion, export standardized archives, restrict processing, or revoke consents. Prior processing remains lawfully completed.
8.2 Marketing choices
Promotional emails contain one-click unsubscribe links. Advertising and analytical cookies can be turned off anytime in the site banner.
8.3 Exercising your rights
Contact [email protected] to submit requests. After verification, we respond within 30 days. You may also lodge complaints with the data authority in Greece.
9. Data security
Encrypted HTTPS guards site traffic. Purchase records reside in secure environments accessible only to relevant staff. We never log or store credit card details.
10. Data retention
Billing and order data stays retained through statutory financial deadlines before deletion. Customer service chats purge after 3 years from last contact. Server logs expire at 30 days, aggregated metrics at 14 months, and marketing approvals upon withdrawal.
11. Third-party websites and services
Outbound hyperlinks to external platforms, social networks, or payment portals operate under external privacy terms. We bear no liability for third-party practices.
12. Changes to this policy
This text updates when legal requirements or operations change. Check the revision date at the top of this page for the active version.