Privacy Policy

This policy explains how Efplasti collects and uses your personal data when you visit efplasti.com or buy from us, in line with the General Data Protection Regulation (GDPR).

Who is responsible for your data

• Business name: [legal name of the business]
• Address: [street, postcode, city, Greece]
• VAT number (ΑΦΜ): [VAT number], Tax office (ΔΟΥ): [tax office]
• General Commercial Registry (ΓΕΜΗ): [GEMI number, if registered]
• Email: [shop email address] · Phone: [phone number]

What we collect

• Orders: your name, delivery and billing address, email, phone number and the details of your order.
• Account: if you create an account, your email, password (stored encrypted) and saved addresses.
• Messages: what you send us through the contact form or the Submit a Return form.
• Payments: handled directly by [payment providers, e.g. Stripe / PayPal / bank]. We do not see or store your full card details.
• Technical data: basic information your browser sends, such as IP address and device type, and the cookies described below.

Why we use it

• To process and deliver your order and handle returns (performance of the contract).
• To keep invoices and accounting records (legal obligation under Greek tax law).
• To reply to your messages and keep the website secure (legitimate interest).
• To send you news, only if you have asked for it (consent, which you can withdraw at any time). [Remove this line if there is no newsletter.]

Who we share it with

Only with the providers we need to run the shop, each bound to protect your data:

• Our website host: [hosting company]
• Payment providers: [names]
• Couriers: [names]
• Our accountant, for invoicing and tax purposes
• Our email provider: [e.g. Google Workspace]

We never sell your data. Where a provider is outside the EU, the transfer is protected by the safeguards required by the GDPR, such as standard contractual clauses.

How long we keep it

• Order and invoice records: for as long as Greek tax law requires [e.g. 5 years].
• Your account: until you ask us to delete it.
• Messages: up to [2 years] after our last exchange.

Cookies

Our website uses cookies that are necessary for it to work, such as keeping items in your cart and keeping you signed in. These do not need your consent. See our Cookie Policy for the full list. [If analytics or marketing cookies are added (e.g. Google Analytics), describe them here; they are only used after you accept them in the cookie banner.]

Your rights

You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw any consent you have given. Write to us at [shop email address]; we will reply within one month.

If you believe your data has not been handled correctly, you can complain to the Hellenic Data Protection Authority (dpa.gr).

Changes

We may update this policy. The date at the top of the page shows when it last changed.