This Privacy Policy explains how Tsavalas (“we”, “us”, “our”) collects, uses, and discloses your personal information when you visit or purchase from our site or otherwise communicate with us (the “Services”).

Controller: Tsavalas — Pantelis Tsavalas, Molaoi, Laconia 23052, Greece
Email: hello@tsavalas.com  |  Phone: +30 694 699 6062

We may update this Policy to reflect operational, legal, or regulatory changes. We’ll post the new version with the updated date. Where required by law, we’ll notify you.

• Contact details: name, address, phone, email.
• Order details: billing/shipping info, items purchased, payment confirmation.
• Account details (if you create one): login email and credentials.
• Customer support: information you include when you contact us.
• Usage data: device, browser, IP address, pages viewed, interactions (via cookies/pixels and similar tech).
• From third parties: payment processors (to process payments), analytics/anti-fraud tools, shipping partners, and our ecommerce platform provider.

• Contract necessity (e.g., process orders, payments, delivery, returns).
• Legitimate interests (e.g., site security, fraud prevention, basic analytics, improving products/services). We balance these against your rights.
• Consent (e.g., email marketing; non-essential cookies). You can withdraw at any time.
• Legal obligation (e.g., tax/accounting, consumer law).

• To provide the Services: process orders/payments, ship goods, handle returns, manage your account, and communicate about your purchases.
• Support & improvement: respond to messages, improve our site/products, maintain security and fraud prevention.
• Marketing: send product news or offers (opt out anytime via the unsubscribe link).
• Legal: comply with tax/accounting laws, enforce our Terms, protect our rights/users.

We use cookies to run and improve the site (e.g., remember preferences, analytics). Details on Shopify-related cookies: shopify.com/legal/cookies. You can control cookies via your browser or the site’s cookie preferences. Blocking some cookies may affect functionality.

We share personal information only as needed to operate the business:

• Platform & hosting: Shopify (storefront, checkout, infrastructure).
• Payments: card processors/PayPal to take payment and prevent fraud.
• Shipping: postal/courier services to deliver your order (e.g., ELTA and destination postal operators).
• Support & operations: email/communications tools, analytics, IT providers.
• Legal/compliance: where required by law or to protect rights and safety.

We do not sell personal information.

Your data may be processed outside your country (including outside the EEA). When we transfer data internationally, we rely on recognized safeguards such as the EU Standard Contractual Clauses, unless the destination has an adequacy decision.

We use reasonable technical and organizational measures, but no method is 100% secure. We keep order records for as long as required by law (typically up to 6 years for tax/accounting). Other data is kept only as long as needed for the purposes above or to resolve disputes.

Subject to law, you may have the right to: access, correct, delete, or receive a copy (portability) of your data; object to or restrict processing; and withdraw consent where processing is based on consent. You can also object to direct marketing at any time.

Exercise rights by emailing hello@tsavalas.com. You may also lodge a complaint with a supervisory authority (see the EDPB list: edpb.europa.eu/about-edpb/members ).

Our Services are not intended for children. We do not knowingly collect children’s data. If you believe a child has provided data, contact us to delete it.

Our site may link to third-party sites we don’t control. Review their privacy policies; we aren’t responsible for their content or practices.

We do not use automated decision-making that produces legal or similarly significant effects on you.

This section applies to residents of the United States (including California, Virginia, Colorado, Connecticut, Utah). Terms like “sell,” “share,” and “targeted advertising” are used as defined in applicable US privacy laws.

Categories Collected & Disclosed (last 12 months)

• Identifiers (name, email, phone, postal address, IP) — disclosed to platform/IT, payments, shipping, and support providers.
• Commercial information (orders, returns, support history) — disclosed to payments, shipping, fraud/analytics, support.
• Internet/Usage data (pages viewed, device, browser, IP, cookies) — disclosed to analytics and (if enabled) advertising partners.

We do not use or disclose “sensitive” personal information for inferring characteristics. Payment data is handled by our processors for transactions only.

Sale/Sharing & Targeted Advertising

We do not sell personal information for money. We may “share” limited identifiers, commercial information, and usage data with advertising partners for cross-context/targeted advertising. You can opt out:

• Use the site’s cookie preferences to disable advertising cookies (see the banner), or
• Send a request to hello@tsavalas.com.

We honor the Global Privacy Control (GPC) signal where required; a valid GPC will be treated as an opt-out for that browser/device.

Your US Privacy Rights

Depending on your state, you may have the right to: access/know, delete, correct, port your data; and to opt out of sale/sharing/targeted advertising. To exercise rights, email hello@tsavalas.com. We will verify your request (e.g., via email/order info). You may designate an authorized agent; we may require proof of authorization and verification.

Appeals (VA/CO/CT): if we deny your request, you may appeal by replying to our decision email with “Appeal” in the subject.

We will not discriminate against you for exercising rights.