Privacy policy

1. Data Controller

Business Silk Tales (silktales.gr)
Address Didymoteicho, Evros 683 00, Greece
VAT / Company Reg. see Terms of Service / contact the owner at info@silktales.gr
Contact email info@silktales.gr
Platform (Processor) Shopify Inc., 151 O'Connor Street, Ottawa, Canada

2. Personal Data We Collect

Contact & identity data: name, shipping/billing address, email, phone.

Financial data: payment details. Note: card numbers are processed exclusively by licensed payment providers (PCI-DSS) and are not stored on our servers.

Technical data & cookies: IP address, device type, browser, cookies, browsing data.

3. Purposes & Legal Basis (Art. 6 GDPR)

  • Order processing & fulfilment — Contract performance (Art. 6(1)(b))
  • Tax invoicing — Legal obligation (Art. 6(1)(c))
  • Newsletter / promotions — Consent (Art. 6(1)(a))
  • Tracking / advertising pixels — Consent (Art. 6(1)(a)), via Consent Mode v2
  • Site security, fraud prevention, support — Legitimate interest (Art. 6(1)(f))

4. Recipients of Data (Third Parties)

  • Shopify Inc. (e-commerce platform)
  • Payment provider (Shopify Payments / Stripe / PayPal)
  • Courier company (ACS / ELTA / Geniki Taxydromiki)
  • Reviews tool (Judge.me)
  • Marketing & analytics platforms (Google, Meta) — once enabled
  • Our accountant / tax advisor

5. International Transfers

Some providers (Shopify, Google, Meta) may process data outside the EU (e.g. the US), based on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

6. Data Retention

  • Tax invoices: 5–10 years (Greek tax law / K.F.D.).
  • Email marketing: until consent is withdrawn (unsubscribe).
  • Analytics cookies: 2–14 months (per platform settings).

7. Your Rights (DSAR)

You have the right to access, rectification, erasure (“right to be forgotten”), restriction, portability and to withdraw consent at any time. We respond within 30 days at info@silktales.gr.

You may also lodge a complaint with the Hellenic Data Protection Authority (DPA / ΑΠΔΠΧ) — www.dpa.gr. (Note: tax invoices are legally exempt from erasure.)

8. Cookies

We use technical cookies (essential) and, with your consent, analytics/marketing cookies. Our cookie banner lets you accept or reject equally. No advertising/analytics processing runs before your explicit acceptance.

9. Security

SSL/HTTPS across the site, Shopify encryption, 2FA on administration. In case of a data breach we notify the DPA within 72 hours and affected users.

10. Microsoft Clarity Brand Agents

We partner with Microsoft to provide Clarity Brand agents, which use business and order management data to deliver a personalized experience. Order management data may be captured through first-party and third-party cookies and other tracking technologies. Information you provide to the Brand agents, including conversational content and interaction events, is shared with Microsoft and is used to operate, secure, and improve the service. For more information about how Microsoft collects and processes data, see the Microsoft Privacy Statement.

You may request deletion of information derived from your interactions with the Brand agent at any time by asking the agent (e.g. “Delete my saved information”, “Clear my agent memory”) or by contacting us at info@silktales.gr.

Last updated: September 2026.