Privacy policy

PRIVACY POLICY

At StyleCycle, we take your privacy seriously. This Privacy Policy explains how we collect, use, protect and share your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek and EU data protection law. By using our Platform, you acknowledge that you have read and understood this Policy.

1. Who is responsible for your personal data?

The data controller is DELMA I.K.E., registered at Skoufa 30, Athens 10673, VAT number 801123835, GEMI registration number 149646903000, telephone 2103624248, email info@stylecycle.gr (hereinafter the "Company"). The Company is responsible for the lawful, fair and transparent processing of your personal data.

2. What personal data do we collect?

We collect the following categories of personal data:

  • Contact details: name, surname, delivery address, email address, telephone number, postal code.
  • Account information: username, date of birth, gender, city, country.
  • Payment information: transaction history and payment method details (processed securely via Stripe; card numbers are never stored by StyleCycle).
  • Order and delivery information: order history, delivery history, order status.
  • Technical data: IP address, browser type, activity logs, cookie identifiers.

We collect this data when you register an account, place an order, contact us, or browse our Platform.

3. Why do we use your personal data?

We process your personal data for the following purposes:

  • To manage your purchases: processing orders, payments, returns and delivery notifications.
  • To manage your account and verify your identity.
  • To handle complaints and customer support requests.
  • To offer alternative payment options.
  • To improve our Platform, services and user experience.
  • To send you promotional communications about new products, special offers and updates — only where you have given your consent or where we have a legitimate interest to do so.
  • To comply with our legal and regulatory obligations.

We rely on your consent as a legal basis only for direct marketing communications by email. You may withdraw your consent at any time, after which we will cease processing your data for that purpose.

4. What is the legal basis for processing?

We process your personal data on the following legal bases:

  • Contract performance: processing is necessary to fulfil your purchase order.
  • Legal obligation: processing is necessary to comply with applicable law.
  • Legitimate interests: processing is necessary for our legitimate business interests, where these are not overridden by your rights.
  • Consent: for direct marketing communications only. You may withdraw consent at any time.

5. How long do we retain your data?

We do not retain your personal data for longer than is necessary for the purposes set out in this Policy. Retention periods vary by data type. As a general rule, personal data linked to your account and transaction history is retained for a maximum of 10 years, in accordance with applicable tax and commercial law requirements. Data collected via first-party cookies is retained for 30 days; data from third-party analytics cookies is retained for up to 26 months.

6. Who has access to your personal data?

We share your personal data only where necessary to provide our services, with the following categories of recipients:

  • Courier and delivery partners: to arrange shipment of Products.
  • Payment processors: Stripe, for secure payment processing.
  • Marketing and analytics providers: such as Google Analytics, for Platform optimisation and relevant promotional content.
  • Legal and regulatory authorities: courts, law enforcement, regulatory bodies and insurers, where we are legally required to do so.

We never sell, rent or exchange your personal data with third parties for their own marketing purposes.

7. International data transfers

Where our service providers are located outside the European Union, your data may be transferred internationally. In all such cases, we ensure that appropriate safeguards are in place in accordance with GDPR, including the use of Standard Contractual Clauses approved by the European Commission.

8. How do we protect your data?

We implement appropriate technical and organisational measures to ensure the security of your personal data at all times. These include:

  • SSL encryption for all data transmission.
  • Password-protected, access-controlled servers with limited internal access.
  • Regular cybersecurity assessments across all service providers.
  • Internal data protection policies and staff training.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

9. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you may request a copy of the personal data we hold about you.
  • Right to rectification: you may request correction of inaccurate or incomplete data.
  • Right to erasure: you may request deletion of your data, unless a pending order or legal obligation requires its retention.
  • Right to restriction: you may request that we limit processing of your data in certain circumstances.
  • Right to data portability: you may request your data in a structured, machine-readable format and ask us to transmit it to another controller.
  • Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at info@stylecycle.gr or manage your preferences directly through your account.

10. Cookies

Our Platform uses cookies to improve your browsing experience and to collect usage data. We use:

  • First-party cookies: session, permanent and traffic log cookies that collect information about your browsing and purchasing behaviour. Retained for 30 days.
  • Third-party cookies: analytics tools (such as Google Analytics) used to optimise our Platform and present relevant content. Retained for up to 26 months.

Cookie use is based on your explicit consent. You may withdraw consent and manage or disable cookies at any time through your browser settings. Please note that disabling cookies may affect your ability to use certain features of the Platform. For full details, please refer to our Cookie Policy.

11. Changes to this Policy

We reserve the right to update this Privacy Policy at any time. The latest version is always available on our Platform. We will notify you of any material changes — for example, changes to the purpose for which we use your data or to your rights — via a notice on the Platform or by direct communication.

12. Contact

If you have any questions about how we use your personal data, or wish to exercise your rights, please contact us:

Email: info@stylecycle.gr

Address: Skoufa 30, Athens 10673

If you are not satisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).