Privacy Policy

Last updated: August 5, 2026

Retrocollectix ("we", "us", or "our") operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Retrocollectix is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. For the purposes of applicable data protection laws—including the European Union General Data Protection Regulation (EU GDPR)—Retrocollectix is the Data Controller of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understand the collection, use, and disclosure of your information as described herein.

1. Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you. Personal information does not include anonymous or de-identified data. We may collect or process the following categories of personal information depending on how you interact with our store:

Contact Details: Name, billing address, shipping address, telephone number, and email address.

Financial Information: Payment card details (credit/debit card numbers processed securely via Shopify Payments or PayPal), financial account numbers, transaction records, and payment confirmations.

Account Information: Username, password, security credentials, preferences, and saved settings.

Transaction Details: Items viewed, added to cart, added to wishlist, purchased, returned, exchanged, or canceled, along with your transaction history.

Communications: Any information included when contacting customer support or engaging in inquiries with us.

Device & Technical Data: Information regarding your browser, IP address, network connection, time zone, device type, and unique network identifiers.

Usage Data: Analytics regarding how and when you navigate or interact with our website.

2. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal information under the following legal bases pursuant to Article 6 of the GDPR:

Performance of a Contract: To process orders, manage billing, arrange express shipment via DHL, handle returns, and fulfill our sales contract with you.

Legitimate Interests: To protect against fraud, preserve site security, analyze store metrics, and optimize customer experience.

Compliance with Legal Obligations: To comply with Greek tax laws, accounting regulations, and lawful requests from public authorities.

Consent: Where you have explicitly opted in to receive direct marketing communications or accepted non-essential tracking cookies.

3. Sources of Personal Information

We collect personal information directly from you (e.g., during checkout or account creation), automatically through your device via cookies and log files, and from third-party service providers (e.g., Shopify, payment processors, and courier partners).

4. How We Disclose Personal Information

We do not sell your personal data. In order to operate our business, we disclose personal information strictly as necessary to trusted third parties:

Shopify: Our e-commerce platform host, which processes personal data to enable store operations, security, and checkout functionality.

Payment Processors: Shopify Payments, PayPal, and banking partners to securely process payments and prevent fraudulent transactions.

Fulfillment & Logistics: Express couriers (e.g., DHL Express) and postal services to dispatch orders from Athens, Greece, to your destination.

Legal Compliance & Security: Government bodies, law enforcement, or regulatory authorities when required under statutory obligations or valid legal processes.

5. International Data Transfers

As we operate out of Greece and ship globally, your personal information may be transferred to, stored, and processed in countries outside the EEA (including Shopify servers in Canada and the United States).

When transferring data outside the EEA, we rely on recognized legal transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework, ensuring your data receives an equivalent level of protection.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including maintaining your account, resolving disputes, enforcing agreements, and complying with statutory fiscal and accounting laws in Greece (which may require retaining transactional records for up to 10 years).

7. Your Data Protection Rights

Depending on your region (including the EEA, UK, and various US states), you possess specific legal rights regarding your personal information:

Right of Access / Knowledge: Request details or a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete personal information.

Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention obligations.

Right to Restrict or Object: Ask us to restrict or stop processing your data based on legitimate interests or direct marketing.

Right to Data Portability: Request transfer of your data to another controller in a structured, machine-readable format.

Right to Withdraw Consent: Revoke marketing or cookie consent at any time without affecting prior lawful processing.

To exercise any of these rights, please submit a request to retrocollectix@gmail.com. You can also manage Shopify-specific consumer data choices via the Shopify Privacy Portal.

8. Right to Lodge a Complaint

If you are an EEA resident and believe our processing violates data protection laws, you have the right to lodge a complaint with your local supervisory authority.

Our lead supervisory authority is the Hellenic Data Protection Authority (HDPA):

Website: www.dpa.gr

Address: Kifissias 1-3, 115 23 Athens, Greece

9. Contact Us

For questions regarding this Privacy Policy or our privacy practices, please contact us at:

Business Name: Retrocollectix

Email: retrocollectix@gmail.com