Privacy Policy

Last updated: May 2026

1. Who we are

This website is operated by Dimitra Manthou, trading as Hostyle (VAT: EL145363147), based in Athens, Greece. When this policy refers to "we", "us", or "our", it means Hostyle.

Contact: hello@hostyle.eu
Website: hostyle.eu

2. What data we collect

We collect personal data only when you interact with us directly. This includes:

  • Account data — name, email address, password (encrypted) when you create an account.
  • Order data — name, billing address, shipping address, phone number, and order history when you place an order.
  • Payment data — we do not store card details. Payments are processed securely by our payment provider. We only receive confirmation of a successful transaction.
  • Communication data — messages you send us via the contact form or email.
  • Browsing data — IP address, browser type, pages visited, and time spent on site, collected via cookies. See our Cookie Policy for details.

3. Why we collect it

We use your personal data for the following purposes:

  • To process and fulfil your orders. All printing, packing, and dispatch is handled in-house. Your shipping address is shared only with the carrier delivering your order.
  • To manage your account and provide customer support.
  • To send you transactional emails (order confirmation, shipping updates). These are not marketing emails and cannot be opted out of while an order is active.
  • To send you marketing communications, only if you have explicitly opted in.
  • To comply with legal obligations under Greek and EU law.
  • To improve our website and understand how visitors use it.

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:

  • Contract performance — processing your order and delivering your purchase.
  • Legal obligation — keeping records for tax and accounting purposes as required by Greek law.
  • Legitimate interests — preventing fraud, improving our services, and maintaining site security.
  • Consent — sending marketing emails or placing non-essential cookies. You may withdraw consent at any time.

5. Who we share your data with

We do not sell your personal data. We produce and dispatch all orders ourselves. Your data is shared only with the following third parties:

  • Shipping carriers — your name and delivery address are passed to the carrier handling your shipment (e.g. ELTA, DHL, or similar).
  • Payment processors — your payment is handled securely by our payment gateway. We receive only confirmation of a successful transaction, not your card details.
  • Email service provider — we use a third-party platform to send transactional and marketing emails.
  • Greek tax authorities — as required by law.

6. International transfers

All order fulfilment takes place in Greece. Where any third-party service we use (such as our email provider or payment gateway) processes data outside the EU/EEA, they do so under Standard Contractual Clauses approved by the European Commission or equivalent GDPR-compliant safeguards.

7. How long we keep your data

  • Order and account data — retained for 5 years after your last order, as required by Greek tax law.
  • Marketing consent — until you withdraw consent or unsubscribe.
  • Contact form messages — deleted after 12 months unless an ongoing relationship requires otherwise.
  • Cookies — see our Cookie Policy for individual retention periods.

8. Your rights

As a data subject under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Request a portable copy of your data.
  • Lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

To exercise any of these rights, contact us at hello@hostyle.eu. We will respond within 30 days.

9. Cookies

We use cookies to operate the site, process your cart, and understand how visitors navigate. A detailed breakdown of the cookies we use is available in our Cookie Policy, managed via our cookie consent tool. You can update your preferences at any time by clicking "Cookie settings" in the site footer.

10. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our site is served over HTTPS. Passwords are stored in encrypted form. However, no method of transmission over the internet is completely secure.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Significant changes will be communicated via email if you have an account with us.