Privacy policy

Last updated: November 14, 2026

At HANIOTIS HELLAS, we value the trust you place in us and are committed to protecting your privacy. We handle personal information with care, transparency, and respect for your rights.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, purchase our jewelry, use your customer account, or communicate with us.

It applies to our online store at www.haniotishellas.com and associated customer account services.

1. WHO WE ARE

HANIOTIS HELLAS IKE is a Greek fine jewelry company based in Athens, Greece.

For the purposes of the General Data Protection Regulation (EU) 2016/679 (GDPR), HANIOTIS HELLAS IKE is the data controller responsible for personal information processed in connection with its business activities, except where another service provider acts as an independent controller.

Our contact details are:

HANIOTIS HELLAS IKE

Stadiou 3, Athens 10562, Greece

Email: info@haniotishellas.com

Telephone: +30 210 300 5645

Website: www.haniotishellas.com

For questions concerning your personal information, you may contact us using the details above.

2. PERSONAL INFORMATION WE COLLECT

We collect personal information necessary to operate our online store, fulfill orders, provide customer service, and improve our services.

Depending on how you interact with us, this may include:

Personal & Contact Information

Your name, email address, telephone number, billing address, shipping address, and other information you voluntarily provide when making a purchase, creating or using an account, or contacting us.

Order & Transaction Information

Details of purchased products, order history, payment status, shipping information, delivery records, returns, refunds, and related correspondence.

Payment information is processed through the payment providers available at checkout. We receive the transaction information necessary to manage your purchase but do not need to store complete payment card details ourselves.

Customer Account Information

Information associated with your customer account, including your contact details, saved addresses, order history, and marketing preferences.

Our customer account service is provided through Shopify, including account.haniotishellas.com.

Website & Device Information

When you visit our website, certain technical information may be collected, including your IP address, browser type, device information, approximate geographical location, pages viewed, referral sources, and interactions with our online store.

The collection of information through cookies and similar technologies is governed by the applicable consent requirements and privacy choices described below.

Communications

Information you provide when contacting us by email, telephone, website contact form, social media, or other available communication channels.

Quality Control & Return Records

As part of our jewelry quality assurance procedures, items are inspected and photographed before dispatch.

Where these records are associated with an identifiable customer's order, we may retain them, together with relevant return documentation and correspondence, to verify product condition and assist with returns, warranty enquiries, or disputes.

3. HOW WE USE PERSONAL INFORMATION

We process personal information only for specified business purposes and where an appropriate legal basis applies.

Orders, Payments & Delivery

We use your information to process purchases, confirm orders, arrange payments, prepare shipments, communicate delivery details, and manage returns and refunds.

Legal basis: Performance of a contract or steps taken at your request before entering into a contract.

Customer Service & Account Management

We process relevant information to respond to enquiries, maintain customer accounts, provide order assistance, and manage after-sales services.

Legal basis: Performance of a contract or our legitimate interests in providing effective customer service, depending on the circumstances.

Legal & Accounting Obligations

We retain and process certain transaction information to comply with applicable Greek and European tax, accounting, commercial, and consumer protection requirements.

Legal basis: Compliance with legal obligations.

Security & Fraud Prevention

We use appropriate transaction and technical information to protect our website, detect suspicious activity, prevent fraud, and establish or defend legal claims.

Legal basis: Our legitimate interests in maintaining security and protecting our business and customers, or compliance with legal obligations where applicable.

Website Improvement & Analytics

We use analytics and performance information to understand how visitors interact with our online store, evaluate website performance, and improve our services.

Legal basis: Consent where required for non-essential cookies and tracking technologies; legitimate interests where an activity is lawfully permitted without consent.

Marketing & Advertising

We may use information to communicate new collections, product launches, special releases, events, and other HANIOTIS HELLAS news.

We may also use advertising and measurement services to understand the effectiveness of our campaigns and, where permitted, present advertising relevant to customer interests.

Legal basis: Consent where required, or another applicable legal basis for the particular processing activity.

4. COOKIES & TRACKING TECHNOLOGIES

Our website uses cookies, pixels, and similar technologies to support its functionality, understand website performance, and provide marketing and advertising services.

These technologies may include:

• Essential cookies required for website security, shopping cart functionality, checkout, and customer account services.

• Functional technologies supporting website features and preferences.

• Analytics technologies used to understand website visits and customer interactions.

• Advertising technologies used to measure campaigns and deliver relevant advertisements, where permitted.

Strictly necessary cookies may be used without consent where legally permitted.

For non-essential cookies and similar tracking technologies, we request consent where required by applicable law.

Our website uses Shopify's cookie consent system, which allows visitors in applicable regions to accept, decline, or manage their preferences.

You may also manage certain cookies through your browser settings.

The providers, purposes, and retention periods of cookies may vary according to the technologies enabled on our website.

5. SHOPIFY & ENHANCED SERVICES

Our online store is hosted by Shopify, which provides the technology necessary to operate our website, shopping cart, checkout, customer accounts, payments-related features, and other e-commerce services.

When you visit or make a purchase through our store, Shopify collects and processes personal information to provide these services.

We have enabled Shopify Network Intelligence, which allows Shopify to use information about interactions with our store together with information from interactions with Shopify and other merchants to provide enhanced services.

These services may support improved shopping experiences, personalization, advertising relevance, fraud prevention, analytics, and store performance.

Information relating to your activity on our store may be shared with Shopify and relevant third parties, including providers located outside your country, for the delivery and improvement of these services.

Shopify may process certain personal information in its own capacity as a data controller, depending on the service and purpose involved.

For further information, please read:

Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com

Through Shopify's Privacy Portal, you can learn more about Shopify's processing activities and exercise applicable rights, including requests to access or delete information and limit certain uses of your data for advertising.

Where required, consent choices made through our cookie banner are communicated to Shopify and applied to its enhanced services.

6. ADVERTISING & ANALYTICS PARTNERS

To operate, measure, and improve our online marketing activities, we use services provided by selected advertising and analytics platforms.

These include:

Google

Google Analytics and Google & YouTube services may be used to understand website activity, measure purchases and conversions, and support Google-related advertising and product listings.

Meta

Facebook and Instagram services may be used to measure advertising performance, understand customer interactions, and support relevant advertising campaigns.

Pinterest

Pinterest services may be used to measure website interactions and the effectiveness of advertising and promotional activities.

TikTok

TikTok services may be used for campaign measurement, advertising analytics, and promotional activities.

Depending on the integration, these providers may receive technical identifiers, website interaction data, and relevant conversion or transaction information through browser-based or server-side technologies.

Such processing is subject to applicable consent requirements, customer privacy choices, and the relevant provider's privacy terms.

Certain advertising-related disclosures may constitute the sharing of personal information or targeted advertising under applicable privacy legislation, even where no personal information is sold in exchange for money.

7. SHARING PERSONAL INFORMATION

We share personal information only where necessary to provide our services, support legitimate business operations, comply with legal obligations, or otherwise where permitted by applicable law.

Relevant recipients may include:

E-Commerce & Technology Providers

Shopify and other service providers supporting our online store, customer accounts, website functionality, translation, communications, and technical operations.

Depending on the features used, these may include Weglot, customer communication services, and other Shopify integrations.

Payment Providers

Payment service providers and financial institutions involved in securely processing transactions, refunds, and payment-related enquiries.

Shipping & Logistics Providers

Delivery and courier companies, including DHL Express and ACS, together with customs brokers or relevant customs authorities when required for international shipments and returns.

Marketing & Analytics Providers

Google, Meta, Pinterest, TikTok, and other providers involved in the advertising and analytics activities described in this policy.

Professional Advisers & Authorities

Accountants, legal advisers, professional service providers, regulatory bodies, and competent public authorities where disclosure is necessary or legally required.

Where a service provider processes information on our behalf, we seek to use appropriate contractual and data protection arrangements.

We do not disclose personal information to unrelated third parties without an appropriate legal basis.

8. MARKETING COMMUNICATIONS

Customers may choose to subscribe to HANIOTIS HELLAS marketing emails through our website, checkout, or customer account services.

Our marketing subscription checkboxes are not preselected.

Where you have subscribed or where another applicable legal basis exists, we may send information about new collections, product releases, special events, and other brand news.

You can unsubscribe from promotional emails at any time using the unsubscribe option provided in the message or by contacting us directly.

Abandoned Checkout Reminders

If you begin checkout but do not complete your purchase, we may send an automated reminder to the email address provided during checkout, approximately 10 hours after the checkout was left incomplete.

Our checkout settings permit these reminders to be sent even where a customer has not subscribed to our general marketing communications. Such communications remain subject to applicable electronic-marketing laws, including any requirements for prior consent or a qualifying existing-customer exception.

You may request that we stop sending such reminders by contacting us, and we will respect applicable objections and opt-out requests.

Transactional messages, such as order confirmations, shipping updates, and responses to customer enquiries, are separate from promotional communications.

9. YOUR PRIVACY CHOICES

We respect your right to make informed decisions about the use of your personal information.

Depending on your location and applicable law, you may manage your privacy through:

• Our website's cookie consent and preference controls.

• Your customer account marketing preferences.

• Unsubscribe options in promotional emails.

• Direct requests to info@haniotishellas.com.

• Shopify's Privacy Portal at https://privacy.shopify.com.

For customers in regions where applicable privacy legislation provides rights to opt out of certain data sharing or targeted advertising, our website also makes available a Data Sharing Opt-Out page through its navigation or footer, where applicable.

Privacy choices may be subject to the technical and legal requirements of the relevant service.

10. INTERNATIONAL DATA TRANSFERS

Some of our technology, payment, advertising, and logistics providers operate internationally.

As a result, personal information may be processed or transferred outside Greece or the European Economic Area, including to countries where data protection laws differ.

Where the GDPR requires safeguards for international transfers, an appropriate legal transfer mechanism must apply, such as a European Commission adequacy decision, Standard Contractual Clauses, or another recognized safeguard.

You may contact us for further information about the applicable transfer arrangements and available safeguards.

11. DATA RETENTION

We retain personal information only for as long as necessary for the purposes described in this policy, taking into account applicable legal requirements.

Retention periods or criteria depend on the nature of the information.

Order, payment, invoice, and accounting records are retained for the periods required by applicable tax, accounting, and commercial legislation.

Customer service correspondence, returns documentation, and jewelry quality control records are retained for periods reasonably necessary to address enquiries, warranty matters, disputes, and potential legal claims.

Marketing subscription information is retained for as long as necessary to manage the relevant permissions and communications, including maintaining appropriate records of unsubscribed contacts.

Website analytics and cookie-related data are retained according to relevant service configurations, consent choices, and applicable legal requirements.

Once personal information is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.

A request for deletion does not necessarily require the deletion of records that we must retain for legal or regulatory purposes.

12. DATA SECURITY

We recognize the importance of protecting the confidentiality and integrity of personal information.

We use appropriate technical and organizational measures intended to safeguard information against unauthorized access, alteration, loss, misuse, or disclosure.

Access to personal information is limited according to legitimate business requirements.

We also rely on appropriate security arrangements provided by our e-commerce, payment, and other technology partners.

Although we take reasonable precautions, no online transmission or electronic storage system can guarantee absolute security.

13. YOUR RIGHTS UNDER GDPR

Depending on applicable law, you may have the right to:

• Request access to your personal information.

• Request correction of inaccurate or incomplete information.

• Request deletion of personal information in applicable circumstances.

• Request restriction of certain processing activities.

• Object to processing based on legitimate interests, including direct marketing.

• Request portability of certain information.

• Withdraw consent at any time where processing is based on consent.

• Exercise applicable rights concerning solely automated decisions producing legal or similarly significant effects.

Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.

These rights may be subject to specific legal requirements and exceptions.

To exercise your rights, please email info@haniotishellas.com.

We may request reasonable information to verify your identity before acting on a request involving personal data.

We will respond within the applicable legal timeframe, generally within one month under the GDPR, subject to any permitted extension.

14. THIRD-PARTY WEBSITES & SERVICES

Our website may include links to social media platforms, payment providers, third-party applications, or other external websites.

These services may have their own privacy policies and may process information independently.

We encourage you to review the relevant privacy notices when interacting with external platforms.

15. COMPLAINTS & SUPERVISORY AUTHORITY

If you have concerns about how we process your personal information, please contact us so we can review your enquiry.

You also have the right to lodge a complaint with the competent data protection authority.

In Greece, the relevant authority is:

Hellenic Data Protection Authority

Website: https://www.dpa.gr

16. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our operations, service providers, technologies, or legal requirements.

The latest version will be published on our website with its revision date.

Where required by law, we will provide further notice of material changes.

17. CONTACT INFORMATION

For questions regarding this Privacy Policy, personal data requests, or privacy-related concerns, please contact:

HANIOTIS HELLAS IKE

Stadiou 3, Athens 10562, Greece

Email: info@haniotishellas.com

Telephone: +30 210 300 5645

Website: www.haniotishellas.com