Privacy policy
Privacy Policy
Kyriaki Siorfane (hereinafter "SIOR" or "we") respects the privacy and protection of the personal data of visitors and customers of the website siornatureknows.com.
This Privacy Policy explains what data we collect, how we use it, with whom we share it and what rights you have, in accordance with the EU General Data Protection Regulation (GDPR – Regulation 2016/679) and the relevant Greek legislation.
1. Data controller
Business name: Kyriaki Siorfane
Tax ID (AFM): 110418279
Registered address: 3 Dimitriou Vikela St., Agia Eleousa, 34100 Chalkida, Greece
Contact email for privacy matters: siornatureknows@gmail.com
Phone: +30 6972 404343
2. What data we collect
Depending on your activity on the website, we may collect:
a) Data you provide to us:
Full name
Address (shipping and billing)
Phone number
Email address
Payment details (processed exclusively by certified providers — Shopify Payments, PayPal, Klarna — and not stored by us)
Content of your communication with us (emails, messages)
b) Data collected automatically:
IP address
Device and browser type
Language and settings
Time and duration of visit
Pages visited
Source of visit (e.g. from Google, social media)
3. How we use your data
We use your data for:
Order fulfilment (shipping, invoicing, communication)
Customer service (answering questions, handling returns)
Compliance with legal obligations (tax, accounting)
Improving our website and services
Sending newsletters / promotional updates (only if you have given explicit consent — you can withdraw it at any time)
Preventing fraud and abuse
4. Legal basis for processing
We process your personal data on the basis of one or more of the following legal grounds (Article 6 GDPR):
Performance of a contract (orders, shipping)
Compliance with a legal obligation (taxation, record keeping)
Consent (newsletter, marketing cookies)
Legitimate interest (improving services, website security)
5. Who we share your data with
Your data is never sold to third parties. We share it only with:
Shopify (e-shop platform — data storage)
Courier companies (ELTA Courier, ACS, Geniki Taxydromiki etc. — for order delivery)
Payment providers (Shopify Payments, PayPal, Klarna — for payment processing)
Accounting office (for legal invoicing)
Competent authorities, where required by law
All of the above are contractually bound to protect your data in accordance with the GDPR.
6. Data transfers outside the EU
Some of our partners (e.g. Shopify) may store data on servers outside the EU (USA, Canada). In these cases, the transfer is carried out on the basis of the European Commission's standard contractual clauses or other approved protection mechanisms.
7. Data retention
We keep your data for as long as necessary for the purpose for which it was collected:
Orders & invoices: 10 years (tax obligation)
Customer account data: until the account is deleted
Newsletter subscription: until consent is withdrawn
Communication data: 2 years from the last communication
8. Your rights
Under the GDPR, you have the following rights:
Right of access — to request a copy of your data
Right to rectification — to request correction of inaccurate data
Right to erasure ("right to be forgotten") — under certain conditions
Right to restriction of processing
Right to data portability — to receive your data in a structured format
Right to object to certain processing
Right to withdraw your consent at any time
Right to lodge a complaint with the Hellenic Data Protection Authority
To exercise any of the above rights, contact us at siornatureknows@gmail.com. We will respond within 30 days.
9. Data Protection Authority
If you believe that the processing of your data violates the law, you have the right to lodge a complaint with the:
Hellenic Data Protection Authority
Address: 1-3 Kifisias Ave., 115 23 Athens, Greece
Phone: +30 210 6475600
Website: www.dpa.gr
10. Data security
We take the necessary technical and organisational measures to protect your data against loss, misuse or unauthorised access:
SSL connection across the entire website (encryption)
Secure storage through Shopify (certified platform)
Payment processing only by certified providers (PCI DSS)
Access to data restricted to authorised persons only
11. Minors
Our website and services are intended for adults. We do not knowingly collect data from minors under 16. If you are a parent/guardian and become aware that your child has provided data, please contact us for immediate deletion.
12. Changes to the Privacy Policy
This policy may be revised periodically. Changes are posted on the website with an updated date.
Last updated: April 2026
13. Contact
For any question regarding the protection of your personal data:
Email: siornatureknows@gmail.com
Phone: +30 6972 404343