Privacy Policy

Last updated: 29 October 2026

1. Overview

Anaskela Ltd (“Anaskela”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal information when you visit anaskela.com, place an order, subscribe to our newsletter, or otherwise interact with our business.

Anaskela acts as the data controller. Our Data Protection Officer may be contacted at [email protected].

2. Information We Collect

Information you give us

• Identity: first and last name, title (optional).
• Contact: billing and shipping addresses, email, telephone.
• Account: username, password (stored only as a one-way salted hash), order history, saved addresses.
• Transaction: order details, delivery options, selected products.
• Payment token: we never see or store your card number; we hold a payment-processor-issued token.
• Communications: emails, support tickets, chat messages, product reviews.

Information collected automatically

• Device data: IP address (truncated after 30 days), browser type, operating system.
• Usage data: pages visited, time on page, referring URL.
• Cookies: see section 6.

3. How We Use Information

1. Processing and shipping your order; providing after-sales support.
2. Operating your customer account.
3. Communicating with you about your order (transactional emails).
4. Preventing fraud, abuse and payment chargebacks.
5. Complying with our legal obligations.
6. Sending marketing communications where you have opted in.
7. Operating and improving our website.
8. Running our take-back and recycling programme.

4. Legal Bases Under GDPR

• Contract performance — order processing, delivery, account management (Art. 6(1)(b) GDPR).
• Legal obligation — accounting, VAT, consumer-protection record-keeping (Art. 6(1)(c) GDPR).
• Legitimate interests — fraud prevention, service improvement (Art. 6(1)(f) GDPR).
• Consent — email marketing, non-essential cookies (Art. 6(1)(a) GDPR).

5. Sharing With Third Parties

We never sell your personal information. We share it only with processors necessary to run our business: AWS Ireland (hosting), Stripe and PayPal (payments), DHL/DPD/UPS/Hellenic Post (shipping), Postmark (email), Google Analytics (anonymised), Help Scout (customer service).

6. Cookies & Tracking

We use strictly necessary cookies (always on), functional cookies (optional), analytics cookies (optional) and marketing cookies (opt-in only).

7. Your Rights (GDPR)

Under the GDPR you have rights to: access, rectification, erasure, restriction, portability, objection, and complaint to the Hellenic Data Protection Authority. To exercise any of these rights, email [email protected]. We respond within 30 days.

8. California Residents (CCPA/CPRA)

If you reside in California, you have additional rights under the CCPA/CPRA including the right to know, delete, correct, and opt-out of sale/sharing. Anaskela does not sell personal information.

9. Data Retention

• Order records: 10 years (Greek tax law).
• Marketing consent: 3 years after last activity.
• Analytics: 14 months.
• Account data: for the lifetime of your account.

10. Security

TLS 1.3, salted and hashed passwords, encryption at rest, PCI DSS SAQ A compliance, 72-hour breach notification policy.

11. Children’s Privacy

Our services are intended for users aged 16 and over. We do not knowingly collect personal information from children under 16.

12. Contact

Email: [email protected]
Post: Data Protection Officer, Anaskela Ltd, 12 Odos Lysikratous, Plaka, Athens 10558, Greece
Supervisory authority: Hellenic Data Protection Authority — dpa.gr