Privacy Policy

1. Data Controller

The Data Controller is: SARPHATIE ESTHER DANIELLA LEO, headquartered in Palio Psychiko, Attica, Paschalias 9, 15452, Greece, Tax ID 112010153.

Back to contents

2. What Data We Collect

2.1 Data you provide

• Identity & contact data: name, surname, email, phone (if provided), billing details.
• Account data: username and password (stored in encrypted/hashed form), preferences.
• Order & transaction data: items purchased, order history, invoices/receipts, payment status.
• Service-related data: information you submit for sessions/seminars/coaching (only what is necessary).
• Communications: messages you send us via forms, email, chat, or social channels.
• Marketing preferences: newsletter opt-in/opt-out and relevant choices.

2.2 Data collected automatically

• Technical data: IP address, browser type, device, operating system, referral pages, timestamps.
• Usage data: pages viewed, clicks, time on site, and similar analytics signals.
• Cookies identifiers: session IDs, cart/session tokens, and consent preferences.

Back to contents

3. How We Use Your Data (Purposes)

We use personal data mainly to:

• Provide the Website and allow you to create/manage an account.
• Process orders, payments, and (if applicable) delivery of services/digital products.
• Communicate with you about your order, purchase, or service.
• Verify identity for transactions where needed.
• Improve the Website and measure traffic/performance (e.g., GA4, where enabled).
• Prevent fraud, abuse, and enhance security.
• Send marketing/newsletters only if you have given consent (you can unsubscribe anytime).
• Comply with legal obligations (tax, accounting, consumer law, etc.).

All information related to personal data is treated as secure and confidential and is used for direct and meaningful communication, proper execution of orders (payment and delivery) and identity verification where required.

Back to contents

4. Legal Bases for Processing

Under GDPR, we rely on one or more of the following legal bases:

• Performance of a contract: to complete your purchase or provide the service you requested.
• Legal obligation: for tax/accounting and other legal compliance.
• Legitimate interests: to operate and secure the Website, prevent fraud, and improve performance (balanced against your rights).
• Consent: for newsletters/marketing and (where applicable) non-essential cookies/trackers.

Back to contents

5. Who We Share Data With

We may share your data only with trusted third parties, to the extent necessary for the purposes above, such as:

• Hosting & infrastructure: your hosting provider and required technical vendors
• Payment processors & banks: Alpha Bank (Alpha e-Commerce) and/or PayPal (depending on your chosen method)
• Accounting/legal advisors: for invoicing, tax reporting, and compliance
• Newsletter/email marketing (if you opt-in): MailWizz
• Analytics (if enabled/accepted): Google Analytics 4 (GA4)
• Authorities: when required by law, court order, or competent public authority

We do not “sell” personal data.

Back to contents

6. Payments

Card payments are processed via the electronic payment platform “Alpha e-Commerce” of Alpha Bank using encryption/SSL. Alternatively, an international payment platform such as PayPal may be used, depending on your selection.

For card order processing, it may be necessary to collect certain personal data. Any supporting documents that may be requested to certify identity remain confidential and are transmitted/controlled only by the bank where applicable.

Back to contents

7. Refunds & Cancellations (No Refund Policy)

Digital Goods / Digital Services — Final Sale: The Website offers exclusively digital goods and/or digital services, including (without limitation) digital downloads, digital content, online materials, sessions, seminars, coaching, and similar offerings. Due to the nature of digital content and the fact that access and/or delivery is typically provided immediately upon purchase (including instant download and/or instant access), all sales are final.

• No refunds: To the maximum extent permitted by applicable law, purchases of digital goods and digital services are non-refundable and non-exchangeable.
• Immediate performance / access: By completing a purchase, you acknowledge that access and/or delivery may begin immediately after payment confirmation, and you expressly request such immediate performance where applicable.
• Exceptions: This policy applies strictly, except where a refund or cancellation right is required by mandatory provisions of applicable law (in which case such mandatory rights will apply only to the extent required).

Events / Dinners / Tickets — Non-Refundable: Any ticket, registration, reservation, or similar purchase for an event, dinner, seminar, or live experience organized by us (including “Dinner” events) is non-refundable once purchased. This includes cases where you are unable to attend for any reason. Unless otherwise explicitly stated in writing by us, no refunds, cancellations, or credits will be issued for event-related purchases.

For operational, security, and compliance purposes, we may retain records of your purchase (such as invoice/receipt details and payment status), as described in Section 9 (Data Retention).

Back to contents

8. Cookies & Similar Technologies

We use cookies and similar technologies to ensure the Website works properly, to remember your preferences, and (if enabled) to measure traffic.

8.1 Types of cookies

• Strictly necessary: essential for login, security, cart and checkout.
• Preferences: remember your choices (e.g., language, consent settings).
• Analytics: help us understand usage and improve performance (GA4 only if enabled/accepted, depending on your consent setup).
• Marketing (if used): help measure campaign effectiveness (only if enabled/accepted).

8.2 Managing cookies

You can manage cookies via your browser settings. If you use a cookie consent banner/plugin, you can also adjust preferences from there.

Optional: If you have a dedicated Cookies Policy page, link it here: Cookies Policy (change this link if your slug is different)

Back to contents

9. Data Retention

We keep personal data only for as long as needed for the purposes described above, for example:

• Orders/invoices: retained as required by applicable tax/accounting laws.
• Account data: kept while your account remains active; you may request deletion (subject to legal obligations).
• Support communications: kept as needed to resolve requests and maintain records.
• Security logs: retained for a limited period for security/fraud prevention (typically up to 90 days).
• Marketing subscriptions: until you unsubscribe/withdraw consent.

Back to contents

10. Data Security

We implement appropriate technical and organizational measures to protect personal data, including access controls and secure processing. We recommend changing your password regularly and not sharing it with third parties.

No system is 100% secure; however, we continuously aim to maintain strong protections against unauthorized access, disclosure, alteration, or loss.

Back to contents

11. Your Rights

Under GDPR, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request erasure (“right to be forgotten”), where applicable
• Request restriction of processing, where applicable
• Request data portability, where applicable
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with the relevant supervisory authority (in Greece: Hellenic Data Protection Authority)

To exercise your rights, contact us at [email protected]. We may request verification of identity to protect your data.

Back to contents

12. International Transfers

Some service providers (e.g., payment processors, analytics/newsletter tools) may process data outside the European Economic Area. Where this happens, we take steps to ensure appropriate safeguards (e.g., standard contractual clauses or equivalent mechanisms).

Back to contents

13. Children’s Privacy

The Website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

Back to contents

14. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

Back to contents

15. Contact

If you have questions about this Privacy Policy or about how we process personal data, contact us:

Back to contents