Privacy Policy

Controller

Sublime Curator, Greece. Questions or requests: n.danai@proton.me.

What we collect

• Order data: name, email, phone, shipping address, items, amount, order reference.
• Account data (only if you create one): email and authentication identifiers.
• Payment data: handled by Stripe. We receive a confirmation and the last card digits only.
• Technical data: basic logs needed to run and secure the site.

Why, and on what legal basis

• To perform your purchase contract — order processing, delivery, support.
• Legal obligation — retaining invoices and tax records.
• Legitimate interest — fraud prevention and keeping the shop secure.
• Consent — only if you subscribe to updates. Withdraw any time via the unsubscribe link.

Who we share it with

Stripe (payment processing), our hosting and database provider, and the carrier delivering your parcel. Each acts under contract and only for those purposes. We never sell your data.

Retention

Order and invoice records are kept for the statutory accounting period. Account data is kept until you ask us to delete it. Marketing data is deleted on unsubscribe.

Your rights

You may request access, correction, deletion, restriction, portability, or object to processing, and you may lodge a complaint with your national data protection authority. Write to n.danai@proton.me and we will respond within 30 days.

International transfers

Some providers process data outside the EEA under Standard Contractual Clauses or an adequacy decision.