Privacy policy

ASPECTO operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

ASPECTO is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website, make a purchase, use our custom case builder, create an account, or otherwise communicate with us.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), the data controller is:

ASPECTO
Operated by Konstantinos Efthimiou
Email: info@aspecto.gr

Please read this Privacy Policy carefully.

1. Personal Information We Collect

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

  • Contact details, including your name, billing address, shipping address, phone number, and email address.
  • Payment and transaction information, including payment method, payment confirmation, transaction details, and information necessary to process your payment.
  • Account information, including account login details, preferences, and settings.
  • Order information, including products viewed, added to cart, purchased, returned, cancelled, or refunded.
  • Design files, including images, artwork, photographs, or other files uploaded through our custom case builder.
  • Communications with us, including information provided when contacting customer support.
  • Device and technical information, including IP address, browser type, device information, cookies, and similar identifiers.
  • Usage information, including how you interact with and navigate our website and Services.

We do not normally receive or store your full payment card details directly. Payment information is processed through our payment service providers and Shopify in accordance with their own security and privacy practices.

2. Sources of Personal Information

We may collect personal information:

  • Directly from you when you place an order, create an account, upload a design, contact us, or otherwise provide information to us.
  • Automatically when you use our website, through cookies and similar technologies.
  • From Shopify and service providers that support our store.
  • From payment processors, shipping providers, and other third parties involved in fulfilling your order.
  • From marketing or analytics partners where permitted by applicable law and, where required, based on your consent.

3. How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing and Fulfilling the Services

We process personal information in order to:

  • Process and fulfil your orders.
  • Process payments.
  • Arrange shipping and delivery.
  • Provide order confirmations, shipping notifications, and tracking information.
  • Process returns, refunds, or customer service requests.
  • Create and manage customer accounts.
  • Provide and operate the custom case builder.
  • Process design files uploaded by you in order to manufacture your custom case.
  • Maintain records relating to your purchases and transactions.

Customer Support and Communication

We may use your information to respond to enquiries, provide customer support, communicate about your order, and maintain our relationship with you.

Security and Fraud Prevention

We may process information to:

  • Protect the security of our website and Services.
  • Prevent and detect fraud or misuse.
  • Authenticate accounts.
  • Investigate suspicious or unlawful activity.

Legal and Regulatory Requirements

We may process and retain personal information where necessary to:

  • Comply with applicable tax, accounting, consumer protection, and other legal obligations.
  • Respond to lawful requests from authorities.
  • Establish, exercise, or defend legal claims.
  • Enforce our Terms of Service and other policies.

Marketing

Where you have given your consent, we may use your information to send you marketing or promotional communications by email or other permitted means.

You may withdraw your consent or unsubscribe from marketing communications at any time.

4. Legal Bases for Processing

Where the GDPR applies, we process your personal information based on one or more of the following legal bases:

  • Performance of a contract: when processing is necessary to process and fulfil your order, provide the Services, process payments, or provide customer support.
  • Legal obligation: when processing is necessary to comply with tax, accounting, regulatory, or other legal requirements.
  • Legitimate interests: where processing is necessary for our legitimate business interests, such as fraud prevention, security, improving our Services, and managing our business, provided that these interests do not override your rights and freedoms.
  • Consent: where you have given us consent, for example for certain marketing communications or non-essential cookies.

Where processing is based on consent, you may withdraw your consent at any time.

5. Design Files and Custom Orders

If you use our custom case builder, we may collect and process images, artwork, photographs, or other files that you upload.

These files are used for purposes such as:

  • Generating your custom design.
  • Producing and fulfilling your order.
  • Handling quality issues, support requests, reprints, or disputes relating to your order.

Design files are retained only for as long as reasonably necessary for these purposes and may be deleted when they are no longer required, subject to legal, operational, fraud-prevention, or dispute-resolution requirements.

You are responsible for ensuring that you have the right to use any image, artwork, photograph, logo, or other material you upload.

6. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business and provide the Services.

This may include:

  • Shopify, which hosts and operates our e-commerce platform.
  • Payment processors and financial service providers.
  • Shipping and courier providers in order to deliver your order.
  • IT, hosting, analytics, security, and customer support providers.
  • Service providers involved in the production and fulfilment of custom orders.
  • Cloudinary, where used to store or process design files uploaded through our custom case builder.
  • Professional advisers, including accountants, legal advisers, or other consultants where necessary.
  • Public authorities or government bodies where required by law.

We may also disclose information:

  • Where you have requested or consented to the disclosure.
  • Where necessary to protect our rights, customers, or Services.
  • In connection with a restructuring, merger, acquisition, sale, or other business transaction.

We do not sell your personal information.

7. Relationship with Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information about customers and visitors in order to provide its services, operate checkout and payment functionality, prevent fraud, and support the operation of our store.

Information submitted through our store may therefore be processed by Shopify and its service providers, including in countries outside the European Economic Area.

For further information about how Shopify processes personal information, you may review Shopify’s own consumer privacy information.

8. Cookies and Similar Technologies

We and our service providers may use cookies and similar technologies to:

  • Operate essential website functionality.
  • Remember preferences.
  • Maintain shopping cart and checkout functionality.
  • Improve security.
  • Understand website usage.
  • Measure performance.
  • Provide analytics and, where permitted, marketing or advertising functionality.

Where required by applicable law, non-essential cookies and similar technologies will only be used after you provide consent.

You may manage your cookie preferences through the cookie banner or privacy settings available on our website.

9. Marketing Communications

We may send you promotional emails or other marketing communications only where permitted by applicable law and, where required, after obtaining your consent.

You can unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting us at info@aspecto.gr.

Withdrawing your consent will not affect transactional communications relating to your orders, payments, returns, or customer support.

10. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Retention periods may vary depending on factors such as:

  • The duration of our relationship with you.
  • The need to fulfil your order.
  • Customer support or dispute-resolution requirements.
  • Fraud-prevention and security requirements.
  • Applicable tax, accounting, and legal retention obligations.

Certain order, transaction, invoicing, and accounting information may need to be retained even after you request deletion where we are legally required to keep it.

11. International Data Transfers

Some of our service providers, including Shopify and other technology providers, may process or store personal information outside Greece or the European Economic Area.

Where personal information is transferred outside the EEA, we rely on appropriate legal safeguards where required, such as:

  • An adequacy decision issued by the European Commission.
  • Standard Contractual Clauses approved by the European Commission.
  • Other lawful transfer mechanisms permitted under applicable data protection law.

12. Security

We use reasonable administrative, organisational, and technical measures designed to protect personal information.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Please avoid sending sensitive or confidential information through insecure communication channels.

13. Your Rights

If you are located in the European Economic Area, including Greece, you may have the following rights under applicable data protection law:

  • Right of access: to request information about the personal data we process about you.
  • Right to rectification: to request correction of inaccurate or incomplete personal information.
  • Right to erasure: to request deletion of your personal information in certain circumstances.
  • Right to restriction: to request restriction of processing in certain circumstances.
  • Right to object: to object to certain types of processing, including processing based on legitimate interests and direct marketing.
  • Right to data portability: to receive certain personal information in a structured, commonly used, machine-readable format where applicable.
  • Right to withdraw consent: where processing is based on consent.
  • Right to lodge a complaint: with the competent data protection authority.

These rights are not absolute and may be subject to limitations or exceptions under applicable law.

To exercise your rights, contact us at info@aspecto.gr.

We may ask you to verify your identity before processing your request.

14. Children's Privacy

Our Services are not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16.

If you believe that a child has provided personal information to us, please contact us so that we can assess and, where appropriate, delete the information.

15. Third-Party Websites and Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review the relevant privacy policies before providing personal information to third parties.

16. Complaints

If you have a concern about how we process your personal information, please contact us first at:

info@aspecto.gr

If you are located in Greece, you also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

You may find further information at www.dpa.gr.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal requirements, or regulatory obligations.

Any updated version will be published on our website.

18. Contact

For questions about this Privacy Policy, our privacy practices, or to exercise any rights available to you, please contact:

ASPECTO
Operated by Konstantinos Efthimiou
Email: info@aspecto.gr