Privacy Policy

1. About this privacy policy

These rules apply to the althion.pro website, supplement orders, and messages received from you. They do not cover external links, which are governed by their own terms.

2. Data controller and contact information

The data controller responsible for your information is Althion Botanicals Ι.Κ.Ε., located at Ελευθερίου Βενιζέλου 34, 653 02 Καβάλα, Ελλάδα. For data management requests, email [email protected] or call +30 550 431 556.

Merchant

Althion Botanicals Ι.Κ.Ε.

Registered address

Ελευθερίου Βενιζέλου 34, 653 02 Καβάλα, Ελλάδα

Email

[email protected]

Phone

+30 550 431 556

3. Categories of data collected

We only keep the details needed to handle each specific operation.

3.1 Information you provide directly

Name, shipping address, email, and phone number upon purchase. Also, the text of your requests or reviews. Order details remain on file for as long as tax law requires, while messages are kept for up to 3 years from the last contact.

3.2 Payment and transaction data

Order ID, list of items, charges, payment method, and shipping status. We do not store card numbers or banking login details on the website. Data is kept for the period required by tax audits.

3.3 Automatically collected information

IP address, device model, browser, connection time, and pages viewed, via the server and cookies. Technical server logs are deleted in 30 days, while anonymous statistical reports are kept for up to 14 months.

3.4 Marketing and advertising data

The referral source, link, or promotional campaign that brought you to the store, solely to measure traffic. This data is deleted after up to 90 days.

3.5 Data from external partners

Parcel tracking updates from the courier and bank transfer confirmations from the bank to secure your order.

3.6 Children

The products and website are intended for individuals over 18 years of age. We do not keep records on minors. If you are a parent or guardian, request immediate removal of such data at [email protected].

4. Information required for purchase

Full name, shipping address, email address, and phone number are required to dispatch the parcel and keep you updated. Without them, fulfilling the order is not possible. Any other information is optional.

5. Purposes of using your data

• To package supplements, issue invoices, deliver parcels, and handle potential returns within 60 days.
• To send replies to your inquiries and provide order tracking notifications via SMS or email.
• To protect the store against malicious activities, prevent fraud, and measure site traffic.
• To provide updates about available products, only upon your explicit request. Every newsletter email includes an unsubscribe option.
• To comply with legal obligations, such as tax and accounting transaction records.

6. Third-party access to your data

We do not sell your data. We transfer it solely to partners who have signed a legal agreement to act only under our instructions.

6.1 Payment processing

The banking institution handling the transfer receives only the information necessary for identification and payment settlement.

6.2 Shipping and fulfilment partners

The shipping carrier receives your name, delivery address, and phone number to deliver the package and notify you.

6.3 Service providers

Server hosting providers, email platforms, and support systems process data solely on our behalf.

6.4 Advertising and analytics partners

Analytics and advertising tools are activated only with your consent and transfer technical browsing data to the respective providers, in accordance with the Cookie Policy.

6.5 Legal and regulatory disclosures

We disclose information to public authorities if required by law or if necessary to defend our legal rights in a transaction dispute.

6.6 Business transfers

In the event of a business transfer or restructuring, customer records are transferred to the new management under the exact same confidentiality terms.

7. International data transfers

If a technical partner operates outside Greece, data transfer takes place only under an official adequacy decision or approved contractual clauses guaranteeing full protection.

8. Your rights and choices

Under the General Data Protection Regulation (GDPR), you retain data subject rights under Articles 15-22 GDPR.

8.1 Rights to review, modify, and delete

You have the right to view what data we hold about you, correct errors, request erasure or export of your data, and restrict or object to its use. Withdrawing consent does not invalidate actions carried out lawfully prior to withdrawal.

8.2 Marketing choices

Every newsletter email includes an unsubscribe link. Non-essential cookies can be disabled at any time via the settings panel on the website.

8.3 Exercising your rights

Send your request to [email protected]. We may request identity verification before responding within 30 days. You also have the right to file a complaint with the relevant data protection authority in Greece.

9. Data security

Browsing is protected with HTTPS. Purchase details are stored in secure databases with restricted access, accessible only by staff fulfilling the order. We do not record or store payment card numbers.

10. Data retention

Invoices and orders are retained for the period required by tax law and then destroyed. Written support requests are kept for up to 3 years from the last contact. Server log files are deleted within 30 days, while aggregated statistics are retained for up to 14 months. Consent to receive updates remains valid until you unsubscribe.

11. Third-party websites and services

Links to banks, social networks, or external websites lead to platforms with their own privacy policies. We do not control and are not responsible for their data handling practices.

12. Changes to this policy

We update this policy when changes occur in legislation or internal procedures. The official version is always the one displayed here, with the update date shown at the top of the page.