Last updated: 19 July 2026
This Privacy Policy explains how Jeta Boutique processes personal data when you visit jetaboutique.gr, contact us, create an account or place an order. It is intended to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data-protection law.
1. Data controller
Jeta Boutique
Erythraias 14, Vyronas, Attica, 16231, Greece
Telephone: +30 211 426 7745 / +30 694 656 0098
Email: info@jetaboutique.gr
2. Personal data we collect
Depending on how you use the website, we may process:
- identity and contact details, such as name, email, telephone number and billing or delivery address;
- order, payment-status, invoice, return and customer-service information;
- account information and saved preferences;
- communications submitted through email or contact forms;
- technical and usage information, such as IP address, browser, device, pages visited, cookie identifiers and security logs;
- marketing preferences and consent records.
Card details are entered in the secure Nexi XPay environment. Jeta Boutique does not receive or store the complete card number or card security code.
3. Purposes and legal bases
We process personal data only where a lawful basis applies, including:
- Performance of a contract: to process orders, payments, deliveries, returns, refunds and customer accounts;
- Legal obligation: to maintain accounting and tax records, respond to lawful requests and comply with consumer-protection requirements;
- Legitimate interests: to secure and operate the website, prevent fraud, respond to enquiries and improve our services, where those interests do not override your rights;
- Consent: for non-essential cookies and direct marketing where consent is required. Consent may be withdrawn at any time.
4. Recipients and service providers
We disclose data only as necessary to service providers that support our business, such as website hosting and technical-support providers, WooCommerce and related website services, payment providers including Nexi XPay, banks, delivery and parcel-locker providers, accounting or professional advisers, email and customer-support providers, and competent public authorities where required by law.
Service providers may process data only for the agreed purpose and under applicable data-protection obligations.
5. International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, we use a legally recognised transfer mechanism where required, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with appropriate safeguards.
6. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, tax, warranty, dispute-resolution and security periods. Order and invoice information may be retained for the period required by Greek tax and commercial law. Contact enquiries are retained only as long as reasonably necessary to respond and manage any related issue. Cookie lifetimes are described through the website’s cookie-preference tool.
7. Cookies
The website uses necessary cookies for functions such as the cart, checkout, security and consent preferences. Analytics, marketing or other non-essential cookies are used only in accordance with the choices made through the cookie banner where consent is required. You can review or change your choices at any time using “Manage consent” on the website.
8. Your rights
Subject to the conditions of the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, or object to processing based on legitimate interests or direct marketing. Where processing is based on consent, you may withdraw consent without affecting processing carried out before withdrawal.
To exercise a right, email info@jetaboutique.gr. We may need to verify your identity before responding. You also have the right to lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr.
9. Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet service can guarantee absolute security.
10. Children
The online store is not directed to children who cannot lawfully enter into a purchase contract. If you believe a child has provided personal data without appropriate authorisation, contact us.
11. Changes to this policy
We may update this policy to reflect legal, technical or operational changes. The current version and update date will be published on this page.