Black Lotus – Privacy Policy
Effective date: 16/05/2025
At Black Lotus, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website: https://www.blacklotusart.gr.
1. Who We Are
Black Lotus is a Greece-based small business that creates and sells unique hand-painted garments. We are the data controller of the personal information collected through this website.
If you have any privacy-related questions, you can contact us at:
📧 blacklotusartproject@gmail.com
2. What Personal Data We Collect and Why
We only collect the minimum necessary data to operate our store and fulfill your orders. This includes:
| Type of Data | Purpose | Legal Basis |
|---|---|---|
| Name, address, email, phone | Order processing & shipping | Contractual necessity |
| Payment details (via payment provider) | Completing transactions | Contractual necessity |
| IP address, browser info | Security & spam prevention | Legitimate interest |
| Uploaded media (e.g. for custom orders) | Order customization | Consent / Contractual necessity |
| Meta Pixel/analytics data | Marketing & performance measurement | Consent |
We do not collect sensitive personal data (e.g., health, religion, political opinions).
3. Cookies and Tracking
We use cookies to improve your shopping experience and website functionality.
Types of cookies we use:
- Essential cookies: For shopping cart, login, account management.
- Performance cookies (e.g. Meta/Facebook Pixel): To track store interactions and improve advertising.
You can manage or revoke your cookie preferences at any time via your browser or our cookie banner.
👉 We do not use advertising cookies unrelated to Meta/Facebook.
4. Embedded Content and External Services
Some pages may include embedded content (e.g. Instagram posts or YouTube videos). These sites may collect your data, use cookies, or track your interaction as if you visited their site directly.
Uploaded images (e.g. for custom requests) should not contain EXIF location data, as visitors may download and extract such information.
5. Data Sharing
We do not sell, rent, or trade your personal data.
We may share your data only with:
- Trusted service providers (e.g. shipping companies, payment processors)
- Legal authorities, when required by law
- Social media platforms (Meta/Facebook), strictly via anonymized tracking tools
Some of these tools may process data outside the EU. In such cases, we rely on approved safeguards (e.g. standard contractual clauses) to ensure your data is protected.
6. Data Retention
We retain your personal data only as long as necessary to:
- Fulfill orders
- Comply with legal/accounting obligations
- Provide customer support
You may delete your account at any time via your account settings or by contacting us.
7. Your Rights Under the GDPR
You have the right to:
- Access the data we hold about you
- Rectify inaccurate or incomplete data
- Request deletion of your data (“right to be forgotten”)
- Restrict or object to processing under certain conditions
- Withdraw consent at any time (without affecting past lawful processing)
- Data portability: receive your data in a commonly used format
To exercise any of the above, email us at: blacklotusartproject@gmail.com
If you believe your data is being misused, you have the right to lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr
8. Security Measures
We use encryption (SSL), secure hosting, and reliable third-party services to protect your data. Despite our efforts, no system is 100% secure — please use strong passwords and remain cautious online.
9. Changes to This Policy
We may update this Privacy Policy occasionally. Any changes will be posted on this page with a revised effective date. Continued use of the site implies acceptance of the updated policy.
10. Cookies
By continuing to use this website, you agree to our use of essential and functional cookies. You may manage or delete cookies at any time via your browser settings.
📍 Last updated: 16/05/2025