Last updated: 5 November 2026

This Privacy Policy explains how Organic Islands collects and uses personal data when you visit organicislands.gr, contact us or place an order. We process personal data in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Who we are

Data controller: ORGANIC ISLANDS IKE (trading as Organic Islands), Chora, Naxos 84300, Cyclades, Greece
VAT No: EL999348895
Email: info@organicislands.gr · Phone: +30 22850 23110

2. What data we collect and why

  • Orders: name, billing and shipping address, phone, email, order details. We use them to process, ship and invoice your order (performance of a contract, Art. 6(1)(b) GDPR) and to meet our tax and accounting obligations (legal obligation, Art. 6(1)(c)).
  • Customer account: if you create an account, your login details and order history, so you can manage your orders (Art. 6(1)(b)).
  • Contact form and email: name, email, company, phone and your message, to answer your enquiry (our legitimate interest, Art. 6(1)(f), or pre-contractual steps, Art. 6(1)(b)).
  • Payments: card payments are handled directly by our payment providers. We do not see or store your full card details.
  • Cookies and analytics: with your consent (Art. 6(1)(a)) we use Google Analytics, Google advertising tools and the Meta (Facebook) Pixel to measure visits and the effectiveness of our ads. Strictly necessary cookies (e.g. cart, login, security) are used without consent. Details are in our Cookie Policy, and you can change your choice at any time from the cookie settings button.

3. Who receives your data

We share personal data only as needed with: courier and postal companies (to deliver orders), payment providers, our accountant, our website hosting and IT support providers, and — only if you consent — Google and Meta for analytics and advertising. We never sell your data.

Some of these providers (e.g. Google, Meta) may process data outside the EU. Such transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

4. How long we keep it

  • Order and invoicing data: for as long as Greek tax and accounting law requires.
  • Customer account: until you ask us to delete it.
  • Contact messages: up to 2 years after our last communication.
  • Cookies: for the period stated in the Cookie Policy.

5. Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting earlier processing. To exercise any of these rights, email info@organicislands.gr. We will reply within one month.

You may also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr.

6. Security

We use encrypted connections (HTTPS), access controls and regular updates to protect your data. No online system is completely secure, but we take reasonable measures to protect it.

7. Changes

We may update this policy. The date at the top shows the latest version.