ck-jewellery.com

Privacy Policy

Last updated: [21/02/2026]

This Privacy Policy explains how ck-jewellery (“we”, “us”) collects and processes personal data when you visit our website, place an order, or contact us.

1) Data Controller

• Controller: ck-jewellery

• Address: 152, Agiou Antoniou str., 15235, Vrilissia, Attica, Greece

• Email: info@ck-jewellery.com

• Phone: (+30) 694 8377 739

2) What data we collect

Depending on how you use the site, we may collect:

A. Order / checkout data (contract data)

• Full name, billing/shipping address, email, phone

• Order details (products, quantities, prices)

• Payment method and payment status (we do not receive full card numbers)

B. Account data (if accounts are enabled)

• Login email, password (stored hashed), order history

C. Communications

• Messages you send us (email/contact form), and our replies

D. Technical & usage data

• Device/browser info, approximate location, pages viewed, actions/events, cookie identifiers, IP-related metadata (see Analytics section)

3) Why we use your data (purposes) and legal basis (GDPR)

We process your data for:

1. To fulfill your order (shipping, customer service, returns)
   Legal basis: Contract performance.

2. To issue invoices/receipts and meet legal/tax obligations
   Legal basis: Legal obligation.

3. To protect the website and prevent fraud/abuse
   Legal basis: Legitimate interests.

4. To analyze website traffic and improve performance (Analytics)
   Legal basis: Consent (where required via cookie banner).

5. Marketing communications (newsletter/offers) (only if you opt in)
   Legal basis: Consent (you can withdraw anytime).

4) Cookies and similar technologies

We use cookies/technologies:

• Strictly necessary (site operation, cart/checkout, security)

• Analytics (only if you consent)

You can manage cookies through:

• the cookie banner / “Cookie Settings” (if available), and/or

• your browser settings (block/delete cookies).

5) Analytics (Google Analytics 4)

If you consent to analytics cookies, we use Google Analytics 4 to understand how visitors use the site (e.g., which pages are visited, time on page, clicks/events, approximate location, device type).

IP / location handling (EU): Google Analytics does not log or store individual IP addresses from EU users. For EU traffic, IP data is used only to derive coarse geolocation (e.g., city/region) and is then discarded.

Cookies used by Analytics: GA4 may use first-party cookies to distinguish users/sessions (for example, _ga and related variants).

Data retention: We configure retention in GA4 (typically 2 months or 14 months, depending on settings). Some categories (age/gender/interests) have a fixed 2-month retention regardless of settings.

How to opt out of Analytics: You can refuse/withdraw consent via the cookie banner settings (if present) or block cookies in your browser.

6) Who we share data with (processors)

We may share necessary data with service providers that process data on our behalf, such as:

• Hosting / IT providers

• Courier/shipping providers

• Payment providers (only what’s required to process payments)

• Analytics provider (Google)

These providers are authorized to process data only as needed to deliver their services.

7) International data transfers

Analytics and some providers may process data outside the EU/EEA. In those cases, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses and/or equivalent mechanisms offered by the provider). Google provides data protection terms for its services.
Google also publishes how it uses cookies.

8) How long we keep your data

• Order/invoicing data: kept as required by tax/accounting law.

• Customer support messages: kept as long as needed to handle the issue, then archived/deleted based on internal retention rules.

• Analytics data: based on GA4 retention settings (see section 5).

9) Your rights (GDPR)

You have the right to:

• Access your data

• Correct inaccurate data

• Delete data (where applicable)

• Restrict processing

• Object to processing (especially legitimate interests)

• Data portability (where applicable)

• Withdraw consent at any time (does not affect past processing)

To exercise rights, contact us:

• Email: info@ck-jewellery.com

• Address: 152, Agiou Antoniou str., 15235, Vrilissia, Attica, Greece

10) Complaints

If you believe your data protection rights are violated, you can file a complaint with the Hellenic Data Protection Authority (HDPA).

11) Security

We use reasonable technical and organizational measures to protect data (access controls, encryption where applicable, backups, monitoring). No system is 100% secure.

12) Changes to this policy

We may update this policy. The “Last updated” date will change accordingly.