Privacy policy
Last Updated: June 18, 2026
KAREPIDIS ESTATE operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a seamless shopping experience (the “Services”). We utilize advanced and secure e-commerce platforms and cloud technology providers to deliver our Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or complete a transaction through the Services, or otherwise communicate with us. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall govern with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By accessing or using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as outlined herein.
Personal Information We Collect or Process
“Personal information” refers to information that identifies or can reasonably be linked to you or another individual. Personal information does not include data collected anonymously or de-identified such that it cannot reasonably identify or be linked to you. Depending on how you interact with our Services, your location of residence, and applicable law, we may collect or process the following categories of personal information, including inferences drawn from them:
Contact Information: Name, postal address, billing address, shipping address, telephone number, and email address.
Financial Details: Payment card details (credit/debit card numbers), bank account information, transaction details, payment methods, payment confirmations, and related billing data.
Account Information: Username, password, security questions, customer preferences, and saved settings.
Transaction Data: Products viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled, as well as past order history.
Communications: Any information included in your correspondence with us, such as customer support inquiries and feedback.
Device Information: Details regarding your device, web browser, network connection, IP address, and other unique digital identifiers.
Usage Data: Information regarding your interactions with the Services, including how and when you navigate or interact with our website.
Sources of Personal Information
We collect personal information through the following channels:
Directly from you: When you register an account, browse or use the Services, place an order, contact customer support, or otherwise provide your details.
Automatically through the Services: Collected from your device when you interact with our website, including via cookies, log files, and similar tracking technologies.
From our service providers: Third-party partners authorized to process data on our behalf, including e-commerce platforms, secure payment gateways, and courier/logistics providers.
From commercial partners and third parties.
How We Use Your Personal Information
Depending on your interactions with us and the Services you use, we process personal information for the following purposes:
Providing, Customizing, and Improving the Services: Fulfilling our contractual obligations, processing payments, completing and dispatching orders, saving your preferences, sending order/account notifications, managing returns and exchanges, facilitating customer reviews, and creating a tailored shopping experience.
Marketing and Advertising: Sending promotional communications via email, SMS, or postal mail, and displaying targeted online advertisements for our products in accordance with your communication preferences.
Security and Fraud Prevention: Verifying customer accounts, securing payment transactions, detecting and preventing unauthorized, fraudulent, or malicious activity, and protecting our platform integrity.
Customer Communication: Providing support, responding to inquiries, and maintaining our commercial relationship with you.
Legal Compliance: Complying with applicable laws, regulatory obligations, and lawful requests from legal or governmental authorities.
Disclosure of Personal Information
We may disclose your personal information to third parties for legitimate business purposes governed by this Privacy Policy, including:
Service Providers: Vetted third parties performing operational services on our behalf (e.g., IT hosting, payment processing, data analytics, customer support, cloud storage, order fulfillment, and logistics).
Marketing Partners: Commercial partners assisting with advertising and marketing campaigns, subject to their respective privacy notices.
With Your Consent: When you explicitly request or authorize us to share information with third parties, such as freight couriers or integrated social media plugins.
Corporate Transactions & Legal Protection: In connection with business transfers (such as mergers or asset sales), compliance with legal obligations, or the enforcement and defense of our legal rights and those of our users.
Third-Party Websites and Links
Our Services may contain links to external websites or digital platforms operated by third parties. If you follow links to external sites not owned or controlled by Karepidis Estate, we strongly encourage you to review their specific privacy policies. We accept no responsibility or liability for the privacy or security practices of third-party platforms.
Children's Privacy
Our Services are not intended for use by minors, and we do not knowingly collect personal information from children under the age of majority. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately to request its deletion.
Security and Data Retention
While we implement robust security safeguards, no electronic transmission or digital storage method is 100% secure, and we cannot guarantee absolute data security. The retention period for your personal information is determined by factors such as the active duration of your account, ongoing service delivery, legal and tax compliance obligations, and dispute resolution requirements.
Your Rights and Choices (GDPR Compliance)
If you are a resident of Greece, the European Economic Area (EEA), or the United Kingdom, you are protected under the General Data Protection Regulation (GDPR) and are entitled to exercise the following rights:
Right of Access: Request confirmation and access to the personal data we hold about you.
Right to Erasure (Right to be Forgotten): Request the deletion of your personal data under certain conditions.
Right to Rectification: Request the correction of inaccurate or incomplete personal information.
Right to Data Portability: Obtain a structured, machine-readable copy of your personal data or request its transfer to another data controller.
Right to Object & Restrict Processing: Object to or request the limitation of our processing of your personal data for specific purposes.
Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these statutory rights, please reach out via the contact information provided below. We will never discriminate against you for exercising your data protection rights.
Complaints and Regulatory Oversight
If you have any concerns regarding our data processing practices, please contact us directly. You also have the right to lodge a formal complaint with your local supervisory authority (for Greece: the Hellenic Data Protection Authority – HDPA / ΑΠΔΠΧ, www.dpa.gr).
International Data Transfers
Your personal data may be transferred, stored, and processed outside your country of residence. When transferring personal data outside the European Economic Area (EEA), we ensure adequate data protection safeguards by relying on approved mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs).
Updates to this Privacy Policy
We reserve the right to update this Privacy Policy periodically to reflect operational, legal, or regulatory modifications. Any updated version will be posted on this website along with the revised "Last Updated" date.
Contact Us
For the purposes of applicable data protection legislation, Karepidis Estate is the Data Controller of your personal information. If you have questions regarding this Privacy Policy or wish to exercise your rights, please contact us:
Telephone: +30 28933 09002
Email: info@ploumioliveoil.com
Postal Address: Pretoria, Heraklion, Crete, P.C. 700 10, Greece
